Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa
File:                     34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          /OVErV7IpwWxju14FolJxSjIh4JUIHoS4ph/A9HcjHo=
Subject key identifier:   22:01:E9:DD:50:C3:76:70:2C:96:24:8F:A8:12:F5:58:A9:5A:4D:53
Certificate issuer:       /CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
Certificate serial:       5DC7DA88B4E13368C3E290ECB8F06FBF3AD6EE64
Authority key identifier: 8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa
Signing time:             Mon 23 Oct 2023 21:30:35 +0000
ROA not before:           Mon 23 Oct 2023 21:25:35 +0000
ROA not after:            Mon 21 Oct 2024 21:30:35 +0000
asID:                     268360
IP address blocks:        45.238.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c7:da:88:b4:e1:33:68:c3:e2:90:ec:b8:f0:6f:bf:3a:d6:ee:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
        Validity
            Not Before: Oct 23 21:25:35 2023 GMT
            Not After : Oct 21 21:30:35 2024 GMT
        Subject: CN=2201E9DD50C376702C96248FA812F558A95A4D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:40:b6:1a:0c:a6:08:ae:50:16:c8:44:50:
                    af:70:de:e2:1c:35:7d:80:30:ac:4b:8d:bc:07:43:
                    45:71:f9:28:ce:d2:29:97:44:9f:27:13:04:d6:35:
                    50:6f:ae:46:c9:c7:ab:27:f7:07:f5:c3:b2:9b:71:
                    91:e8:a9:1a:a8:1c:40:6f:22:d4:90:25:ea:ae:b0:
                    4a:0c:a2:71:99:4f:5b:c1:a4:cc:77:54:a4:0f:96:
                    48:89:d5:f5:44:b5:09:f1:67:ee:35:72:42:83:c2:
                    e0:d3:58:0a:6e:9c:37:00:f6:aa:bf:b6:5a:b1:0f:
                    d8:60:9a:a9:c3:d6:b4:d2:a9:3d:1d:98:92:57:f7:
                    27:4f:bd:0f:4a:65:8a:f5:bc:54:56:00:8d:1f:4b:
                    04:87:cf:5c:ab:31:3f:99:0f:c5:67:c1:dd:69:b3:
                    40:6a:63:bc:c5:c4:db:50:7b:0e:49:8a:77:f7:04:
                    df:8e:e8:04:1d:34:92:01:b0:86:f2:ef:91:a2:41:
                    af:77:be:36:07:11:52:6e:84:9d:3c:a9:50:49:c1:
                    ed:11:ea:de:91:a8:6b:02:b7:45:d1:ef:aa:bb:a6:
                    43:90:60:17:4f:91:05:89:ad:64:24:21:82:27:82:
                    6e:fb:56:63:d7:3a:43:35:8e:ea:39:70:02:a4:6e:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:01:E9:DD:50:C3:76:70:2C:96:24:8F:A8:12:F5:58:A9:5A:4D:53
            X509v3 Authority Key Identifier:
                keyid:8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:ca:6b:4a:43:35:90:23:a6:a0:3d:5f:60:37:46:5f:c0:
         70:b6:56:c4:56:7b:29:bc:ef:bd:98:3f:29:40:2d:d8:16:7c:
         1a:03:5b:52:a2:65:81:51:1c:ee:aa:95:10:e3:8d:03:d9:f1:
         7a:1d:75:b6:af:4c:a1:f3:25:26:d9:53:95:9f:5a:81:bf:b4:
         b9:8a:a1:47:8c:fa:eb:6f:c4:02:e2:41:dd:58:88:30:52:cd:
         98:7b:0f:cb:02:4b:01:fa:71:22:5c:8f:c5:7c:77:11:23:d8:
         e2:a8:a0:c5:da:f8:50:f6:b5:8e:a7:54:1e:ca:80:e4:28:23:
         9a:bf:a5:55:2b:74:fb:19:e6:13:bb:48:c1:33:a9:67:7f:d0:
         4d:0b:97:6d:23:7a:de:68:d4:6f:11:a8:31:0d:7d:c8:83:98:
         ac:86:44:b1:59:a8:c1:b1:aa:03:12:e7:b2:10:36:a5:3f:74:
         c1:8e:60:6b:bf:d4:9b:e4:91:e6:fe:2f:84:69:9f:01:2f:b1:
         53:66:5a:56:15:e0:03:44:05:95:38:65:d1:9d:4d:4f:74:f4:
         07:de:28:10:be:fe:82:62:32:d2:98:0e:77:e6:6b:d5:a2:8d:
         22:87:a8:ea:95:47:4e:ed:49:df:cd:da:55:52:04:09:cf:b8:
         99:10:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org