Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa
File:                     34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (raw, json)
Hash identifier:          QJ54RTFMoo1XMkIEVuuJtWdTROpPNu37pTaWl6Tkm8Q=
Subject key identifier:   0C:06:D7:C2:4F:2E:5E:E3:3D:F2:65:46:81:15:E2:10:85:4D:38:0D
Certificate issuer:       /CN=61899AD0EC3326682A4273F840DCED9B527E138A
Certificate serial:       4CAD8F7ED9A13FE1C38616AF4427C6C48780D5A5
Authority key identifier: 61:89:9A:D0:EC:33:26:68:2A:42:73:F8:40:DC:ED:9B:52:7E:13:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61899AD0EC3326682A4273F840DCED9B527E138A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa
Signing time:             Thu 11 Apr 2024 19:00:37 +0000
ROA not before:           Thu 11 Apr 2024 18:55:37 +0000
ROA not after:            Thu 10 Apr 2025 19:00:37 +0000
asID:                     267102
IP address blocks:        45.228.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ad:8f:7e:d9:a1:3f:e1:c3:86:16:af:44:27:c6:c4:87:80:d5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61899AD0EC3326682A4273F840DCED9B527E138A
        Validity
            Not Before: Apr 11 18:55:37 2024 GMT
            Not After : Apr 10 19:00:37 2025 GMT
        Subject: CN=0C06D7C24F2E5EE33DF265468115E210854D380D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ec:82:db:3e:9b:76:91:0c:1e:af:dc:03:ae:
                    03:2d:53:01:fe:7d:09:15:10:57:9c:95:17:f2:6d:
                    40:08:cc:d0:71:3d:6d:b0:ca:88:1b:16:ff:85:0a:
                    0a:6f:e1:a1:08:e5:ed:24:98:05:05:08:99:10:08:
                    9b:b2:b7:05:9b:9f:ae:73:07:7f:99:6c:e6:9d:f2:
                    c0:dd:be:f6:94:b5:be:ef:ec:75:b8:9a:3f:4a:79:
                    52:76:17:46:23:2b:61:f9:b0:0e:1e:ac:c1:23:bc:
                    b3:00:07:b1:5b:9a:3d:e8:86:d0:90:54:9c:4c:58:
                    9b:b7:79:5a:b9:53:f4:c0:1a:84:43:10:ed:cd:d2:
                    a9:fd:f9:b4:0f:2c:b4:73:8a:be:77:10:0c:dc:b8:
                    7a:36:bc:e3:e4:59:c1:3a:f9:82:7b:86:78:6e:e6:
                    cf:bf:1c:96:23:86:79:82:82:51:ce:a8:45:d6:51:
                    ad:cc:3e:58:88:2a:f3:76:22:4f:d7:e7:3f:37:ad:
                    b9:98:f2:4c:d7:f0:a8:41:ab:6e:8c:da:11:43:b7:
                    a7:b0:08:5f:92:5c:d6:1f:99:2f:4f:f0:a8:e3:67:
                    0a:8c:63:e8:93:c6:21:87:fa:70:29:e8:a2:f1:f2:
                    a9:24:ab:83:cf:cb:65:03:8b:29:19:af:9d:71:0f:
                    34:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:06:D7:C2:4F:2E:5E:E3:3D:F2:65:46:81:15:E2:10:85:4D:38:0D
            X509v3 Authority Key Identifier:
                keyid:61:89:9A:D0:EC:33:26:68:2A:42:73:F8:40:DC:ED:9B:52:7E:13:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/61899AD0EC3326682A4273F840DCED9B527E138A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61899AD0EC3326682A4273F840DCED9B527E138A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:15:92:23:b8:d2:69:3c:a2:08:ad:fb:05:23:7b:20:64:5d:
         08:43:fd:38:95:8d:31:62:ed:c0:c9:b0:db:57:e8:32:47:bd:
         8a:2a:d6:45:09:8c:15:b9:4d:41:6f:cb:93:53:81:cc:7d:13:
         21:e2:21:df:ea:1a:3c:5c:20:43:2a:59:98:a3:30:e5:0b:67:
         ae:75:60:15:81:0c:62:35:b8:3e:59:70:a9:ac:42:c3:c9:7d:
         22:a1:e2:92:e8:3e:4f:d0:40:08:a9:bd:22:de:32:d8:ce:d8:
         ac:9a:3b:9c:37:81:76:a3:d7:72:1b:4e:6b:5f:c1:ee:af:70:
         50:96:87:4e:62:ab:3a:93:ea:2c:5e:24:06:e4:74:d2:80:57:
         18:d1:1c:47:ca:9f:49:10:7e:21:c7:52:0f:60:98:8a:1f:6c:
         3a:b5:2b:75:1c:79:37:be:93:31:08:a3:0e:a6:83:29:9e:83:
         36:f0:71:da:bb:9d:4a:0f:0e:5d:4a:ae:64:4a:50:c3:e8:9e:
         d2:fc:d5:f6:5b:55:94:35:b0:e1:a7:d9:77:3c:d5:f2:68:bd:
         45:1f:57:39:2d:90:e5:85:93:ef:22:44:23:ba:c1:50:c2:22:
         e2:03:24:66:98:3c:1e:11:74:b9:e1:e9:87:a6:ee:97:ea:40:
         b7:ea:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org