Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230322e302f32342d3234203d3e20323638333630.roa
File:                     34352e3233382e3230322e302f32342d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          wyF2rLluvLsP50uvGaEPNbFeMGM4vswclrXAG5PiX+s=
Subject key identifier:   37:8E:87:3B:57:C7:95:D7:51:91:2B:01:56:60:75:AB:37:F8:D1:74
Certificate issuer:       /CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
Certificate serial:       30319E0F14A35A93EC52ACE5F585B2258F3000AF
Authority key identifier: 8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230322e302f32342d3234203d3e20323638333630.roa
Signing time:             Mon 23 Oct 2023 21:30:35 +0000
ROA not before:           Mon 23 Oct 2023 21:25:35 +0000
ROA not after:            Mon 21 Oct 2024 21:30:35 +0000
asID:                     268360
IP address blocks:        45.238.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:31:9e:0f:14:a3:5a:93:ec:52:ac:e5:f5:85:b2:25:8f:30:00:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
        Validity
            Not Before: Oct 23 21:25:35 2023 GMT
            Not After : Oct 21 21:30:35 2024 GMT
        Subject: CN=378E873B57C795D751912B01566075AB37F8D174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:91:e1:43:f2:f2:d9:35:bf:bb:04:70:4f:
                    21:3c:5f:18:36:a5:ce:13:cb:4a:8b:9e:91:01:5c:
                    e0:62:16:a1:2a:7f:f2:29:55:fa:ae:73:66:4e:80:
                    dc:43:51:23:cb:f0:a5:33:36:80:a3:db:48:6b:cc:
                    22:49:ab:3d:7c:68:fe:19:93:d3:61:cf:83:fe:b0:
                    39:58:9b:4e:e4:4b:46:44:8b:ce:56:49:c0:ee:d9:
                    48:01:03:25:6a:18:58:62:66:e0:00:12:8a:98:e3:
                    3d:88:91:d9:ce:7d:26:62:92:77:d7:49:6d:b6:1f:
                    d3:ba:58:08:f1:f7:01:37:b9:71:52:33:84:98:57:
                    a3:9f:e0:6c:f0:b4:c4:a3:5b:5d:b6:2a:61:cf:85:
                    be:09:b5:2c:9e:ff:10:5e:d7:90:7b:d6:a6:6e:4b:
                    a1:60:cf:a8:22:3a:62:fa:a6:52:eb:0a:c5:14:18:
                    29:fa:0b:61:a3:2f:d8:84:54:85:82:9d:02:5b:83:
                    a3:d4:29:9f:ca:f3:b5:9c:3b:c3:4d:7b:ac:d6:31:
                    ff:f4:36:3c:fa:ae:e7:19:3a:a1:93:60:b4:4a:23:
                    48:26:6a:dd:c7:6e:cd:a8:37:f7:54:98:2c:1f:08:
                    be:84:d4:6d:af:9a:c2:83:fb:68:c6:1d:44:6b:ea:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8E:87:3B:57:C7:95:D7:51:91:2B:01:56:60:75:AB:37:F8:D1:74
            X509v3 Authority Key Identifier:
                keyid:8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230322e302f32342d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:00:58:61:87:62:06:a2:a1:e5:71:ff:a4:46:e7:aa:d3:
         9b:fc:83:d0:22:85:86:06:d2:f3:15:5a:01:49:c2:4d:75:94:
         67:6c:e0:25:87:29:9c:d7:0a:99:2c:16:ec:31:9d:cc:4e:2e:
         16:ef:e6:4b:1b:be:59:85:59:70:53:cd:1b:60:79:21:76:f6:
         e0:28:ba:a7:68:f9:a8:89:d3:e8:3f:2d:a5:64:a1:6a:2f:f5:
         95:12:e2:d5:f3:15:7e:b0:88:92:e2:bb:0d:8b:95:f5:7f:ad:
         65:22:35:13:03:45:70:b2:9d:9b:1a:62:63:46:29:fe:23:1d:
         95:89:04:37:40:66:7f:88:04:53:36:ee:79:13:94:be:04:3d:
         c0:0a:43:e6:e2:b2:8a:36:06:07:64:8b:f2:1e:a6:a8:a5:1d:
         44:2f:33:57:3f:f8:cd:b7:79:b5:c3:3d:d9:72:23:62:cd:c7:
         ce:25:dd:90:a6:b2:c8:1f:b9:61:52:34:b7:28:13:56:2e:9f:
         c9:d6:c1:6a:23:71:e9:8e:5f:74:ed:60:27:0b:57:96:f1:89:
         b2:51:af:3f:84:a1:45:52:83:07:2b:c7:f6:01:55:65:b6:f2:
         27:5f:40:f9:ff:0e:df:b7:07:9c:c7:2c:f9:9b:35:66:ec:1b:
         6e:a0:4c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org