Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37362e302f32332d3233203d3e20323637323936.roa
File:                     34352e3233332e37362e302f32332d3233203d3e20323637323936.roa (raw, json)
Hash identifier:          aCV+P7HWllbz4hEtzbm+3wLA9e9llmtC8dc1zRyHLOg=
Subject key identifier:   5E:22:2D:74:6E:04:A2:68:DB:5D:89:F7:B2:9F:C7:03:77:1B:B4:2A
Certificate issuer:       /CN=1082D004EEF136A4F997116E5B9BC5AA859752B8
Certificate serial:       27F75C16A85D546E5BF050754FA2E99CAC47E98C
Authority key identifier: 10:82:D0:04:EE:F1:36:A4:F9:97:11:6E:5B:9B:C5:AA:85:97:52:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37362e302f32332d3233203d3e20323637323936.roa
Signing time:             Wed 14 Jun 2023 03:00:00 +0000
ROA not before:           Wed 14 Jun 2023 02:55:00 +0000
ROA not after:            Wed 12 Jun 2024 03:00:00 +0000
asID:                     267296
IP address blocks:        45.233.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f7:5c:16:a8:5d:54:6e:5b:f0:50:75:4f:a2:e9:9c:ac:47:e9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1082D004EEF136A4F997116E5B9BC5AA859752B8
        Validity
            Not Before: Jun 14 02:55:00 2023 GMT
            Not After : Jun 12 03:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:3d:47:df:49:c3:8f:ec:10:8d:3a:99:6c:
                    b1:99:39:18:38:f9:4d:0f:f0:7b:4a:18:68:6f:b4:
                    86:cd:90:02:57:64:c8:ab:35:a4:6a:e4:b4:8b:7a:
                    73:ed:48:0d:fe:70:26:a9:a7:3b:aa:ba:45:31:b8:
                    29:a4:53:27:30:9d:8d:ba:97:8d:c7:ad:4e:0b:d4:
                    76:7e:dc:52:6d:fe:43:c9:78:6e:a0:46:99:b9:5c:
                    3a:e3:d4:8d:42:7d:64:6d:ff:e3:6c:4f:b5:7a:d0:
                    b2:86:77:fd:01:52:50:98:0c:27:00:53:4f:ca:cc:
                    07:ac:cf:1b:b2:4c:c5:6e:07:37:ce:bc:3a:fa:ad:
                    97:a0:10:a1:6e:b0:3a:4f:9f:1b:dc:aa:a0:2f:d1:
                    b3:1a:0d:5c:2d:17:7a:ab:8e:1d:5c:7c:72:8f:bd:
                    af:ed:a8:3b:09:6b:43:49:63:c0:11:6a:93:3a:09:
                    f0:7f:2d:fc:31:fe:79:b4:92:3f:e9:3a:f0:b5:60:
                    27:78:07:48:35:22:f6:6e:a9:ce:6b:cc:0b:52:82:
                    82:63:4c:ad:6b:75:f0:fe:de:a8:d5:aa:9d:af:46:
                    df:11:39:25:2f:14:93:b3:5b:0b:b8:8d:7e:1e:59:
                    a1:e7:cf:72:14:64:b6:9b:09:05:9f:83:a5:02:47:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:22:2D:74:6E:04:A2:68:DB:5D:89:F7:B2:9F:C7:03:77:1B:B4:2A
            X509v3 Authority Key Identifier:
                keyid:10:82:D0:04:EE:F1:36:A4:F9:97:11:6E:5B:9B:C5:AA:85:97:52:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37362e302f32332d3233203d3e20323637323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:89:62:59:ca:0b:5e:0e:16:cd:b8:4b:87:5a:43:e2:6c:93:
         ca:6e:e8:76:53:43:ed:a5:f1:63:6d:53:75:ab:0e:c3:af:0c:
         f2:c1:d6:f4:01:cf:32:23:c1:07:c3:5f:9f:41:62:38:a9:94:
         ec:2d:6f:cf:93:5a:9a:f9:a8:6d:f5:90:42:4a:c2:5b:03:0d:
         65:87:a9:8a:7a:7e:21:e8:af:06:46:aa:5b:b3:0d:14:19:72:
         2d:e7:0a:d7:8c:78:c2:53:0e:76:68:75:6b:a1:45:76:18:01:
         2e:1f:d9:07:98:c8:77:d9:a6:69:05:58:55:ce:fe:6d:2c:ff:
         31:39:57:65:c4:a3:49:fa:14:69:08:2a:db:bb:4e:5d:b2:09:
         9f:2d:c4:ab:a6:39:33:39:65:05:be:ac:e7:94:29:6b:f7:d5:
         a8:d2:e7:c5:a4:cc:62:4c:1d:83:6f:82:32:8a:92:4d:53:2f:
         a0:f7:61:33:1a:67:eb:5d:e9:79:f9:7b:30:5f:5a:69:c6:45:
         9c:63:c8:10:ee:a3:9f:bf:09:a9:29:d2:6d:66:52:05:95:e2:
         94:49:40:86:89:2f:e1:a3:2f:c2:fd:8b:c5:99:36:dc:af:98:
         56:b2:bb:6a:50:b6:4e:a1:ed:35:47:70:7c:ba:47:80:dc:88:
         1d:f4:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org