Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          Q+6D7+LQZZnl4qdj6wby/0vV4+rt7zuujR2pdMZKXlw=
Subject key identifier:   0F:C2:BA:F2:26:88:A8:77:8F:21:F2:76:BF:05:82:7B:0B:B5:CD:39
Certificate issuer:       /CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
Certificate serial:       02DAD272458BF79BBFAA99100391121A31E50981
Authority key identifier: 30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 04 Sep 2023 20:35:25 +0000
ROA not before:           Mon 04 Sep 2023 20:30:25 +0000
ROA not after:            Mon 02 Sep 2024 20:35:25 +0000
asID:                     268746
IP address blocks:        45.171.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:da:d2:72:45:8b:f7:9b:bf:aa:99:10:03:91:12:1a:31:e5:09:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
        Validity
            Not Before: Sep  4 20:30:25 2023 GMT
            Not After : Sep  2 20:35:25 2024 GMT
        Subject: CN=0FC2BAF22688A8778F21F276BF05827B0BB5CD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:bf:de:de:4f:01:ab:ac:b1:52:43:51:86:
                    41:17:38:1d:51:ee:14:e3:9d:c0:57:8b:31:49:aa:
                    23:f6:03:5e:9f:bb:f9:aa:7d:73:83:50:a6:9f:0d:
                    9c:92:b7:48:26:28:37:51:e7:71:cd:88:94:94:d4:
                    f0:be:11:34:eb:9c:02:13:d7:25:bd:46:eb:67:8a:
                    f8:31:0e:62:3c:92:6e:e4:84:06:30:cf:de:19:ed:
                    3a:78:be:1f:ae:fc:09:b2:1f:23:b0:42:53:95:13:
                    0c:51:90:4c:c5:d7:60:85:42:ce:99:9f:ea:fa:ab:
                    72:32:5f:87:db:b9:18:1a:79:0b:ed:05:d5:03:07:
                    8a:2a:05:77:61:02:8b:c2:e1:aa:04:c0:8d:c0:21:
                    23:78:e8:46:be:b6:17:c2:f7:bc:ee:97:ca:9d:bd:
                    da:4f:88:3a:45:31:fd:17:e7:6f:ea:19:f0:26:3b:
                    fa:1b:38:c7:f7:eb:b8:9f:02:5a:6e:a4:56:f7:ae:
                    66:3c:22:80:df:33:f3:39:e9:9c:4e:87:06:5a:1b:
                    a0:70:6a:61:a1:70:39:0e:67:7a:29:6d:41:3f:ee:
                    54:3f:67:de:06:82:0e:9e:25:ad:ab:c9:dc:ca:e5:
                    bf:52:ba:00:d7:8a:2c:41:36:be:78:37:dd:f3:10:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C2:BA:F2:26:88:A8:77:8F:21:F2:76:BF:05:82:7B:0B:B5:CD:39
            X509v3 Authority Key Identifier:
                keyid:30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:77:3a:b0:ce:8b:42:9d:ed:92:3b:2a:bb:b2:b6:d0:2b:b8:
         ab:5c:2b:92:c0:6b:a6:d5:5d:47:79:69:78:e8:a3:95:e2:f4:
         ba:ba:87:b7:bb:20:b5:9d:7b:a1:5b:a2:80:2b:ad:87:88:2b:
         d2:06:1c:c6:d8:8b:41:40:cf:c4:a3:c7:d5:0a:e4:8a:c3:fc:
         54:18:f7:e1:8b:d9:e6:02:2c:9f:75:59:1e:44:fe:85:64:2f:
         a9:ad:34:73:01:00:58:47:38:20:32:30:52:db:36:2c:03:76:
         44:33:5a:3f:31:ce:ef:8f:7d:62:69:e4:92:5c:91:26:a4:4f:
         13:b2:54:6a:7c:fe:78:de:a3:d1:be:2e:12:d8:5d:3c:1a:83:
         ce:cf:a6:17:8f:e3:7e:e4:4f:8a:aa:bf:1e:90:79:18:91:dd:
         c3:0c:72:af:25:40:52:f6:19:2b:1e:5a:5e:e5:28:8f:e5:de:
         c8:ff:dd:a9:91:2c:d5:55:11:ac:c3:9f:83:b3:97:b5:8e:b5:
         a0:16:e1:85:ce:17:64:2a:47:1d:d3:2e:3c:32:6f:a6:e2:a9:
         3e:d7:f0:b5:94:f6:30:c8:40:53:9e:f3:a5:49:2f:19:d3:fa:
         c8:15:ea:03:c3:4e:de:90:ae:e8:b0:ee:20:ed:85:4e:2d:bc:
         62:b9:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org