Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235332e302f32342d3234203d3e20323637333839.roa
File:                     34352e3233342e3235332e302f32342d3234203d3e20323637333839.roa (raw, json)
Hash identifier:          kn/8akd2kszStwkfMrdhkCOEklKsYy1brShMDKNwmG0=
Subject key identifier:   D0:50:5D:11:23:CA:DF:34:CC:CE:6D:15:1E:FE:83:48:36:51:D0:E5
Certificate issuer:       /CN=2A6CA127604E6E591F99AF4B48C15BCC747F3831
Certificate serial:       3C441A64C7E58DA0EFB19122280E13A7E2D75CD2
Authority key identifier: 2A:6C:A1:27:60:4E:6E:59:1F:99:AF:4B:48:C1:5B:CC:74:7F:38:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235332e302f32342d3234203d3e20323637333839.roa
Signing time:             Sat 12 Nov 2022 16:39:21 +0000
ROA not before:           Sat 12 Nov 2022 16:34:21 +0000
ROA not after:            Sat 11 Nov 2023 16:39:21 +0000
asID:                     267389
IP address blocks:        45.234.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:44:1a:64:c7:e5:8d:a0:ef:b1:91:22:28:0e:13:a7:e2:d7:5c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6CA127604E6E591F99AF4B48C15BCC747F3831
        Validity
            Not Before: Nov 12 16:34:21 2022 GMT
            Not After : Nov 11 16:39:21 2023 GMT
        Subject: CN=D0505D1123CADF34CCCE6D151EFE83483651D0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6e:c6:b0:1c:09:88:a0:c7:39:28:2e:c2:bf:
                    40:d7:50:34:61:45:6e:1a:e6:38:20:c3:8f:12:8c:
                    18:99:ea:1c:d0:b4:c4:75:86:ea:c3:1d:13:4a:70:
                    dc:f0:be:fd:5b:97:e3:19:26:70:34:e8:6a:5d:bd:
                    3e:d1:58:78:fe:0e:25:99:34:45:04:72:f6:3e:08:
                    cf:52:fe:42:98:89:c4:be:03:47:5e:df:4d:a9:75:
                    b9:bd:a6:da:a8:40:b3:40:81:93:f3:d8:d2:bb:d7:
                    81:de:84:00:f3:1e:05:90:7f:6f:37:1a:27:42:91:
                    cb:c9:c4:c2:4e:d9:2c:f2:af:ad:bf:00:c6:b4:38:
                    08:f4:22:2d:f7:c7:d1:e6:57:c7:42:8c:d4:5f:b5:
                    aa:29:de:b0:0d:05:bc:0c:61:05:e9:75:84:ef:d8:
                    ee:94:24:28:61:02:37:32:2a:9b:ed:40:4b:a2:33:
                    ff:ef:33:2c:f1:7b:0c:40:a4:bf:6f:d2:01:cf:5d:
                    c0:88:96:75:7d:9a:b2:f0:ba:d4:b5:6a:3e:ed:3b:
                    67:a2:ed:05:4c:a9:a9:67:5d:89:c5:76:85:51:af:
                    ba:21:5c:60:0a:e7:ac:ef:ad:84:37:39:97:f3:88:
                    88:25:d9:7f:45:79:6d:da:5e:2a:25:60:4b:ca:0c:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:50:5D:11:23:CA:DF:34:CC:CE:6D:15:1E:FE:83:48:36:51:D0:E5
            X509v3 Authority Key Identifier:
                keyid:2A:6C:A1:27:60:4E:6E:59:1F:99:AF:4B:48:C1:5B:CC:74:7F:38:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235332e302f32342d3234203d3e20323637333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:a2:f3:2d:06:94:71:f6:be:a3:75:4f:e1:83:5d:b4:14:f8:
         fe:79:56:b4:58:14:02:77:3b:fe:99:7d:35:b6:1a:ec:2a:52:
         03:ea:e4:82:2c:08:48:8a:cf:41:63:2d:dd:0a:92:3b:83:d8:
         fd:4b:58:23:74:0f:21:11:a8:81:e8:d9:12:62:58:2c:ac:f9:
         b2:44:61:99:c3:5d:41:aa:c9:73:96:8b:16:45:05:e0:7a:8a:
         6e:ab:fc:dc:fe:34:32:1b:b2:d5:c9:00:77:b6:aa:25:7e:d4:
         ac:2c:22:0b:3e:68:f3:2e:c9:57:a5:5f:9e:7b:f7:ad:d8:cc:
         7a:58:09:1b:fa:28:da:3a:94:0e:54:4a:c3:03:39:9d:57:cd:
         6a:51:7f:ad:e5:a9:45:5e:2c:a1:d2:89:22:90:a8:d0:f0:ee:
         89:28:cb:c8:d7:68:c4:47:ff:ba:c9:aa:1e:7c:09:f5:14:96:
         85:9d:0e:00:6a:9d:1b:5d:b6:23:c3:a0:69:65:03:8b:e1:97:
         fa:3e:f5:08:c9:af:aa:02:4d:93:51:fa:ba:dc:4b:ce:ce:a5:
         c8:c3:68:dd:22:28:1b:be:f7:61:28:3f:f0:1f:cb:85:80:51:
         a5:d2:7a:9f:bb:75:4e:a5:ea:60:b7:7e:93:ac:1e:49:9c:8d:
         1b:71:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org