Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
File:                     34352e3233322e33362e302f32322d3234203d3e20323637323432.roa (raw, json)
Hash identifier:          5X27fbRY3Cns7XhdpxkGwH2k4crjXDXkLtZYjAJDgTg=
Subject key identifier:   E0:17:7A:14:E4:F3:18:47:10:9B:5A:18:18:3D:13:E6:5A:91:11:C7
Certificate issuer:       /CN=BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13
Certificate serial:       56BD1DBA0D384D7BD0170150BC5DED954AA8F1DE
Authority key identifier: BA:4E:F3:88:A4:6A:F3:E0:3A:8B:6D:2D:69:A4:1E:F3:8A:C6:DB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
Signing time:             Fri 22 Dec 2023 20:37:06 +0000
ROA not before:           Fri 22 Dec 2023 20:32:06 +0000
ROA not after:            Fri 20 Dec 2024 20:37:06 +0000
asID:                     267242
IP address blocks:        45.232.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bd:1d:ba:0d:38:4d:7b:d0:17:01:50:bc:5d:ed:95:4a:a8:f1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13
        Validity
            Not Before: Dec 22 20:32:06 2023 GMT
            Not After : Dec 20 20:37:06 2024 GMT
        Subject: CN=E0177A14E4F31847109B5A18183D13E65A9111C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:0d:8e:25:63:44:a0:d7:06:e5:e1:ba:98:
                    cb:ff:d6:e1:10:b2:55:41:5c:5c:d4:92:cc:df:2a:
                    cc:00:eb:48:c5:1f:51:38:a0:09:67:03:b5:c7:1d:
                    8c:85:c6:bd:97:f4:9c:bf:ea:a9:2c:10:f1:45:0f:
                    ce:b3:e1:27:d2:7d:12:07:68:82:28:52:d3:9f:99:
                    23:66:7f:0f:c6:40:93:8e:c5:ff:65:9f:77:ee:b1:
                    ec:50:4a:b0:51:34:66:59:c0:30:c2:63:11:72:74:
                    cb:9b:8d:67:1b:d6:d4:24:a3:92:61:99:cb:27:97:
                    08:4e:fa:53:fe:63:4a:9c:d4:e1:72:bf:92:75:b5:
                    ba:b0:2f:f6:1b:2b:7b:3c:90:f6:1a:e5:d1:13:26:
                    10:69:f3:13:2a:94:49:7f:39:45:26:a2:45:e5:4c:
                    9d:ba:8a:a9:55:34:cf:2e:d3:db:e2:c0:3d:86:1d:
                    c8:a7:d0:0b:42:49:3b:3b:3a:6e:55:e4:96:ce:6e:
                    69:f9:d3:87:48:95:18:7f:9f:3a:78:0e:16:f2:c4:
                    7c:2a:c6:cd:55:02:9d:48:82:7b:a7:7b:8a:01:f6:
                    fa:54:e1:db:3e:84:1c:e0:31:3d:b3:ca:37:e9:97:
                    47:53:7d:18:04:26:18:d9:66:8d:b3:3a:84:96:b4:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:17:7A:14:E4:F3:18:47:10:9B:5A:18:18:3D:13:E6:5A:91:11:C7
            X509v3 Authority Key Identifier:
                keyid:BA:4E:F3:88:A4:6A:F3:E0:3A:8B:6D:2D:69:A4:1E:F3:8A:C6:DB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:20:da:be:fb:e3:76:2a:18:31:90:1d:78:98:32:e4:7a:
         c8:38:3d:f0:77:2f:85:e9:f6:fe:f2:6f:36:13:f8:9d:ba:a7:
         c4:58:9a:06:11:14:c6:83:42:e5:fa:bd:0a:9e:7e:a1:a2:7b:
         ea:7d:13:e0:7e:67:a0:0c:37:39:c2:b1:8f:07:6c:75:e1:de:
         47:7a:7c:f8:8f:1f:10:4a:dc:ba:e4:df:86:d2:55:d9:9f:ba:
         e2:c1:43:36:f4:b6:81:fe:f9:68:43:3f:37:fd:6b:76:a8:1f:
         b6:1b:5c:1e:cd:36:ec:33:5b:19:1a:3c:22:55:d8:12:0c:61:
         1a:ed:3f:30:fd:44:ba:8b:e6:46:86:68:a6:c6:ea:77:02:c5:
         7a:96:bb:e2:ec:d3:84:88:81:a3:34:fd:82:30:86:fd:22:08:
         b6:88:74:d4:9f:c8:07:56:62:d4:e6:a1:12:c8:27:11:ee:90:
         75:f8:fc:b6:9c:39:f7:d5:d3:1e:c5:4e:80:55:1b:18:66:d4:
         6b:a5:27:9d:d9:e8:39:82:5b:27:03:66:b4:f2:57:e5:10:24:
         f6:6a:65:f9:91:e6:1d:06:1a:b6:45:9f:26:c9:ea:97:83:a2:
         76:9f:70:be:15:e9:fb:66:37:74:ae:2d:eb:e9:5e:cd:5c:f5:
         6a:bd:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org