Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234372e302f32342d3234203d3e20323636393939.roa
File:                     34352e3232362e3234372e302f32342d3234203d3e20323636393939.roa (raw, json)
Hash identifier:          bV+mAT7BpdmOWdYVamr1Q3NpSNUOuQv80zuZVeTqCqY=
Subject key identifier:   CF:CA:29:C5:69:01:FB:07:F1:CE:57:01:57:E1:5C:96:A2:3B:3B:F5
Certificate issuer:       /CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
Certificate serial:       264A4D180920EDD7D45671BC1AFEF1B73A528D1A
Authority key identifier: A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234372e302f32342d3234203d3e20323636393939.roa
Signing time:             Sun 18 Sep 2022 19:51:27 +0000
ROA not before:           Sun 18 Sep 2022 19:46:27 +0000
ROA not after:            Sun 17 Sep 2023 19:51:27 +0000
asID:                     266999
IP address blocks:        45.226.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4a:4d:18:09:20:ed:d7:d4:56:71:bc:1a:fe:f1:b7:3a:52:8d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
        Validity
            Not Before: Sep 18 19:46:27 2022 GMT
            Not After : Sep 17 19:51:27 2023 GMT
        Subject: CN=CFCA29C56901FB07F1CE570157E15C96A23B3BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:eb:82:16:fc:2b:d0:b4:16:df:f0:03:45:
                    f4:76:6d:63:33:9a:c7:21:a2:fd:82:70:97:ac:b4:
                    ff:b1:5a:d0:04:41:b1:bb:22:85:45:c3:8d:c9:37:
                    9e:9b:8f:29:99:ba:c0:e0:1d:ce:81:e3:45:bc:20:
                    1a:ca:0a:e9:c4:6d:9f:ca:b4:d4:33:ad:5d:b5:c3:
                    98:de:12:52:39:47:7c:81:15:3e:5c:a0:91:39:41:
                    5c:15:5c:ef:1b:a3:7f:8d:8f:36:a3:de:8e:57:a3:
                    34:a0:9f:2d:da:34:76:11:d9:52:4c:9d:b8:be:70:
                    bf:c3:32:20:cc:af:17:49:59:1b:75:08:cb:ec:2a:
                    63:a8:73:e3:0e:33:a3:ae:da:c9:5c:35:ef:03:ef:
                    c4:fa:c1:ab:d6:ed:67:1a:2e:97:f5:a0:36:35:60:
                    be:a0:7d:40:1b:95:09:94:ec:ac:7f:e2:ce:6e:a4:
                    57:49:05:9e:1b:ef:1b:97:c1:bf:07:ba:e3:36:c7:
                    ac:bc:8f:e4:52:15:25:43:41:87:3e:da:eb:ea:e0:
                    ad:84:dc:c1:d8:9e:82:c7:5c:ca:3e:05:cb:1c:12:
                    45:0d:c0:35:57:24:59:09:fd:bc:ec:30:b6:c5:ec:
                    1d:cc:ce:cc:1d:1a:53:1d:66:bc:32:26:21:11:ba:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CA:29:C5:69:01:FB:07:F1:CE:57:01:57:E1:5C:96:A2:3B:3B:F5
            X509v3 Authority Key Identifier:
                keyid:A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234372e302f32342d3234203d3e20323636393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:39:ba:2b:af:6f:08:e2:79:35:ef:37:83:be:c3:b2:4e:f0:
         6f:45:d9:76:c8:6d:65:96:c2:89:b7:e8:cf:00:a7:ac:7d:ce:
         3b:ae:88:fe:17:48:2e:27:ef:d6:9c:b1:df:1a:40:da:4b:39:
         fc:46:33:af:3b:67:b9:ef:64:aa:37:69:3d:18:2d:3a:96:63:
         a9:d9:93:64:fb:ef:81:d1:2e:42:cc:98:c2:bb:49:d8:7d:6e:
         18:37:79:40:a2:8a:f2:04:84:b7:43:73:ec:91:17:dc:a4:03:
         d8:89:92:b1:44:98:ad:70:ce:a5:18:50:96:84:02:09:41:3b:
         dc:8f:dc:46:d4:ba:2e:71:75:77:f7:3e:91:36:79:58:6b:23:
         d3:43:7f:e3:bf:59:cc:84:e1:e8:da:6c:43:3f:4e:7a:4f:26:
         9b:40:5f:6f:ed:05:69:b7:17:ac:d9:b1:ac:88:d4:7f:e3:14:
         45:b4:8d:56:d9:5e:2a:9a:4f:39:87:50:10:82:a0:54:d5:9c:
         ce:17:d8:53:e8:0f:1c:2b:aa:25:03:f0:bd:fa:85:fb:dd:b2:
         91:bc:c5:fa:ce:e4:cd:8e:ba:9e:29:a4:ef:87:00:cf:44:75:
         2b:23:26:f4:9b:0b:7d:05:49:70:28:97:af:b2:5b:54:a8:61:
         84:f0:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org