Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230322e302f32332d3234203d3e20323633393830.roa
File:                     34352e3233322e3230322e302f32332d3234203d3e20323633393830.roa (raw, json)
Hash identifier:          FVHrxStoJZYwA8wVu5rLtqh3cIfnD6I23kM69tnuggM=
Subject key identifier:   8C:82:D9:EC:77:21:BF:76:41:6B:2E:BB:AC:D6:E3:41:5E:95:A7:03
Certificate issuer:       /CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
Certificate serial:       789810BFF3CBD26B70AC7A5FF394A3B6E34D4F87
Authority key identifier: 0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230322e302f32332d3234203d3e20323633393830.roa
Signing time:             Thu 15 Feb 2024 18:39:12 +0000
ROA not before:           Thu 15 Feb 2024 18:34:12 +0000
ROA not after:            Thu 13 Feb 2025 18:39:12 +0000
asID:                     263980
IP address blocks:        45.232.202.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:98:10:bf:f3:cb:d2:6b:70:ac:7a:5f:f3:94:a3:b6:e3:4d:4f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
        Validity
            Not Before: Feb 15 18:34:12 2024 GMT
            Not After : Feb 13 18:39:12 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7f:f0:f6:29:33:ff:99:63:61:ad:33:c1:f5:
                    5c:47:57:66:56:94:c0:65:6e:a3:ae:87:c1:22:fb:
                    f2:50:5a:54:8a:33:db:eb:83:e2:3c:da:12:4f:0f:
                    7e:1f:73:2e:81:db:a5:ab:65:54:37:e7:0c:d9:f4:
                    4d:be:65:76:73:56:37:5f:1d:ff:75:de:90:2e:1e:
                    28:24:c0:9b:06:fe:e6:e6:f9:1b:f5:a9:a0:61:02:
                    8e:3b:24:cc:3f:ac:92:a1:90:c9:d2:9a:95:f6:47:
                    54:00:a7:4a:80:c5:4e:3a:58:c2:da:a9:14:82:8b:
                    8c:2f:b0:aa:ca:ce:ee:c5:4a:b1:07:03:d5:7c:e0:
                    b7:86:0f:fb:0f:1d:51:27:ca:de:13:3f:77:fa:18:
                    6f:d9:2a:63:f1:a8:e7:ac:c6:3e:ea:e1:ec:5c:9a:
                    b6:08:c6:33:ec:33:ae:ac:9f:1d:55:92:a2:c8:aa:
                    50:d4:89:fc:81:f0:82:0e:27:b1:e6:e7:64:53:d3:
                    4b:e1:ef:fb:21:0f:0e:19:7b:68:ac:4d:5b:57:f3:
                    ae:fc:e6:c1:86:b1:4d:df:b4:bd:f0:2b:ff:fa:b3:
                    0b:d2:84:a1:ef:a3:81:fe:4c:c2:e8:c8:36:10:47:
                    55:0e:59:00:a7:3e:b8:94:89:3c:55:7e:52:2a:0e:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:82:D9:EC:77:21:BF:76:41:6B:2E:BB:AC:D6:E3:41:5E:95:A7:03
            X509v3 Authority Key Identifier:
                keyid:0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230322e302f32332d3234203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:88:65:6e:ae:08:49:2b:0a:36:19:d2:8a:5b:72:e1:5c:
         b0:b6:83:b3:0a:fb:18:7c:2d:fe:6b:da:0e:d1:38:e3:7f:93:
         44:5c:b7:00:6b:40:9e:55:a2:fa:8a:8f:fa:8a:bf:8e:05:4a:
         f7:fc:48:e1:40:b9:0d:31:78:ec:c1:39:60:01:df:59:49:9c:
         3a:18:25:ff:20:ea:89:0e:80:db:aa:e2:85:83:84:38:cb:ff:
         37:f3:a2:be:d1:41:72:76:c8:de:aa:0a:ef:bc:69:0b:9f:fb:
         a1:ce:78:0a:e3:f0:e1:65:7c:7a:37:c7:56:c2:cc:34:7d:02:
         22:72:44:ed:2e:85:70:54:8f:fb:35:97:89:e3:5b:d5:62:2b:
         dc:de:9e:6e:6a:d2:37:7e:3e:6d:c4:99:93:be:36:01:4e:5b:
         63:3d:aa:e8:04:43:a5:50:5a:19:cc:f9:92:1b:33:45:3a:5c:
         ec:d8:ae:82:01:d1:32:e0:cf:bf:52:d0:e3:e3:a4:16:ae:41:
         78:a9:e9:f0:2c:70:99:f1:19:10:94:85:04:48:7c:45:92:e6:
         34:bf:47:45:0a:19:52:01:3e:d4:5f:d9:ae:fa:d5:f8:55:ef:
         5c:e5:e8:32:f0:63:68:fc:46:2b:a7:a1:9a:e6:cd:e9:eb:78:
         14:2d:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org