Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3232203d3e20323637343230.roa
File:                     34352e3233352e3136302e302f32322d3232203d3e20323637343230.roa (raw, json)
Hash identifier:          401+NXGDkHmHDoxKTRP93BxT+7K7BXlM8calkAXQo4s=
Subject key identifier:   2A:15:AB:DC:17:F8:90:3B:87:97:2D:6C:6F:F0:9F:46:09:70:16:FB
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       0EAF578B8738FA39E6D5D50228856BB33D46C5F9
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3232203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:58:45 +0000
ROA not before:           Wed 28 Feb 2024 13:53:45 +0000
ROA not after:            Wed 26 Feb 2025 13:58:45 +0000
asID:                     267420
IP address blocks:        45.235.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:af:57:8b:87:38:fa:39:e6:d5:d5:02:28:85:6b:b3:3d:46:c5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:53:45 2024 GMT
            Not After : Feb 26 13:58:45 2025 GMT
        Subject: CN=2A15ABDC17F8903B87972D6C6FF09F46097016FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:25:27:e0:ac:9b:db:37:81:d1:b0:4f:14:
                    35:c5:a9:16:d9:4e:c4:de:5c:0f:67:08:d3:f1:54:
                    58:c4:ca:a8:78:41:16:02:67:c6:6f:36:e5:7e:6a:
                    96:bd:af:68:19:f8:69:1e:3b:49:cf:00:90:dd:81:
                    25:39:7f:05:d0:96:22:59:0d:9c:e8:c3:43:98:90:
                    82:75:fd:6e:75:fd:5f:d8:fe:89:de:a5:d8:1e:33:
                    6b:66:41:15:a9:32:74:95:05:ad:d8:ab:43:a9:8c:
                    de:ff:25:dc:43:54:57:70:e1:6a:f2:de:aa:f9:fa:
                    26:b4:37:a5:22:71:39:1a:c7:d6:1b:ab:24:f3:1d:
                    54:c6:e8:70:fa:e8:ca:d7:4f:6c:db:f9:cf:ff:b3:
                    ef:51:7c:ca:df:0c:f8:07:a8:b1:ac:ef:a5:d9:04:
                    78:0f:c9:19:fc:dc:8b:a6:99:bd:6f:ff:3e:2e:77:
                    b5:e3:df:da:67:4d:1c:71:00:83:a9:b4:a3:b6:15:
                    0f:75:6b:5d:3a:0a:d8:3e:e9:d9:8f:84:9f:e6:ed:
                    69:12:5d:7f:e0:3c:d7:3e:de:47:6d:21:bb:f0:d8:
                    f1:98:f7:97:ab:2b:39:65:22:1e:40:68:9f:84:1b:
                    08:5e:af:5e:d6:1a:9a:58:fe:68:d6:a6:25:c5:2c:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:15:AB:DC:17:F8:90:3B:87:97:2D:6C:6F:F0:9F:46:09:70:16:FB
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3232203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:9c:5d:d5:93:bb:c4:47:21:32:47:c3:33:b0:9a:78:ff:b2:
         39:c9:ce:9c:63:0c:fb:70:11:ce:f1:65:e0:54:4e:fb:0a:f8:
         80:78:c7:09:b3:f7:5d:fd:c0:21:94:3d:99:a3:16:47:6c:c3:
         22:6c:33:7f:ad:2c:b8:09:85:68:02:3b:e8:6b:7e:a7:b9:93:
         07:11:f1:03:25:c0:cf:ea:68:a6:a2:3a:c2:8e:99:e9:eb:b7:
         d6:4e:79:e8:9d:4e:ff:33:9e:0a:48:84:48:9c:b0:8c:92:1b:
         08:6e:93:49:71:f3:0e:12:f9:d3:f6:fc:c3:0b:3a:4b:ee:58:
         b8:b5:98:e0:a1:ec:00:9a:fb:b0:24:59:18:48:af:87:25:bc:
         20:b7:33:cb:7d:23:38:fa:0e:cd:f4:6a:95:5d:0d:58:6d:2a:
         da:6c:a1:cd:8c:95:37:16:64:7d:c8:fc:91:68:38:33:0f:fb:
         fe:c5:6c:83:3e:cf:99:fd:b2:9e:e7:32:ca:40:7f:71:1b:ad:
         3e:87:fb:d4:e5:b7:6e:a7:15:7f:d9:61:b5:3b:d3:8a:cd:fc:
         13:7d:27:a6:38:84:76:2f:6a:a9:57:d6:06:be:8b:2f:80:e3:
         01:89:74:75:68:e4:2c:f0:8a:52:4f:fe:47:76:b1:ea:49:04:
         b1:48:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org