Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39332e302f32342d3234203d3e20323637343130.roa
File:                     34352e3233352e39332e302f32342d3234203d3e20323637343130.roa (raw, json)
Hash identifier:          9+wbpAB5TIfIRP67duIOdaP7vhPlvj+t7B0FTLvHVNU=
Subject key identifier:   E1:45:4A:B4:E0:DE:99:A0:5A:EC:C2:8C:1A:2F:BA:28:B3:1B:9A:AB
Certificate issuer:       /CN=CB82F441A2AB9E9D367CB186AB1C39CCFD34599C
Certificate serial:       31ED9AD95D972676C62925D010C2BF3658C8DBD5
Authority key identifier: CB:82:F4:41:A2:AB:9E:9D:36:7C:B1:86:AB:1C:39:CC:FD:34:59:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39332e302f32342d3234203d3e20323637343130.roa
Signing time:             Sun 25 Jun 2023 16:25:41 +0000
ROA not before:           Sun 25 Jun 2023 16:20:41 +0000
ROA not after:            Sun 23 Jun 2024 16:25:41 +0000
asID:                     267410
IP address blocks:        45.235.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ed:9a:d9:5d:97:26:76:c6:29:25:d0:10:c2:bf:36:58:c8:db:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB82F441A2AB9E9D367CB186AB1C39CCFD34599C
        Validity
            Not Before: Jun 25 16:20:41 2023 GMT
            Not After : Jun 23 16:25:41 2024 GMT
        Subject: CN=E1454AB4E0DE99A05AECC28C1A2FBA28B31B9AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:24:ae:8e:d9:a2:80:6a:a6:61:80:e7:6e:
                    6f:f8:3d:ed:be:8c:af:33:c2:85:72:4e:6d:f4:0c:
                    4f:4e:99:95:c1:b9:50:86:5f:89:ff:8f:96:b1:f2:
                    98:4c:8f:c1:31:d1:ab:7b:58:0a:b9:2d:35:ea:8a:
                    2e:3a:7f:c7:52:94:f0:e6:ba:ee:3e:d8:b3:77:a3:
                    80:2e:dc:8a:e4:aa:e5:1b:ac:70:8a:08:95:cb:75:
                    3f:db:54:82:57:58:2e:6b:5c:bd:cf:27:fd:0f:b3:
                    2a:35:bd:57:5a:5d:74:57:80:af:8a:d9:f4:f1:c1:
                    28:cd:46:b1:fa:f2:db:f0:97:de:f1:34:3e:24:5a:
                    76:2c:fb:16:68:51:b6:9e:78:7b:f7:b0:42:f4:34:
                    c6:66:b9:85:5c:36:b1:71:0e:c8:70:a9:25:e0:a4:
                    80:2d:ca:35:e3:c0:ab:d2:68:d6:82:4b:22:6c:cd:
                    9f:fc:9d:20:76:90:97:c3:ba:d9:d2:12:47:62:7e:
                    e8:cc:28:5b:8e:bc:de:15:5f:f8:a1:ed:d7:d5:d0:
                    31:d4:f2:22:5f:58:8e:4a:85:ba:b9:68:e6:10:c7:
                    85:75:ff:d3:f3:a5:54:ca:36:10:de:cc:27:8f:99:
                    c5:fe:f9:a0:e2:3f:42:52:54:9b:fb:99:5b:d3:72:
                    fb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:45:4A:B4:E0:DE:99:A0:5A:EC:C2:8C:1A:2F:BA:28:B3:1B:9A:AB
            X509v3 Authority Key Identifier:
                keyid:CB:82:F4:41:A2:AB:9E:9D:36:7C:B1:86:AB:1C:39:CC:FD:34:59:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39332e302f32342d3234203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c8:ae:45:59:fb:cc:2d:66:f3:21:90:b4:ac:7d:40:ef:53:
         cb:d0:50:42:62:00:1e:2e:cd:b3:ed:bb:ac:60:32:77:9c:0f:
         e2:ec:81:7c:71:04:50:6b:4d:cc:33:b6:7d:68:ef:9d:be:f9:
         ac:42:39:32:9f:64:a1:65:b2:da:db:20:25:e7:cd:8f:0a:77:
         6d:6d:d0:dd:7c:2a:8d:c5:a8:f3:e1:13:2f:85:67:de:c8:90:
         e2:d3:5b:f7:de:1f:9c:08:27:c9:ed:d2:86:dc:1d:ea:21:06:
         5c:2e:8f:88:b6:27:cd:53:11:88:26:b4:e8:6c:90:7d:dd:53:
         fb:4c:b3:0b:63:b7:61:3e:94:cc:3e:8b:f9:77:bc:37:54:06:
         0c:a5:2a:43:4c:11:cf:c9:90:84:8d:67:fe:12:f7:f1:be:4b:
         72:6d:71:34:d1:44:c7:e6:aa:f7:ba:19:72:96:76:9e:dc:d4:
         0f:04:07:a3:19:e6:a3:eb:1b:1f:c2:ab:1e:c6:a1:e7:5b:87:
         c2:3a:0a:d6:0e:3f:72:e4:06:9b:b7:50:89:a5:99:7f:c3:7a:
         0a:1e:40:29:43:98:b5:f0:57:9c:0c:ef:d9:b5:ab:e6:58:8e:
         0a:4d:1a:0f:2d:b7:8f:34:70:f2:41:25:b3:09:ef:8c:09:bf:
         fd:20:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org