Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa
File:                     34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa (raw, json)
Hash identifier:          Z2ZUundO+wruAkiWam08+6dB6IsWzR+eXfoCAFg7Wa4=
Subject key identifier:   2D:5D:97:51:1F:A1:BE:3B:81:9C:17:33:3B:C8:1A:F1:F1:26:02:25
Certificate issuer:       /CN=2B824C0913CF71BF98C43B15F88AD1598E1E47DE
Certificate serial:       1540F88A9DB73282091BDC73F8CA7A7EA42A198C
Authority key identifier: 2B:82:4C:09:13:CF:71:BF:98:C4:3B:15:F8:8A:D1:59:8E:1E:47:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa
Signing time:             Tue 06 Jun 2023 13:17:14 +0000
ROA not before:           Tue 06 Jun 2023 13:12:14 +0000
ROA not after:            Tue 04 Jun 2024 13:17:14 +0000
asID:                     267665
IP address blocks:        45.224.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:40:f8:8a:9d:b7:32:82:09:1b:dc:73:f8:ca:7a:7e:a4:2a:19:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B824C0913CF71BF98C43B15F88AD1598E1E47DE
        Validity
            Not Before: Jun  6 13:12:14 2023 GMT
            Not After : Jun  4 13:17:14 2024 GMT
        Subject: CN=2D5D97511FA1BE3B819C17333BC81AF1F1260225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:eb:84:21:76:3c:69:99:95:ce:23:a1:a6:
                    19:1b:5f:45:3e:1e:10:98:d0:68:c5:d3:38:ba:b0:
                    82:cf:6a:a2:6f:37:ce:a3:d8:00:ba:db:0d:c3:e5:
                    ce:80:41:eb:0b:99:7d:b0:eb:2e:13:ff:bd:59:66:
                    4a:c4:3c:e5:28:25:22:4f:1f:6c:7d:22:6d:a5:32:
                    a6:45:44:1b:b9:39:20:29:62:3d:32:fc:17:81:90:
                    68:14:9b:7d:c7:fb:28:da:13:6a:8e:da:f3:dc:c2:
                    8a:df:65:6c:41:1a:9c:b5:78:ca:0d:71:73:8e:c4:
                    40:50:30:49:23:dd:08:f4:2f:13:f4:48:0c:0a:56:
                    f7:11:9d:18:3b:d6:e0:17:80:c5:98:04:18:dc:1d:
                    23:2d:5c:aa:15:49:dd:fd:ac:d5:a7:95:a7:2e:21:
                    74:a2:47:a1:fb:69:1f:6a:ba:e8:2c:4e:b3:4a:99:
                    ce:70:ec:74:0d:ba:90:22:c1:4f:a6:11:55:c2:7c:
                    28:19:c6:02:6f:b4:73:cc:f6:3a:c9:2b:df:39:33:
                    39:89:cc:59:a3:15:8f:82:15:ac:52:ce:1c:3a:a9:
                    97:73:67:6c:f0:ee:b0:55:3a:5e:37:bc:38:98:36:
                    86:ed:fd:e9:3f:b1:e9:39:3e:92:c6:3f:1d:c4:d4:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:97:51:1F:A1:BE:3B:81:9C:17:33:3B:C8:1A:F1:F1:26:02:25
            X509v3 Authority Key Identifier:
                keyid:2B:82:4C:09:13:CF:71:BF:98:C4:3B:15:F8:8A:D1:59:8E:1E:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:00:1b:27:c4:60:62:00:6d:13:c2:89:b4:45:b1:f3:1b:7e:
         da:d7:2a:ad:ea:1b:68:98:b8:c1:18:b4:70:04:44:d2:58:f7:
         ef:55:48:29:fa:a1:b0:2d:7b:99:00:cd:de:e9:f2:f2:2a:67:
         60:5f:ab:ae:de:23:70:f1:7d:0a:46:f1:32:f8:30:e6:a1:26:
         b8:0c:11:70:d6:4d:57:ee:79:a9:9f:3e:c8:af:e7:8e:6a:fe:
         bb:da:31:dd:6f:c6:3d:c7:8e:45:67:8d:7e:08:0c:b6:1a:b4:
         b5:e7:3f:f1:a8:87:b9:1f:de:70:d7:3b:69:50:3b:89:ba:54:
         42:f3:8f:49:ee:05:bd:5a:1f:06:f8:1a:5b:f3:5a:75:d3:d9:
         a8:ee:d2:3a:f6:29:49:a8:77:7f:c2:c9:9b:9a:6e:53:cb:92:
         c9:39:6a:af:01:ff:38:7f:50:2b:e5:a6:33:1a:86:22:51:62:
         7b:58:92:df:4d:6f:3a:de:4b:3f:e3:e1:01:d3:a3:c1:58:9b:
         bd:0f:30:50:37:45:92:3a:00:5a:79:e0:87:73:21:ea:67:6f:
         38:1b:1e:59:25:9a:0c:9d:90:e1:87:75:7c:a0:37:b2:7a:d5:
         1b:62:72:96:2d:ac:4c:cb:91:c5:27:63:ff:84:3b:80:3c:fa:
         51:d7:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org