Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138392e3132382f32352d3235203d3e20323637333438.roa
File:                     34352e3233332e3138392e3132382f32352d3235203d3e20323637333438.roa (raw, json)
Hash identifier:          1xaRzs59dicja2y3zivUgQnx2K4KP4QXAO6vUol6StA=
Subject key identifier:   52:EF:7C:F5:B8:53:46:7D:42:79:F8:2A:8F:BB:CA:CF:FC:81:06:85
Certificate issuer:       /CN=E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377
Certificate serial:       4C3B35EFF47D1D946F819DC7CF2D17F3E40F0362
Authority key identifier: E5:67:0D:DE:4A:17:4A:43:C6:A5:D5:CC:4A:EE:E3:DD:71:51:23:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138392e3132382f32352d3235203d3e20323637333438.roa
Signing time:             Tue 09 Jan 2024 18:04:17 +0000
ROA not before:           Tue 09 Jan 2024 17:59:17 +0000
ROA not after:            Tue 07 Jan 2025 18:04:17 +0000
asID:                     267348
IP address blocks:        45.233.189.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3b:35:ef:f4:7d:1d:94:6f:81:9d:c7:cf:2d:17:f3:e4:0f:03:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377
        Validity
            Not Before: Jan  9 17:59:17 2024 GMT
            Not After : Jan  7 18:04:17 2025 GMT
        Subject: CN=52EF7CF5B853467D4279F82A8FBBCACFFC810685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:a4:2c:64:49:33:fc:28:60:4d:9c:ff:5d:
                    a4:18:9c:09:d4:34:cd:65:d1:18:3e:b5:4a:6a:28:
                    89:6d:78:92:c1:bd:19:5e:7d:46:f2:0d:7a:ba:67:
                    23:9d:07:97:d0:93:73:14:e6:b8:61:0c:6f:0e:0d:
                    68:13:e2:32:21:35:6a:af:65:b1:22:a5:b4:f4:e5:
                    b8:33:4f:ac:09:c5:ee:ab:1e:26:12:75:23:57:1b:
                    61:9b:fa:e3:b3:9b:a3:87:a1:8c:13:46:59:13:bc:
                    05:f8:8b:8d:62:de:79:6a:87:40:cf:fa:0d:96:cf:
                    f7:3a:f4:a0:d3:f0:c1:27:93:f1:72:cc:50:ed:02:
                    76:1d:b0:fc:ce:bf:eb:93:15:82:9f:23:0d:2e:01:
                    07:70:fc:fc:c1:5d:ba:6e:96:d7:1c:17:49:a9:1d:
                    71:6a:47:48:16:80:ad:99:38:21:dd:4e:82:dd:dd:
                    55:79:60:19:59:c0:55:d8:e2:ab:cb:2e:32:5b:59:
                    ea:c9:f9:d7:b6:84:b6:14:f9:ee:85:b2:fc:12:f5:
                    75:e6:3f:8b:4f:e8:e2:72:14:ca:3d:be:1a:b4:4d:
                    5d:a6:64:7c:be:66:e0:73:db:2f:14:71:85:9f:81:
                    63:6a:08:61:3c:a6:7a:19:c3:c0:99:d9:ec:db:5a:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:7C:F5:B8:53:46:7D:42:79:F8:2A:8F:BB:CA:CF:FC:81:06:85
            X509v3 Authority Key Identifier:
                keyid:E5:67:0D:DE:4A:17:4A:43:C6:A5:D5:CC:4A:EE:E3:DD:71:51:23:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138392e3132382f32352d3235203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.189.128/25

    Signature Algorithm: sha256WithRSAEncryption
         70:a7:af:ae:7b:57:21:92:30:46:1a:30:01:1b:53:18:5f:a2:
         c5:a2:c6:ce:9a:51:da:d4:87:85:8b:7f:b6:e2:52:3e:a7:b0:
         37:93:77:52:5d:74:bb:41:86:ca:61:aa:7f:8f:e2:51:ff:e2:
         94:70:90:62:11:54:d3:6a:c6:e6:37:b1:76:ba:24:27:5c:5f:
         cb:20:dd:50:da:a7:4b:c4:8e:fe:f7:f1:85:b0:3e:d2:d2:9c:
         33:12:7d:3f:2d:54:51:0a:dc:4c:44:8f:3f:ef:59:61:91:9b:
         08:01:dc:35:56:ce:9e:86:4c:90:52:2f:6d:5a:00:b6:73:14:
         22:c0:de:f0:2a:8d:d9:33:30:05:ed:ff:1f:54:08:af:0e:91:
         dc:49:1c:f7:fc:76:70:22:45:7c:b1:7c:e1:4d:78:ed:42:cb:
         f0:6d:b3:c8:d5:a4:25:e6:31:a4:06:1d:73:43:56:ff:14:e0:
         a4:5d:38:2e:2d:85:79:6d:d2:1a:32:58:61:5d:aa:bc:12:b4:
         49:ff:56:05:16:bb:1d:cc:85:08:2c:95:cc:b4:bc:0d:79:b3:
         1e:ad:bb:2a:95:62:69:9b:b5:d2:e9:bd:4d:d5:dd:b5:22:23:
         aa:a3:ea:e6:b3:f1:3e:52:49:cf:2d:d9:44:34:84:26:22:8e:
         ab:18:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org