Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32342d3234203d3e20323638333634.roa
File:                     34352e3233382e3234302e302f32342d3234203d3e20323638333634.roa (raw, json)
Hash identifier:          IWmNczTc5cxU4Del2wfSwnEr8vnua+YUD9X4NaP/oTQ=
Subject key identifier:   A9:4D:F4:F5:5B:F1:45:58:4B:1C:97:75:0D:C7:43:19:52:6A:51:A4
Certificate issuer:       /CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
Certificate serial:       186FCD84E7FE885FFB1C7A575117FAC66E9A75F4
Authority key identifier: 3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32342d3234203d3e20323638333634.roa
Signing time:             Thu 21 Sep 2023 11:27:21 +0000
ROA not before:           Thu 21 Sep 2023 11:22:21 +0000
ROA not after:            Thu 19 Sep 2024 11:27:21 +0000
asID:                     268364
IP address blocks:        45.238.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6f:cd:84:e7:fe:88:5f:fb:1c:7a:57:51:17:fa:c6:6e:9a:75:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
        Validity
            Not Before: Sep 21 11:22:21 2023 GMT
            Not After : Sep 19 11:27:21 2024 GMT
        Subject: CN=A94DF4F55BF145584B1C97750DC74319526A51A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:bc:bd:16:ba:57:50:e2:46:91:ae:ee:69:
                    1e:21:a4:ca:97:73:0e:93:d8:a5:8c:ad:a3:6b:ad:
                    4c:72:40:33:ab:de:94:8b:49:cb:72:0d:f0:34:ce:
                    94:be:5f:09:bc:d0:09:6a:1b:9b:61:a3:6d:d2:b6:
                    7c:36:ca:06:7d:62:23:c3:53:5e:d3:fb:3f:44:ae:
                    24:d0:ee:4a:78:17:76:d4:d3:0b:66:29:c5:71:43:
                    22:5d:ee:6d:2c:a9:c7:06:38:ef:0a:4b:f0:fb:bb:
                    73:16:4c:5f:7e:93:0b:1c:cd:8a:61:52:ef:4e:6e:
                    22:e7:1a:e8:41:e6:f3:be:65:db:c1:53:86:93:84:
                    3b:00:f9:d9:69:a2:0e:b5:07:9a:90:51:f8:76:4e:
                    8d:94:a1:a7:b9:8d:0e:7a:ee:22:32:c6:1c:04:05:
                    cd:56:5f:f4:2e:95:34:0c:78:b0:5e:6b:dc:9d:f7:
                    5a:f2:a0:e3:2d:a4:bc:4a:a2:9d:0f:94:dc:30:c9:
                    3d:3a:65:23:20:3b:b0:5c:28:74:9c:29:2a:b6:05:
                    65:8b:15:a7:7b:53:25:3e:71:3c:22:fa:77:96:f9:
                    5e:ff:d8:ac:90:b8:11:6f:5f:e5:37:da:37:a6:cb:
                    47:51:de:d2:35:c0:bd:e8:89:a8:6e:d6:8b:00:4b:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:F4:F5:5B:F1:45:58:4B:1C:97:75:0D:C7:43:19:52:6A:51:A4
            X509v3 Authority Key Identifier:
                keyid:3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32342d3234203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:3d:b1:0c:d9:e7:17:7e:f3:c0:86:aa:54:71:cb:51:a1:
         40:f8:b6:64:21:62:29:24:fa:5b:7e:02:d6:b4:ad:1f:8e:42:
         eb:e2:ae:04:38:90:41:e5:6d:9e:55:c8:32:4a:33:da:1d:0c:
         e2:dd:ee:da:2f:3d:59:9f:5a:1c:0b:bd:15:5f:b9:5d:59:5d:
         ad:0d:c1:d6:4a:af:5d:d7:83:3e:6a:b1:a3:08:f9:4f:31:38:
         64:1e:af:c6:26:54:58:0c:eb:34:6e:e4:b1:db:38:b9:1a:3e:
         f4:79:ca:3e:ab:5a:2e:25:ee:8c:82:db:85:a5:71:d2:b3:94:
         a6:7a:27:53:66:df:22:14:ec:9a:2b:ab:3d:38:ee:43:c0:49:
         50:9d:78:03:53:13:a9:f7:1f:bc:90:d6:cb:e5:92:a0:b3:cc:
         af:23:ee:ef:37:47:4d:0a:8d:f8:82:0d:0c:5b:c4:41:0c:6a:
         fc:57:93:cf:43:71:a4:67:63:e1:ee:a4:34:55:ae:ec:74:23:
         51:d5:b5:16:3e:6e:fe:64:f6:9f:0b:60:79:6c:0d:2b:86:e7:
         49:28:fc:87:15:14:29:ec:7d:14:43:23:9c:54:e5:fd:7a:25:
         09:a2:8e:c5:82:38:00:e9:db:cd:32:d6:77:34:b8:a1:54:a4:
         7d:62:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org