Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32342d3234203d3e20323638333630.roa
File:                     34352e3233382e3230302e302f32342d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          NT6BHAufWcNUfwtW1fQ+5WCrrd0KnPeFYF6Us+tDH34=
Subject key identifier:   88:A2:48:D2:4C:0D:E7:9C:84:39:6B:6D:DF:6D:04:92:19:E8:20:EC
Certificate issuer:       /CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
Certificate serial:       0533CF0689FB1B0EE49C3B93FD6C303BB6CEF7F4
Authority key identifier: 8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32342d3234203d3e20323638333630.roa
Signing time:             Mon 23 Oct 2023 21:30:35 +0000
ROA not before:           Mon 23 Oct 2023 21:25:35 +0000
ROA not after:            Mon 21 Oct 2024 21:30:35 +0000
asID:                     268360
IP address blocks:        45.238.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:33:cf:06:89:fb:1b:0e:e4:9c:3b:93:fd:6c:30:3b:b6:ce:f7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
        Validity
            Not Before: Oct 23 21:25:35 2023 GMT
            Not After : Oct 21 21:30:35 2024 GMT
        Subject: CN=88A248D24C0DE79C84396B6DDF6D049219E820EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:fd:4b:6e:5a:e3:9e:89:49:11:7f:39:72:
                    1a:e6:4e:1e:e2:62:03:cf:4b:c3:4e:c6:ec:af:76:
                    0f:10:70:6a:cf:0f:bc:ff:97:ec:13:6c:b3:ee:e1:
                    ca:5f:fb:f1:b1:98:6a:f4:af:55:b9:7b:64:93:e8:
                    eb:09:df:e3:bd:f4:9b:3e:0d:9b:25:c4:19:12:bb:
                    02:ff:22:e4:be:35:59:90:9d:31:de:ab:62:b5:e8:
                    ff:b3:75:53:85:9c:1c:09:e7:72:7c:bc:16:b9:5e:
                    92:d6:cb:1f:e9:63:f7:0e:12:a6:2a:76:40:43:24:
                    43:69:43:f1:34:2c:ee:91:d7:fa:eb:4f:b0:73:31:
                    f2:3c:c3:b3:b5:a1:75:ac:8b:90:67:30:6e:38:b9:
                    a1:df:9b:f3:92:14:30:65:fb:87:c5:60:f0:67:35:
                    19:12:fd:a0:6a:5f:f2:02:bd:07:84:25:04:25:45:
                    ca:25:1d:fa:35:52:e2:9f:25:e7:ce:18:01:4e:bb:
                    65:7e:60:25:29:d1:91:36:21:04:29:7e:59:5a:3e:
                    da:06:38:ab:96:c2:c8:21:e6:34:c0:e7:33:b5:0d:
                    9b:69:30:ca:79:3c:bf:2d:e9:c5:86:3f:a4:7a:c8:
                    25:ab:72:23:76:94:0a:a9:70:c4:15:a9:f3:b6:b2:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:48:D2:4C:0D:E7:9C:84:39:6B:6D:DF:6D:04:92:19:E8:20:EC
            X509v3 Authority Key Identifier:
                keyid:8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32342d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:f0:e5:18:5f:3d:a3:a2:ed:23:2a:dc:1c:35:15:9c:2b:
         49:3b:24:41:39:04:38:4a:4f:3c:0d:6e:8c:0e:fd:8f:0e:ce:
         4f:43:71:a8:36:e5:dd:b4:dd:c2:5b:4c:2c:e7:30:0e:08:2f:
         9b:f8:85:4d:73:3c:2e:c6:43:7a:41:df:8f:06:e1:bc:ae:5a:
         5c:3b:8a:59:96:c5:77:cc:41:6c:55:95:70:eb:9a:da:7f:ec:
         60:23:bf:53:28:c2:9a:22:42:4d:b1:a7:7f:68:81:c1:f7:a9:
         61:82:87:d2:e8:fe:7d:a6:c0:47:8e:18:05:17:61:8d:40:6f:
         13:8e:c3:c5:c0:12:9f:48:79:9f:cb:a9:20:bc:c9:79:da:0b:
         32:50:82:be:27:00:04:72:de:5d:cb:3f:53:b5:25:a0:ed:b2:
         a6:46:26:85:34:cb:ee:17:3c:ea:c2:85:76:a0:31:96:3e:1e:
         af:63:16:09:53:a7:f3:21:d7:f4:e1:b4:54:ff:da:60:dd:b4:
         54:af:7a:05:5e:87:6d:4e:c9:2e:6d:53:fb:63:3c:dc:ba:05:
         b8:76:a2:08:1c:77:ca:05:93:8b:54:2d:55:a6:e7:5a:d3:6b:
         bf:a6:22:86:fd:b0:36:56:7e:be:2c:d9:d1:08:f1:03:9e:90:
         df:1f:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org