Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          5/kz6TUQ2LOAJ9ocJjMHrdOW2/1J3PyyCnUWmBrGz98=
Subject key identifier:   D3:23:03:F7:5F:96:B9:A6:85:7C:65:2D:26:16:8F:BD:D5:F0:A7:65
Certificate issuer:       /CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Certificate serial:       01064D0D7D27CB4F5371DFFA2D60BE5D29547B62
Authority key identifier: CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 18 Dec 2023 19:37:14 +0000
ROA not before:           Mon 18 Dec 2023 19:32:14 +0000
ROA not after:            Mon 16 Dec 2024 19:37:14 +0000
asID:                     268746
IP address blocks:        45.171.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:06:4d:0d:7d:27:cb:4f:53:71:df:fa:2d:60:be:5d:29:54:7b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
        Validity
            Not Before: Dec 18 19:32:14 2023 GMT
            Not After : Dec 16 19:37:14 2024 GMT
        Subject: CN=D32303F75F96B9A6857C652D26168FBDD5F0A765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:5a:ea:6e:79:75:4b:46:fa:6f:7a:71:9d:
                    de:30:55:33:9f:84:1b:7e:36:ba:80:a4:bc:13:e8:
                    b9:ab:19:a1:2c:79:38:0c:4d:2c:34:81:c6:d7:79:
                    b0:3d:3d:9e:4c:40:1d:96:ce:39:c7:e5:d3:f8:29:
                    d9:9c:2e:c2:e5:08:94:1e:b5:5b:c7:5b:df:38:e9:
                    a9:84:f3:4f:ca:0e:9e:d2:86:6c:28:ea:f9:ae:02:
                    9e:1e:8c:8d:37:10:6c:06:ac:f1:01:ab:fb:cb:b5:
                    f0:6d:64:53:65:aa:41:1a:15:bf:d4:1d:e2:ac:ed:
                    27:95:a7:6d:e4:0d:c4:00:49:39:e5:bc:90:1c:ba:
                    fd:e8:d1:7e:a0:e8:95:02:e0:ed:c6:2d:c0:32:2e:
                    96:5e:f1:f0:90:74:42:70:5c:8a:7b:30:1a:13:e0:
                    4c:4f:f4:74:e7:79:8f:c7:81:40:1c:3a:a7:be:d0:
                    48:ef:ed:5b:b8:f5:18:c8:47:46:6f:f3:11:90:7b:
                    86:73:56:d9:f8:05:85:fe:79:05:79:d5:49:c0:9e:
                    43:ff:08:a6:ea:12:89:03:65:53:bb:61:99:1c:fc:
                    52:68:c2:15:50:94:57:50:db:b6:9c:5e:34:b6:69:
                    5c:3b:74:24:8d:26:24:65:ed:8d:94:e7:ee:43:75:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:23:03:F7:5F:96:B9:A6:85:7C:65:2D:26:16:8F:BD:D5:F0:A7:65
            X509v3 Authority Key Identifier:
                keyid:CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:6f:c9:54:24:52:7e:9c:3a:8e:24:1c:8b:f1:85:0f:9b:
         a5:41:ef:48:45:90:88:fc:b0:8e:a5:5e:d5:cb:dd:a6:3f:2b:
         e3:13:b0:22:13:62:05:0a:25:e9:f1:4b:3e:64:68:05:38:42:
         4b:b2:e1:6f:5b:7c:93:61:54:63:ac:12:60:5b:5c:3d:39:ae:
         44:87:1e:7a:96:0a:f8:07:1c:46:a6:96:23:49:a4:f6:61:ac:
         af:02:ca:df:fd:a9:c6:b0:58:44:a4:44:bd:2d:38:a9:08:e6:
         f4:19:f8:90:c3:65:3f:33:f6:d2:7a:4a:b3:b6:ef:ef:f1:76:
         10:cb:f0:6a:b1:1a:82:8e:48:55:0e:aa:65:84:d1:bb:6d:5a:
         53:da:5b:29:07:c2:50:c1:ff:6f:8a:53:05:82:1f:66:da:8c:
         29:64:bb:5a:0f:b8:a6:0d:cb:02:59:2a:2c:65:29:fe:ba:96:
         8e:4f:75:82:12:44:d6:2d:3d:1e:4d:53:4f:5d:90:9b:da:7d:
         ba:76:b1:09:18:ef:fe:fe:fd:db:ac:69:d8:ad:12:cf:82:cb:
         4d:d7:c2:39:42:3a:47:1c:e7:ba:eb:fc:29:03:76:95:5f:bf:
         d8:af:23:b9:5c:cd:1c:94:0e:59:7b:91:6f:4a:e5:65:10:98:
         11:fa:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org