Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32322e302f32342d3234203d3e20323732353333.roa
File:                     34352e3233362e32322e302f32342d3234203d3e20323732353333.roa (raw, json)
Hash identifier:          pHr1WzTjxNqDY0mNCl0qe8kZ+85IJZqRflN9EwN1jHU=
Subject key identifier:   5E:CB:48:3C:9B:09:F1:7B:85:72:8D:24:83:7F:24:C2:63:80:6E:76
Certificate issuer:       /CN=ED5ADFFB66DF3895997AE1172637A6A3AFF769C9
Certificate serial:       4E2A85D31E66C3379DB1094995B4966C17092918
Authority key identifier: ED:5A:DF:FB:66:DF:38:95:99:7A:E1:17:26:37:A6:A3:AF:F7:69:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32322e302f32342d3234203d3e20323732353333.roa
Signing time:             Tue 19 Mar 2024 19:30:25 +0000
ROA not before:           Tue 19 Mar 2024 19:25:25 +0000
ROA not after:            Tue 18 Mar 2025 19:30:25 +0000
asID:                     272533
IP address blocks:        45.236.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2a:85:d3:1e:66:c3:37:9d:b1:09:49:95:b4:96:6c:17:09:29:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5ADFFB66DF3895997AE1172637A6A3AFF769C9
        Validity
            Not Before: Mar 19 19:25:25 2024 GMT
            Not After : Mar 18 19:30:25 2025 GMT
        Subject: CN=5ECB483C9B09F17B85728D24837F24C263806E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:51:65:22:87:d0:a2:fe:c6:56:21:da:73:
                    60:9a:06:5d:ae:17:2f:0e:ea:20:c8:36:e2:83:48:
                    c9:83:d9:15:e2:37:58:93:9c:eb:20:2e:a9:af:48:
                    ce:41:96:a6:0d:98:7d:55:e4:5b:03:f1:03:3f:6b:
                    a4:24:ba:b6:06:e3:90:1a:0d:ff:29:ab:9b:af:b1:
                    85:d4:d4:a7:a1:84:f3:0c:83:41:a3:41:b2:a6:f6:
                    5a:ce:43:35:0d:af:08:1e:b8:9b:44:ab:d5:13:2b:
                    db:ae:78:93:67:87:19:d3:ba:2f:7b:ff:cc:4d:4d:
                    86:fb:20:6d:09:5d:01:c0:7c:c6:0a:c0:74:5f:ef:
                    67:e2:d6:87:d9:8d:69:49:01:9a:a3:d8:04:6a:68:
                    49:8b:2f:e5:0c:b8:45:31:d0:dd:3a:ad:a3:cb:b5:
                    f0:34:08:35:14:39:20:ed:1d:d9:80:a7:99:77:d1:
                    ad:9d:b1:85:88:73:37:d0:43:da:84:3f:13:ad:e3:
                    b1:12:b5:94:cc:72:a6:d2:8e:27:f6:0a:a0:6c:e5:
                    3d:dc:d7:cc:95:42:39:6f:e4:4f:9f:9a:5b:60:09:
                    a0:ce:ec:4c:be:df:af:c3:ff:91:57:b4:17:08:93:
                    bd:3f:cd:1e:0d:32:14:fc:3f:a0:a1:bd:d0:de:cd:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CB:48:3C:9B:09:F1:7B:85:72:8D:24:83:7F:24:C2:63:80:6E:76
            X509v3 Authority Key Identifier:
                keyid:ED:5A:DF:FB:66:DF:38:95:99:7A:E1:17:26:37:A6:A3:AF:F7:69:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/34352e3233362e32322e302f32342d3234203d3e20323732353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e0:34:37:b3:ce:78:08:a4:fe:c0:12:75:4a:e3:78:4d:a7:
         74:b8:0b:78:90:60:b8:1f:b5:4f:54:5f:51:85:51:ce:8e:fb:
         74:1b:36:77:92:97:8a:57:d5:d1:6d:8c:f7:5c:41:34:a3:2a:
         b2:c6:0d:3c:92:52:cd:c0:94:dc:ba:cf:e9:58:a1:26:35:ac:
         b6:81:e7:90:f2:d0:cf:6b:76:bd:c9:e6:ae:22:bd:d1:bd:f0:
         ce:a8:36:d7:ae:09:e6:32:aa:0e:6b:25:e9:12:76:1b:1a:6b:
         7f:31:eb:b9:d6:98:3a:a5:c3:c6:32:f9:3e:7d:96:94:22:18:
         8b:9d:03:56:76:3a:6f:d7:08:fc:d8:7e:15:5d:72:1c:af:da:
         c6:14:11:9d:5a:ef:82:c1:53:7d:e4:dd:08:2e:ec:78:86:ac:
         55:15:f0:02:05:21:98:13:a5:e7:cf:01:42:83:37:45:98:35:
         0d:e9:39:3c:ec:38:30:c4:f4:2d:c8:db:43:06:50:22:03:47:
         22:2a:a6:82:6b:e3:e5:59:73:75:19:a4:05:8a:dc:74:9b:d3:
         9a:29:c8:35:8b:11:26:08:87:54:86:71:ee:50:78:c6:51:c2:
         2c:5e:0f:23:f8:f6:59:4d:13:4c:3b:cd:d8:a2:53:c3:b1:aa:
         ef:d2:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org