Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37392e302f32342d3234203d3e20323637323936.roa
File:                     34352e3233332e37392e302f32342d3234203d3e20323637323936.roa (raw, json)
Hash identifier:          oRNsvpzyWfQi2kEhFwJ4QxmYAB6uGqkgeCdH7s9RlEw=
Subject key identifier:   22:E0:BB:20:FC:35:A4:B3:96:07:57:7C:EC:CA:96:07:BA:05:05:84
Certificate issuer:       /CN=F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47
Certificate serial:       1A1C0614A65123B8CDB73BDA1ABDF2D3CC3D57C1
Authority key identifier: F0:D2:D6:58:1E:C2:A7:A4:B1:58:70:9A:A4:0F:4D:6F:A7:86:FF:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37392e302f32342d3234203d3e20323637323936.roa
Signing time:             Thu 29 Jun 2023 15:16:57 +0000
ROA not before:           Thu 29 Jun 2023 15:11:57 +0000
ROA not after:            Thu 27 Jun 2024 15:16:57 +0000
asID:                     267296
IP address blocks:        45.233.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:06:14:a6:51:23:b8:cd:b7:3b:da:1a:bd:f2:d3:cc:3d:57:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47
        Validity
            Not Before: Jun 29 15:11:57 2023 GMT
            Not After : Jun 27 15:16:57 2024 GMT
        Subject: CN=22E0BB20FC35A4B39607577CECCA9607BA050584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:3a:44:c0:23:3c:8e:cb:d0:d5:d9:9e:8b:
                    63:49:89:a3:f7:5c:ea:c4:12:1a:e8:eb:77:94:84:
                    f9:17:3c:42:3e:ae:40:f4:d0:e2:dd:33:f7:e2:14:
                    c1:db:ff:e3:94:35:d7:db:82:ec:ca:cf:02:30:20:
                    2d:39:2d:fb:ea:72:84:5b:b4:b5:14:56:f9:d9:12:
                    24:fa:19:78:28:e5:cb:01:16:4c:52:43:af:28:3e:
                    72:fc:d5:bc:19:1b:0b:b3:53:77:75:01:ff:98:53:
                    22:2c:9a:66:7d:62:38:9c:c7:9c:d2:72:53:1a:cc:
                    7c:94:83:78:83:62:e9:1f:04:97:dc:d1:42:49:f6:
                    c2:ce:7a:2e:8f:3b:7d:7e:57:f9:d2:48:9d:f8:75:
                    89:1f:60:86:58:b6:b0:5f:db:7d:60:7e:eb:77:6f:
                    63:0f:2a:dd:53:bd:74:6b:95:42:75:d0:23:5a:d6:
                    20:9c:ff:22:a3:15:09:33:18:e1:1c:5f:ff:39:64:
                    a3:d8:fa:43:a5:7c:3c:9e:88:ca:e5:5b:0c:5c:2a:
                    2b:63:1d:0f:9d:4b:cb:34:9c:f3:55:e1:29:55:3e:
                    ce:9c:6b:93:74:84:4f:be:1f:ec:38:6a:24:0e:66:
                    27:c5:2f:a3:ca:51:65:90:63:e9:10:a6:e7:68:96:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E0:BB:20:FC:35:A4:B3:96:07:57:7C:EC:CA:96:07:BA:05:05:84
            X509v3 Authority Key Identifier:
                keyid:F0:D2:D6:58:1E:C2:A7:A4:B1:58:70:9A:A4:0F:4D:6F:A7:86:FF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37392e302f32342d3234203d3e20323637323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:b6:20:94:c3:a5:8f:c9:aa:a0:07:11:6c:a3:38:13:d8:
         de:6c:4c:6f:6b:da:aa:0f:b1:9a:42:af:d0:95:8c:8f:9e:1f:
         19:b6:99:be:04:87:d1:f4:fa:34:c4:c2:40:a5:77:d3:d3:3b:
         f6:f3:e2:06:6b:53:47:c1:f4:40:ea:13:1f:c4:77:37:98:1c:
         37:c3:2c:0e:9f:a2:0f:b7:33:ee:5b:22:f3:93:f8:f0:4e:e5:
         7b:31:01:f4:b8:84:0d:6a:82:07:0b:dd:03:f9:88:b4:8c:fc:
         0e:63:27:fe:72:9f:a8:f4:62:74:9f:f2:30:c0:c7:f9:2e:4c:
         f2:5e:9d:a1:6b:3c:19:50:51:e4:03:39:91:8e:e0:d7:c8:a5:
         cb:a7:7b:0b:82:73:ae:72:ad:e5:e6:3e:7d:e2:a1:11:d6:5d:
         8c:5a:26:c6:b7:9f:c6:09:d8:de:02:ea:f6:56:f1:5e:49:cb:
         43:52:2c:11:ab:2d:ee:57:b5:45:f9:39:8e:ee:6e:d5:ed:13:
         93:0a:f2:6b:6f:1f:a9:1e:e3:7d:76:dd:7f:a6:85:97:d3:01:
         36:29:b8:45:12:25:ad:cf:a5:b0:50:d9:62:7b:22:a6:10:65:
         ae:b4:95:af:fe:9f:05:b7:ce:fb:65:cb:a7:ad:30:ab:df:0d:
         05:f3:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org