Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32332d3233203d3e20323637323531.roa
File:                     34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (raw, json)
Hash identifier:          rIPM/Oj7R/Q/mzMfgSDwi0qNi0N00HugcS1kjlCQXpA=
Subject key identifier:   9D:B1:2F:78:B6:DB:B6:74:8F:0D:7C:D7:08:62:A0:5F:19:12:95:0A
Certificate issuer:       /CN=9C9296102315824CFD263B973FA8E26ADEAD1475
Certificate serial:       03B277B2AE42AC923B965BB480D40983CDEED18E
Authority key identifier: 9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32332d3233203d3e20323637323531.roa
Signing time:             Thu 15 Feb 2024 18:00:03 +0000
ROA not before:           Thu 15 Feb 2024 17:55:03 +0000
ROA not after:            Thu 13 Feb 2025 18:00:03 +0000
asID:                     267251
IP address blocks:        45.232.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b2:77:b2:ae:42:ac:92:3b:96:5b:b4:80:d4:09:83:cd:ee:d1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C9296102315824CFD263B973FA8E26ADEAD1475
        Validity
            Not Before: Feb 15 17:55:03 2024 GMT
            Not After : Feb 13 18:00:03 2025 GMT
        Subject: CN=9DB12F78B6DBB6748F0D7CD70862A05F1912950A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:26:64:f0:b6:4e:b5:09:4e:54:e9:7f:fc:
                    ef:38:3d:1d:07:ea:66:43:0b:c0:22:15:0a:41:47:
                    c5:6c:02:8f:71:03:30:09:05:f7:2a:49:dd:66:00:
                    ab:72:f1:31:19:e6:ac:d6:a7:34:e4:2e:6e:e3:73:
                    0b:1c:ef:5a:47:38:a8:15:c2:8b:d5:92:01:f3:f4:
                    5d:e5:84:2b:7a:1e:30:07:69:eb:87:03:e9:8c:c6:
                    e0:a0:41:50:67:9e:22:5a:8f:77:0e:ec:56:f9:cb:
                    28:16:fc:a2:52:d4:70:02:50:c6:d4:e3:c3:55:c6:
                    62:09:ca:49:f9:2b:33:1c:7c:e6:a5:8b:f9:a6:db:
                    f6:f6:27:c5:3b:57:69:5e:ac:8d:c5:ac:c4:ab:61:
                    41:aa:51:82:b4:18:17:b7:08:a3:08:1a:be:29:7c:
                    bf:99:a3:4e:15:25:8c:35:d6:c0:b1:d7:d0:3d:8a:
                    ae:88:c7:11:c0:d4:61:02:32:25:29:9d:ac:08:5a:
                    26:e4:e4:0c:c1:d0:b0:41:d0:57:65:84:c0:57:bb:
                    e8:63:df:82:39:ea:6f:80:bc:08:1c:31:53:6a:d8:
                    46:02:72:ba:29:1f:5a:ae:54:b2:bb:f6:71:ea:d5:
                    d7:61:da:51:54:64:c4:f8:6d:dc:70:4e:1e:fa:ef:
                    eb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B1:2F:78:B6:DB:B6:74:8F:0D:7C:D7:08:62:A0:5F:19:12:95:0A
            X509v3 Authority Key Identifier:
                keyid:9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32332d3233203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:b7:54:5f:6a:28:62:f3:13:a8:f2:39:de:c0:24:b2:8b:
         6a:1c:98:07:84:2d:00:11:66:f7:e2:0b:dc:dd:41:93:31:26:
         5b:83:6a:35:b8:1a:09:ec:77:22:73:94:3b:b1:25:ba:37:12:
         f5:7f:99:39:1e:8d:2c:df:de:d7:7f:b5:0a:3b:d9:35:68:6f:
         63:93:da:e1:81:10:f8:77:52:97:cc:b3:8a:25:03:3b:89:58:
         ac:ee:56:4b:80:b2:41:24:7d:63:4b:7a:bf:83:c0:43:f0:88:
         4e:d4:0f:c0:18:f0:80:3e:d3:15:fe:5f:03:79:2e:48:57:ce:
         fc:b5:c7:39:0d:2e:02:c6:62:61:16:af:1e:b5:39:0a:f8:c6:
         52:4b:b1:25:c8:43:72:d2:70:96:6a:4a:3c:40:58:49:08:58:
         4b:71:b8:b4:37:14:58:50:26:23:db:71:eb:f4:3d:a7:ab:8d:
         76:26:19:d2:4a:22:e9:f3:ad:5f:ec:14:7d:c8:16:4d:c6:af:
         cf:71:c7:b9:f8:49:58:6c:a2:1a:a0:0c:58:a4:96:08:6f:0f:
         d9:86:4b:f5:c1:37:21:94:09:a8:b8:e7:52:78:07:41:1d:e3:
         dd:ba:f9:66:57:c6:01:f5:66:8b:c9:05:5c:08:64:bc:37:94:
         35:1a:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org