Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa
File:                     34352e3233312e33362e302f32322d3234203d3e20323637323230.roa (raw, json)
Hash identifier:          le7+5aNgwBvkDQt17SAe/TKvnWozl44BTCMJ2CIp958=
Subject key identifier:   C4:4D:77:71:05:1E:6F:5A:B4:FF:C9:06:53:1F:4E:3B:D2:DD:D6:8F
Certificate issuer:       /CN=B33C25921027247BC1670F9F632C29DCD8B421BB
Certificate serial:       2123479B45A1CDFA5DD53F2B9B9076DFAD605A04
Authority key identifier: B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa
Signing time:             Mon 11 Sep 2023 14:00:00 +0000
ROA not before:           Mon 11 Sep 2023 13:55:00 +0000
ROA not after:            Mon 09 Sep 2024 14:00:00 +0000
asID:                     267220
IP address blocks:        45.231.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:23:47:9b:45:a1:cd:fa:5d:d5:3f:2b:9b:90:76:df:ad:60:5a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33C25921027247BC1670F9F632C29DCD8B421BB
        Validity
            Not Before: Sep 11 13:55:00 2023 GMT
            Not After : Sep  9 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:f8:e5:9d:49:52:5c:8c:0f:d0:5a:1f:f8:
                    48:62:34:83:9e:c5:c0:e1:80:72:31:49:ae:dc:08:
                    52:fc:22:e1:e0:f3:94:d8:02:66:38:e1:5b:89:9c:
                    ed:b9:32:83:a7:2f:84:b3:4a:7e:86:38:f3:d0:8e:
                    e2:ee:7e:80:08:dd:f7:3a:6f:ff:3f:8a:d8:6b:b7:
                    f6:a6:47:6b:75:32:51:7f:a6:77:1f:b6:05:29:98:
                    6d:80:d3:fb:05:35:8e:94:de:68:3b:f5:f1:6e:4f:
                    38:0b:be:3a:d6:3a:e1:e4:1e:b0:6b:a1:7e:c4:b0:
                    30:96:a1:c4:01:fd:6f:25:c6:cc:2b:32:78:06:d1:
                    ff:25:ab:a7:7b:56:1c:21:c1:7c:4d:4d:f7:cd:17:
                    8d:f8:68:27:43:72:ec:98:81:8a:87:de:b1:21:97:
                    50:28:6c:04:2a:bb:a0:dc:ec:54:68:e0:c5:62:2f:
                    f5:2e:dc:a5:1b:ed:6d:b8:82:bf:64:fd:8c:de:16:
                    4b:81:d6:89:04:9e:c0:cb:d9:70:d2:bc:a2:94:77:
                    9c:4d:e1:f0:e7:1a:a7:b2:a9:53:fb:af:53:00:05:
                    02:95:b1:a8:f3:6c:46:21:46:98:2f:cc:5b:41:a5:
                    79:b5:f7:55:72:2e:14:b5:cf:35:84:f7:fa:55:2a:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4D:77:71:05:1E:6F:5A:B4:FF:C9:06:53:1F:4E:3B:D2:DD:D6:8F
            X509v3 Authority Key Identifier:
                keyid:B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:18:68:a0:e6:d5:8f:b9:f4:25:03:a8:92:5d:7e:02:05:
         9f:e9:93:29:19:a0:a9:0e:c3:6c:1e:d0:03:12:cc:71:98:22:
         90:4e:fc:bd:41:77:15:fc:c3:a6:c5:06:36:21:64:ed:69:99:
         78:f9:60:3b:d2:91:21:35:e4:14:54:e2:f8:0a:21:eb:b4:39:
         88:28:23:6f:30:c1:39:5c:28:86:15:f1:3b:c6:1b:ed:46:5b:
         a6:46:4a:8c:2f:24:2b:59:de:30:f9:d8:5f:74:9b:f6:2d:68:
         ae:da:69:27:91:6e:35:c3:e2:5a:64:59:a4:2b:24:62:c1:93:
         22:5d:0b:17:38:3b:42:fe:7b:38:6f:49:c0:27:34:d1:33:8d:
         4a:e5:10:f7:0e:bb:c9:bc:7f:d5:20:60:a4:8f:29:c1:95:d9:
         f7:76:55:9d:34:2a:5f:d6:93:0b:92:06:1e:50:08:f3:36:ef:
         5d:59:4c:84:76:1e:06:23:0a:f3:a2:be:9f:3d:86:59:b0:46:
         9f:11:09:4a:5d:4b:2e:23:7a:31:a0:79:8b:34:04:42:bb:d7:
         5f:9e:1e:d5:18:f3:49:3d:2e:d5:90:5c:ce:1b:16:a7:ca:8d:
         0d:65:d5:fe:9d:b6:62:39:92:7c:ff:74:ee:cc:59:1c:2a:55:
         c1:59:74:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org