Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/34352e3233372e3134342e302f32322d3332203d3e203631353933.roa
File:                     34352e3233372e3134342e302f32322d3332203d3e203631353933.roa (raw, json)
Hash identifier:          EJBza207XKpKgEMvInvp6suxCWcwvBrUsub0M7Mc45s=
Subject key identifier:   BE:F1:91:E0:10:DE:C9:69:DA:EF:EB:B9:48:89:46:FE:86:27:88:AA
Certificate issuer:       /CN=2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE
Certificate serial:       1CF4BB1CBE58418906253C22D43B0AA37D89287D
Authority key identifier: 2E:9F:82:AA:9A:B3:00:4C:AA:6C:86:8A:08:0C:6D:FA:63:15:B5:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/34352e3233372e3134342e302f32322d3332203d3e203631353933.roa
Signing time:             Sun 09 Jul 2023 05:42:54 +0000
ROA not before:           Sun 09 Jul 2023 05:37:54 +0000
ROA not after:            Sun 07 Jul 2024 05:42:54 +0000
asID:                     61593
IP address blocks:        45.237.144.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f4:bb:1c:be:58:41:89:06:25:3c:22:d4:3b:0a:a3:7d:89:28:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE
        Validity
            Not Before: Jul  9 05:37:54 2023 GMT
            Not After : Jul  7 05:42:54 2024 GMT
        Subject: CN=BEF191E010DEC969DAEFEBB9488946FE862788AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:35:23:96:6a:a7:e4:0d:ef:3f:4e:44:6a:
                    04:72:0b:50:40:dd:d7:f7:f0:71:b1:aa:7b:63:ca:
                    b7:2c:fa:0f:33:05:84:ba:b2:ce:38:f7:55:88:ea:
                    ba:b4:2f:31:1a:e8:a8:50:8f:39:f3:b4:e3:1e:d0:
                    0b:4d:03:8c:1b:2f:5a:48:d0:39:86:61:42:60:5a:
                    ea:54:b3:19:af:cb:b6:07:8c:d2:cb:4d:84:c9:14:
                    bd:74:c8:26:6d:bc:2f:ae:1a:30:6e:2e:8a:41:a0:
                    b9:99:d6:45:c2:bc:8a:32:de:f0:7f:6e:f5:6a:e6:
                    40:f3:14:1a:05:73:6e:c9:29:7e:e0:35:f5:ed:fb:
                    5a:ea:4a:13:38:8a:c4:1c:77:6d:1e:44:cb:3c:e3:
                    0f:76:5a:f8:6e:63:23:c5:66:36:af:03:41:25:71:
                    36:93:80:99:ec:ba:bd:e0:80:b3:08:43:20:6f:6a:
                    6a:a9:f9:ae:94:7c:3a:16:4f:9c:cb:47:84:59:5d:
                    11:3f:f2:5c:45:41:e2:aa:b4:76:b7:05:30:d4:3d:
                    4a:8f:a8:ed:a0:51:90:d7:57:f4:a1:22:9e:7b:93:
                    7c:cd:8f:a6:fd:f7:68:05:33:9c:be:c0:42:23:80:
                    73:e7:8f:3f:d3:a1:16:70:8c:0b:2b:b2:67:39:32:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F1:91:E0:10:DE:C9:69:DA:EF:EB:B9:48:89:46:FE:86:27:88:AA
            X509v3 Authority Key Identifier:
                keyid:2E:9F:82:AA:9A:B3:00:4C:AA:6C:86:8A:08:0C:6D:FA:63:15:B5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/34352e3233372e3134342e302f32322d3332203d3e203631353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:11:93:1d:06:32:42:49:73:84:13:1d:ca:b0:1d:bd:14:6c:
         5e:6f:9d:f6:0b:1b:b6:e0:ac:86:a1:88:43:6a:39:77:a6:43:
         ca:e8:f8:92:ed:bf:87:4e:f3:d0:90:2a:ee:f5:e9:14:8e:96:
         2f:30:09:27:bb:7e:79:c3:d3:14:8b:ec:a1:64:cc:bb:9e:04:
         4b:a1:c2:8a:eb:4b:ea:d9:df:d9:f9:6e:19:d8:b3:4e:96:cd:
         a5:78:27:18:ea:76:67:30:26:e9:d6:cd:89:06:f8:cf:ac:66:
         cd:83:41:f6:8f:73:8e:db:8f:60:6b:5a:7b:fc:a3:89:f0:80:
         58:40:06:1f:74:4a:23:5e:3e:47:b3:68:c8:ad:2d:d7:15:a5:
         55:09:87:f5:35:fe:3d:bb:9f:14:6a:40:1a:19:a0:f4:0f:1c:
         93:39:05:bd:cd:d1:9a:cd:2c:c1:dc:5b:ff:27:f3:ec:2d:f6:
         1e:c5:23:c8:b0:5e:64:3c:0e:16:bf:14:04:29:d4:97:b7:4c:
         9e:ff:5e:de:e1:f2:87:f6:c7:01:80:35:94:43:bc:19:43:36:
         bc:ae:f3:0b:05:9e:11:4e:55:f9:1a:26:d5:4a:1d:9c:58:1e:
         7f:14:1c:ab:bb:8e:df:b5:2a:15:6a:cf:ea:e1:f5:a3:fe:f4:
         2d:12:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org