Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37382e302f32332d3233203d3e20323637323936.roa
File:                     34352e3233332e37382e302f32332d3233203d3e20323637323936.roa (raw, json)
Hash identifier:          z2yZcl0EKtp9oC5Kly89OyB0DSnj+1oCjOKocw4PA0w=
Subject key identifier:   B6:4B:21:ED:38:8D:27:65:B1:98:72:F1:02:6B:9C:06:0B:44:EF:34
Certificate issuer:       /CN=1082D004EEF136A4F997116E5B9BC5AA859752B8
Certificate serial:       7F44A7066EE05C154ACE4D05AB93D8ABC3DBFC83
Authority key identifier: 10:82:D0:04:EE:F1:36:A4:F9:97:11:6E:5B:9B:C5:AA:85:97:52:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37382e302f32332d3233203d3e20323637323936.roa
Signing time:             Wed 14 Jun 2023 03:00:00 +0000
ROA not before:           Wed 14 Jun 2023 02:55:00 +0000
ROA not after:            Wed 12 Jun 2024 03:00:00 +0000
asID:                     267296
IP address blocks:        45.233.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:44:a7:06:6e:e0:5c:15:4a:ce:4d:05:ab:93:d8:ab:c3:db:fc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1082D004EEF136A4F997116E5B9BC5AA859752B8
        Validity
            Not Before: Jun 14 02:55:00 2023 GMT
            Not After : Jun 12 03:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:22:73:2d:2b:ee:3c:8a:0d:42:0b:3b:af:
                    88:4f:3a:76:99:a3:65:da:a1:50:60:a8:ca:0e:3a:
                    14:f1:e9:7f:31:f8:3e:da:d2:c1:ad:6a:1a:20:8d:
                    a3:d4:68:30:b7:b3:d9:ac:ed:48:8f:b8:21:9f:14:
                    da:e3:fd:2c:bd:9d:28:84:37:5b:c0:8a:f6:68:17:
                    30:af:8e:bb:5f:ca:7d:c8:06:50:e9:c9:ec:db:a4:
                    0a:a4:c6:0d:65:69:04:12:67:2b:fe:63:55:78:b9:
                    74:bf:17:41:47:c7:dd:b8:c5:93:99:57:a5:3a:b1:
                    5b:6d:15:a1:95:18:e1:45:c5:ef:be:07:68:e0:a8:
                    2d:fd:1f:eb:00:ce:d4:a7:e8:b8:c4:be:ba:9d:d2:
                    21:1b:88:f1:c0:c3:7f:4f:2a:e8:9d:4c:71:8c:f1:
                    7a:3d:c2:3f:90:74:91:08:0a:57:15:28:1a:8c:b5:
                    92:7b:e8:b9:a6:31:23:be:9e:a5:f6:93:a9:c1:0e:
                    b7:a0:f9:12:53:7e:6b:aa:3c:d7:e2:28:a5:a5:48:
                    35:33:54:b1:70:77:57:3a:90:63:f5:d1:0b:7c:5a:
                    f0:74:87:8b:05:3d:19:2e:b6:40:49:98:d4:2b:e0:
                    ac:4d:7d:ee:91:a2:5b:3a:c4:df:a8:56:c9:cd:54:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4B:21:ED:38:8D:27:65:B1:98:72:F1:02:6B:9C:06:0B:44:EF:34
            X509v3 Authority Key Identifier:
                keyid:10:82:D0:04:EE:F1:36:A4:F9:97:11:6E:5B:9B:C5:AA:85:97:52:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1082D004EEF136A4F997116E5B9BC5AA859752B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37382e302f32332d3233203d3e20323637323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:68:b2:6e:6c:0d:a3:ce:1a:9e:35:22:d2:ad:ed:55:63:97:
         14:3d:61:0a:13:e1:00:18:6b:35:2e:a9:d9:0a:1b:20:2e:71:
         2b:fd:7e:be:88:de:7a:b0:9a:ee:2a:61:2b:67:be:a9:ea:1f:
         72:16:c4:dd:bb:66:85:5d:e5:c5:e2:71:33:b1:c8:47:1b:55:
         bf:74:55:a2:33:bd:be:68:a3:6f:d3:85:0a:c8:7a:94:b9:74:
         bd:a6:00:16:81:46:5b:4a:aa:10:7f:1b:78:bf:fd:40:4d:cd:
         2c:29:f0:25:f6:f0:d5:7e:56:3a:a4:b9:5a:f3:59:c1:ca:08:
         e1:69:44:17:8c:56:e5:66:48:6a:71:76:2e:9a:52:37:bf:56:
         77:73:2b:26:f7:28:d0:5a:94:ba:fd:73:71:87:cb:26:15:14:
         9b:39:89:f0:15:91:55:11:c5:09:1b:06:c4:1f:cd:b7:88:35:
         d6:5a:8b:17:d8:ed:35:d9:87:c7:06:c4:4b:13:e8:33:a8:22:
         8a:eb:db:36:2a:ed:d4:e9:4d:22:55:b3:b9:59:c4:97:4a:3f:
         17:27:d1:55:ca:11:0e:83:23:eb:9c:a3:41:09:bb:c0:88:9c:
         8a:a3:df:ea:e3:4a:c5:a9:24:c4:ae:ed:59:20:e5:f5:54:ae:
         b7:f4:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org