Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32342d3234203d3e20323637323531.roa
File:                     34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (raw, json)
Hash identifier:          Z0zRbPyF3abyf+L/FtquOk37s1TuMv+UsKvOdggkrrA=
Subject key identifier:   83:11:D6:47:55:D9:F3:57:E3:D0:1A:28:DE:51:24:E9:F4:4B:BA:B9
Certificate issuer:       /CN=9C9296102315824CFD263B973FA8E26ADEAD1475
Certificate serial:       3C709AFA007965A7FFB4E0DE439994792C104690
Authority key identifier: 9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32342d3234203d3e20323637323531.roa
Signing time:             Thu 15 Feb 2024 18:00:02 +0000
ROA not before:           Thu 15 Feb 2024 17:55:02 +0000
ROA not after:            Thu 13 Feb 2025 18:00:02 +0000
asID:                     267251
IP address blocks:        45.232.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:70:9a:fa:00:79:65:a7:ff:b4:e0:de:43:99:94:79:2c:10:46:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C9296102315824CFD263B973FA8E26ADEAD1475
        Validity
            Not Before: Feb 15 17:55:02 2024 GMT
            Not After : Feb 13 18:00:02 2025 GMT
        Subject: CN=8311D64755D9F357E3D01A28DE5124E9F44BBAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:36:1d:87:91:2d:9c:49:25:3b:fa:ff:f5:
                    21:af:1e:b9:2f:61:88:39:e3:e2:fb:30:a0:0f:53:
                    bf:67:83:d1:91:3d:58:19:fd:a8:0f:f7:57:fc:3c:
                    f4:a3:9b:43:a2:f0:fa:48:d1:93:5b:57:f3:22:80:
                    14:55:f4:0b:f2:fd:be:51:aa:c0:81:13:24:22:8a:
                    85:c5:24:21:bd:47:6e:e2:6e:73:1b:f1:f0:87:01:
                    d2:66:eb:90:c6:76:76:3a:c7:d7:3b:7c:e3:86:f1:
                    11:cc:8f:0b:cc:6d:c1:0f:4a:ba:bf:77:59:a7:e5:
                    e7:b4:a7:fd:8a:94:7b:8e:23:2c:26:0f:a4:0e:34:
                    cc:45:7e:72:18:ac:30:28:5a:5e:98:72:fd:ed:29:
                    19:ee:95:51:03:90:8f:a1:44:b5:98:ee:1f:ee:65:
                    7a:60:e8:0b:d4:76:fb:51:d2:e2:20:99:ee:13:67:
                    8a:b2:c5:3a:f7:ee:97:11:b0:a4:67:9f:83:1c:c3:
                    d9:92:c7:09:0e:31:57:b8:3b:fc:14:1b:4e:84:04:
                    f5:41:e5:a5:12:bf:2e:23:b4:c9:e8:63:cc:bd:44:
                    3e:2a:64:ab:fa:19:82:b3:97:ac:b7:2d:8b:83:94:
                    3f:c2:14:d9:51:78:60:aa:b9:4f:80:87:f3:ff:18:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:11:D6:47:55:D9:F3:57:E3:D0:1A:28:DE:51:24:E9:F4:4B:BA:B9
            X509v3 Authority Key Identifier:
                keyid:9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32342d3234203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:5f:d5:25:7a:30:fe:98:c4:da:83:5d:f8:2a:33:51:17:63:
         30:b7:61:41:a5:37:1d:a8:5d:50:54:9e:2a:5b:05:f3:48:e8:
         1b:f5:ac:f5:46:ff:e9:8e:8e:eb:fb:23:e8:bc:67:26:b6:95:
         5e:c6:06:d9:3f:5a:58:94:5e:b9:8d:4f:37:50:1c:fe:52:74:
         96:0d:13:7a:11:da:e6:23:ae:0b:23:99:b8:58:fb:48:99:74:
         73:a0:b7:50:44:e6:3d:b0:e6:01:d3:81:d7:c2:cc:c0:9b:3f:
         f1:fe:e1:6f:7c:d0:d6:e7:ea:28:33:fa:0c:36:bf:9e:82:f6:
         c2:5d:95:ca:06:ae:dd:22:a8:06:7d:28:41:d1:5a:55:29:17:
         21:08:bb:a4:da:79:46:28:97:c0:d2:a4:e8:62:f2:64:0b:8f:
         c6:6b:52:c2:ca:f7:21:f2:1e:18:11:5d:da:fe:ab:ad:ba:db:
         9d:63:58:42:cc:77:e7:12:62:60:99:d2:66:dd:d0:5f:7d:b8:
         07:d3:98:1c:c2:89:75:eb:23:fa:04:8e:42:2e:f8:fe:e7:70:
         62:1d:23:d0:52:6d:dd:9c:d6:3f:f9:1f:02:ad:dd:e2:a4:2b:
         b3:5e:fe:95:c8:ab:98:a8:fc:1c:fb:a6:d7:2a:c5:6c:f1:0a:
         04:59:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org