Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136332e302f32342d3234203d3e20323637343230.roa
File:                     34352e3233352e3136332e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          3m5lLp1Wt8WG97Lxalka9W267bQt2jhqfZJPU547BY0=
Subject key identifier:   F7:65:6B:18:AB:31:4F:AC:81:B2:C3:FC:FC:36:AD:FD:42:F3:69:DD
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       07DE3E6068A16FE3BEBBC1B4D1E2BFC45E9DE904
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136332e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:59:59 +0000
ROA not before:           Wed 28 Feb 2024 13:54:59 +0000
ROA not after:            Wed 26 Feb 2025 13:59:59 +0000
asID:                     267420
IP address blocks:        45.235.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:de:3e:60:68:a1:6f:e3:be:bb:c1:b4:d1:e2:bf:c4:5e:9d:e9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:54:59 2024 GMT
            Not After : Feb 26 13:59:59 2025 GMT
        Subject: CN=F7656B18AB314FAC81B2C3FCFC36ADFD42F369DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:3b:01:8f:4c:ac:43:af:9b:70:3f:26:ba:
                    19:99:53:c3:30:6e:a8:97:5e:36:e9:b5:f0:f2:eb:
                    9d:9a:85:7f:d7:6a:46:63:6b:63:61:05:1d:59:50:
                    dd:8a:ba:36:e5:b6:5d:59:f9:59:65:e9:09:fe:32:
                    e6:b2:ee:23:f7:f2:41:74:5a:5e:bc:35:2c:f8:2e:
                    72:cd:fb:98:d5:5d:1b:b4:9e:91:f4:d4:7e:87:1d:
                    e0:bc:65:16:c1:13:a2:9e:b0:4f:39:24:07:91:81:
                    2a:2c:0b:d4:70:4c:b1:c3:13:68:2a:d5:39:f6:43:
                    df:6c:ba:98:01:ec:fc:9b:20:63:d4:23:60:bd:7f:
                    ce:20:89:83:25:14:f7:0f:fd:a0:e4:6d:d5:d5:e0:
                    2a:31:73:e5:37:03:6e:81:40:d3:2a:30:82:a1:3c:
                    e4:42:d5:0d:7c:84:59:b1:c2:9a:c6:5a:5b:4d:ed:
                    f4:d1:87:1e:cf:92:03:d3:54:2b:e7:e2:e1:dc:4d:
                    59:1b:00:ee:7a:d4:09:c0:06:49:ca:55:21:8b:a7:
                    c0:e5:99:ca:33:00:10:d3:b0:55:47:9c:47:96:df:
                    19:be:50:0e:6b:b7:30:70:56:02:ff:86:dd:57:87:
                    e3:19:aa:02:c3:eb:31:b1:45:4b:9d:39:a4:03:45:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:65:6B:18:AB:31:4F:AC:81:B2:C3:FC:FC:36:AD:FD:42:F3:69:DD
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136332e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:90:de:78:e8:df:f3:2a:f3:fb:45:44:83:85:5d:94:e7:62:
         26:0a:22:f4:7f:33:a6:ae:dd:8d:ed:25:80:f9:6b:72:b4:01:
         9d:5f:40:dd:81:fb:f2:54:d9:98:fd:e8:21:53:bd:a3:ad:62:
         29:72:5d:98:c6:8d:bf:84:ad:dd:01:a2:49:bb:28:b1:70:3f:
         bc:30:f1:76:12:b2:27:89:c9:a0:a2:ca:e5:11:4c:7b:6c:98:
         62:71:c6:38:73:1c:b7:a8:06:40:01:16:c7:66:c3:e7:12:18:
         63:d8:e8:b2:79:b7:24:b5:4f:e1:3d:f5:08:b5:e1:b0:c5:20:
         4b:ae:72:ae:c9:11:b5:eb:2a:d9:8b:24:7d:d9:a9:cc:66:19:
         f9:f8:c3:8a:54:e9:d8:6e:e2:73:50:8e:bb:9a:c1:47:18:e7:
         67:1f:8f:bc:f1:e7:0f:67:48:98:0b:44:f1:ec:b1:52:81:87:
         a4:77:cf:de:f0:81:04:04:fd:86:ed:8a:d6:bd:a5:84:cd:59:
         ee:1c:6d:9e:78:09:9e:e0:e8:08:6c:7b:2d:16:ae:1e:1d:05:
         49:33:fc:88:80:e0:75:b5:e4:7e:c7:be:d5:e9:9c:20:11:30:
         f6:3f:12:28:8d:65:0e:d2:d1:0e:77:c1:0b:84:b7:53:8b:f0:
         7d:e3:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org