Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa
File:                     34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (raw, json)
Hash identifier:          nj+tcnyD6QCJqNCF3k3IDrIjN0Z27eTkcJHyHn198ic=
Subject key identifier:   A0:5E:3B:40:69:FA:AE:73:AE:46:FE:2B:CD:E7:5E:52:76:C9:83:10
Certificate issuer:       /CN=9C9296102315824CFD263B973FA8E26ADEAD1475
Certificate serial:       69414DF24BB65FCB5608FF98469B9A2D4BE0871B
Authority key identifier: 9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa
Signing time:             Thu 15 Feb 2024 18:00:02 +0000
ROA not before:           Thu 15 Feb 2024 17:55:02 +0000
ROA not after:            Thu 13 Feb 2025 18:00:02 +0000
asID:                     267251
IP address blocks:        45.232.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:41:4d:f2:4b:b6:5f:cb:56:08:ff:98:46:9b:9a:2d:4b:e0:87:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C9296102315824CFD263B973FA8E26ADEAD1475
        Validity
            Not Before: Feb 15 17:55:02 2024 GMT
            Not After : Feb 13 18:00:02 2025 GMT
        Subject: CN=A05E3B4069FAAE73AE46FE2BCDE75E5276C98310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:00:cc:5b:94:d0:75:f1:f6:9f:44:28:b9:
                    1b:f1:9d:c6:fa:58:bc:f8:4b:32:7f:c9:70:9f:f8:
                    f0:b3:39:a6:96:5e:65:6e:d3:15:f8:9a:2b:ee:0b:
                    c7:43:1f:47:06:25:47:67:82:24:a5:e6:28:f1:56:
                    4b:02:61:98:dd:bc:fb:11:65:3a:2b:80:1d:45:0a:
                    36:29:70:8d:ff:ab:d9:cb:c2:cf:dc:0f:bc:ad:fd:
                    93:29:6a:b8:8c:22:75:bc:f2:4f:61:1b:df:82:dc:
                    7a:1d:cb:87:bf:7c:bd:f8:c1:0e:23:18:aa:75:20:
                    25:a7:37:8e:24:e6:1d:c9:cb:6b:d3:17:52:cd:71:
                    53:70:d3:dc:7f:14:29:28:5a:59:ef:6d:46:20:6e:
                    f6:d0:96:fb:d8:48:46:ed:51:f1:c9:4b:e0:bf:14:
                    b3:db:b7:13:04:f9:c6:ce:fc:5f:ec:8a:0a:14:c9:
                    24:35:a2:6d:be:4e:a7:ff:70:0a:2c:7c:03:73:13:
                    d3:63:40:dd:c0:ee:2c:d7:1e:20:5f:54:27:e4:d4:
                    93:3b:c8:e9:58:73:9b:93:eb:72:a1:b7:28:fa:1a:
                    bc:16:c6:89:33:ac:3c:9b:d0:57:2e:c3:85:5b:79:
                    69:2d:62:0c:40:df:88:08:9a:50:d1:42:d7:a7:bf:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5E:3B:40:69:FA:AE:73:AE:46:FE:2B:CD:E7:5E:52:76:C9:83:10
            X509v3 Authority Key Identifier:
                keyid:9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:ff:18:d7:53:8e:51:77:c3:19:1e:be:25:47:3d:7f:7f:
         5c:6b:ac:1d:28:4b:60:d5:3c:d8:8b:14:19:b2:43:c9:cb:5e:
         65:b8:a1:d6:32:5e:26:0a:03:bf:60:58:66:82:6c:6f:b3:d6:
         77:3e:7b:ef:0f:bc:dd:92:b9:16:23:b4:79:b2:46:b3:90:6c:
         3b:bb:46:26:fd:22:28:83:8c:3f:9f:a8:b2:89:61:c8:35:bf:
         5b:79:51:9c:d2:a7:f0:96:89:d7:33:0a:5b:0a:3b:ec:ba:01:
         23:c0:e3:af:a2:d5:09:8c:32:4a:11:33:9c:18:ba:85:f9:88:
         70:a8:3f:4c:96:bc:02:86:25:c2:18:c5:19:f3:9c:6e:85:39:
         a3:ee:81:ae:af:b4:cd:df:20:8d:b0:0c:29:32:db:74:fb:ab:
         32:9d:8b:1a:b6:90:25:0a:9d:4c:77:25:f9:6f:8e:92:7f:6b:
         b8:37:4b:55:13:60:c2:4b:04:e1:1f:48:a4:22:9f:d5:9b:60:
         c4:6c:17:46:ca:f4:bb:1b:8b:68:1c:db:f1:1a:77:da:fc:3c:
         d9:a6:42:a8:2c:aa:34:a2:24:7a:16:71:6f:ae:d2:d4:21:87:
         67:dc:9e:4a:70:9a:37:cc:8f:fb:f3:23:a3:14:26:9e:c4:24:
         72:9f:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org