Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235352e302f32342d3234203d3e20323637333839.roa
File:                     34352e3233342e3235352e302f32342d3234203d3e20323637333839.roa (raw, json)
Hash identifier:          y7A0XN0l2v1k8UQhISXhaq7Zi00toui0LUUlZ7os33Q=
Subject key identifier:   1A:BE:F3:ED:F7:4A:4C:6B:46:25:3C:CB:0B:61:55:46:4D:AC:2C:FF
Certificate issuer:       /CN=2A6CA127604E6E591F99AF4B48C15BCC747F3831
Certificate serial:       2E03EBEFE34B7B902A07F18A7C0CAFE22F0CC1CC
Authority key identifier: 2A:6C:A1:27:60:4E:6E:59:1F:99:AF:4B:48:C1:5B:CC:74:7F:38:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235352e302f32342d3234203d3e20323637333839.roa
Signing time:             Sat 12 Nov 2022 16:39:56 +0000
ROA not before:           Sat 12 Nov 2022 16:34:56 +0000
ROA not after:            Sat 11 Nov 2023 16:39:56 +0000
asID:                     267389
IP address blocks:        45.234.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:03:eb:ef:e3:4b:7b:90:2a:07:f1:8a:7c:0c:af:e2:2f:0c:c1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6CA127604E6E591F99AF4B48C15BCC747F3831
        Validity
            Not Before: Nov 12 16:34:56 2022 GMT
            Not After : Nov 11 16:39:56 2023 GMT
        Subject: CN=1ABEF3EDF74A4C6B46253CCB0B6155464DAC2CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:9a:80:b5:ab:a3:78:37:bb:f0:54:18:24:
                    a5:fe:91:c7:e4:c3:80:44:c8:ed:e0:71:58:07:7a:
                    84:c9:9d:49:d4:8b:3a:98:de:64:e3:1e:8f:96:80:
                    6f:83:01:1f:a3:f8:a6:f9:dc:6e:24:6d:92:d5:27:
                    da:73:82:83:bc:6a:e4:ed:e5:32:b6:ad:9f:18:bc:
                    81:e0:2c:c5:c7:ba:71:00:54:30:c9:14:e3:dc:96:
                    05:e8:93:26:57:e3:b6:b7:be:37:11:b6:7d:0e:d6:
                    54:9c:09:a6:f0:d9:a2:18:bc:76:c9:f5:02:c7:9a:
                    60:78:a0:91:bc:36:d8:1a:23:bf:d8:6f:65:3d:b0:
                    76:17:a3:e4:46:69:ac:f0:ab:6b:78:0e:4a:62:c4:
                    a1:1c:48:8d:6f:7b:35:22:31:de:d3:0d:54:dc:6f:
                    ab:49:af:7e:28:3b:a0:c8:5e:fa:10:5d:2e:72:d7:
                    f4:99:ab:56:e3:0b:15:a2:7d:a8:2c:30:c8:a4:c4:
                    0c:af:0c:06:90:ca:67:da:8c:eb:15:33:5b:3c:0a:
                    46:a6:80:c0:c5:ba:fe:b7:71:e5:fb:2e:f8:51:95:
                    87:38:d4:84:d3:72:50:86:85:ce:54:90:4d:04:6f:
                    8f:26:7d:3f:4c:d2:ee:cb:62:92:5a:d8:14:eb:c3:
                    e8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BE:F3:ED:F7:4A:4C:6B:46:25:3C:CB:0B:61:55:46:4D:AC:2C:FF
            X509v3 Authority Key Identifier:
                keyid:2A:6C:A1:27:60:4E:6E:59:1F:99:AF:4B:48:C1:5B:CC:74:7F:38:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235352e302f32342d3234203d3e20323637333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:68:3f:87:02:01:b2:1a:23:e4:81:fd:ba:9f:ad:81:20:
         dd:17:ed:54:a7:47:1e:9b:8c:2d:c9:f6:41:fb:ef:cb:28:55:
         b5:1c:36:9e:f4:32:1f:5a:f2:00:7e:13:4a:11:8e:ec:b1:ba:
         b4:23:72:21:72:1f:8f:b5:04:b6:7f:23:12:39:ff:bc:56:44:
         a1:9b:31:3d:f9:32:5a:a6:e0:09:9c:2f:27:8f:a2:b9:10:68:
         fd:9f:87:7d:c0:aa:3d:ef:8f:7a:e4:5e:fe:12:9c:d3:1f:64:
         aa:ae:dd:72:05:83:cb:b4:8f:74:5d:a3:11:0c:7c:53:ea:5b:
         e2:f6:38:4e:05:06:24:9d:63:c1:98:c8:db:b4:bf:83:23:9d:
         c5:70:ce:5f:e2:cb:63:46:81:1a:c9:fe:8e:1e:2e:49:7f:5b:
         f5:d3:ff:79:ed:4d:ff:5e:76:d3:f2:8c:d3:b3:4f:71:fe:3d:
         ee:c2:eb:42:12:fb:30:a3:72:02:57:ec:bd:49:9d:5f:b9:8f:
         4b:3e:45:5d:5c:17:e1:ca:96:e8:ad:85:19:a1:3f:46:5b:83:
         df:20:e4:44:06:b9:1a:8b:c9:0e:69:37:09:a9:3c:7e:73:7a:
         0e:cb:fc:aa:d8:ec:d5:49:29:45:09:44:ee:96:e5:cf:d7:14:
         7e:04:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org