Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/0/34352e3233382e34302e302f32322d3234203d3e20323638333131.roa
File:                     34352e3233382e34302e302f32322d3234203d3e20323638333131.roa (raw, json)
Hash identifier:          jYRAqx9FWdTt5oM2kjOXKFOIEwEiUCd4ITDkc1DI8UM=
Subject key identifier:   92:62:9D:F2:DB:F6:F5:79:44:90:CF:95:A3:4B:FC:A7:85:CC:52:8E
Certificate issuer:       /CN=3BE2C14580F555875E86C70709C91B4FC1DBFFB0
Certificate serial:       54CC9FE45D2E4052FC29916BBA4252E03928A99C
Authority key identifier: 3B:E2:C1:45:80:F5:55:87:5E:86:C7:07:09:C9:1B:4F:C1:DB:FF:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/0/34352e3233382e34302e302f32322d3234203d3e20323638333131.roa
Signing time:             Wed 14 Jun 2023 17:25:00 +0000
ROA not before:           Wed 14 Jun 2023 17:20:00 +0000
ROA not after:            Wed 12 Jun 2024 17:25:00 +0000
asID:                     268311
IP address blocks:        45.238.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cc:9f:e4:5d:2e:40:52:fc:29:91:6b:ba:42:52:e0:39:28:a9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE2C14580F555875E86C70709C91B4FC1DBFFB0
        Validity
            Not Before: Jun 14 17:20:00 2023 GMT
            Not After : Jun 12 17:25:00 2024 GMT
        Subject: CN=92629DF2DBF6F5794490CF95A34BFCA785CC528E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:d2:c4:9a:17:0b:53:5d:26:5f:9a:e6:fa:
                    33:b8:c5:f6:f3:b0:ac:c9:2e:f3:90:5f:3f:64:31:
                    5b:b2:ae:21:d7:ee:73:88:5e:ea:22:97:62:a4:c1:
                    a6:b3:b8:07:86:d3:45:a5:2e:20:e3:39:c3:99:6d:
                    a8:25:11:7a:f8:29:65:8b:ea:bf:1f:e3:b7:0f:d1:
                    b4:6f:53:ea:18:60:f2:97:b3:93:48:28:b7:c3:a8:
                    1d:6e:ef:a7:f2:7e:53:ec:c9:15:27:11:80:4a:e8:
                    00:6a:f2:3d:d2:d4:3a:3b:c3:6f:35:7d:79:78:f6:
                    b6:4d:0f:60:cc:8f:b5:11:9b:f3:e8:6d:6b:52:f3:
                    c9:33:f4:5e:9b:00:50:7e:d4:74:c2:a6:6b:ca:66:
                    8e:c5:a4:29:b2:30:25:75:f3:98:a5:03:70:86:bd:
                    db:6a:a9:b9:32:7e:10:5c:11:06:8f:07:09:b8:5a:
                    cd:80:97:1f:7a:cb:7d:8c:fc:21:43:bd:36:79:81:
                    3f:10:f7:21:61:d5:b6:dc:44:7a:0a:d3:23:56:68:
                    49:d0:0f:1c:3a:33:c6:40:08:cf:02:36:9b:11:61:
                    e5:ac:b0:4c:7c:05:bd:a8:81:83:38:7c:85:c2:43:
                    0f:cf:ea:48:6f:19:33:98:e8:09:61:2d:87:26:06:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:62:9D:F2:DB:F6:F5:79:44:90:CF:95:A3:4B:FC:A7:85:CC:52:8E
            X509v3 Authority Key Identifier:
                keyid:3B:E2:C1:45:80:F5:55:87:5E:86:C7:07:09:C9:1B:4F:C1:DB:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/0/34352e3233382e34302e302f32322d3234203d3e20323638333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:f6:1e:57:6c:d1:d5:5a:73:e0:a0:93:e8:23:1f:a6:39:
         85:78:2b:34:b9:10:64:0e:f4:e1:9e:ae:06:1c:83:ce:3a:d3:
         ec:97:87:1a:b9:8a:89:bf:1e:d0:21:74:0f:af:29:87:9a:d6:
         dd:2e:73:51:b6:e3:b4:07:e8:08:e1:46:e1:75:bb:f9:5c:69:
         1e:e4:68:0f:aa:a7:f6:60:19:d6:08:8b:9c:70:42:d8:13:6e:
         fd:d9:65:08:c0:60:39:e4:94:e1:af:2d:3f:4d:f3:89:3a:3e:
         7e:37:48:10:70:8a:1b:1b:d2:a2:4e:83:55:34:d0:93:8f:26:
         b2:df:23:04:7d:c6:22:60:96:d9:45:d3:c8:d1:ec:68:7a:ff:
         8b:50:05:cd:ba:72:08:c2:e0:3a:f7:e6:75:bb:d8:87:7c:53:
         42:75:e3:bb:b0:7b:07:ea:4c:ef:14:f5:75:3a:53:1b:99:c0:
         aa:73:e6:f5:5b:30:24:46:81:3b:f7:b8:2b:96:dc:47:db:a6:
         4b:83:7e:7c:4a:92:c6:7a:d6:c5:f3:ee:db:a2:23:16:95:49:
         15:21:20:0a:8d:25:ea:f2:b9:d6:e4:29:72:9a:6a:02:d1:37:
         20:35:57:c7:7a:51:b9:e0:0c:9b:dc:0b:4a:24:78:7d:12:8a:
         7b:38:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org