Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32342d3234203d3e20323638303237.roa
File:                     34352e3136382e33382e302f32342d3234203d3e20323638303237.roa (raw, json)
Hash identifier:          hlHw84S+TRndTKeaUjR3xzSszvv9uYD1LI+1V3R0bCY=
Subject key identifier:   93:D9:36:88:BE:A3:38:42:BE:72:8B:44:15:63:08:50:41:C8:DF:0D
Certificate issuer:       /CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
Certificate serial:       25D68E0AC633813AEDA838C084E84094003CC577
Authority key identifier: AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32342d3234203d3e20323638303237.roa
Signing time:             Tue 18 Apr 2023 12:36:10 +0000
ROA not before:           Tue 18 Apr 2023 12:31:10 +0000
ROA not after:            Tue 16 Apr 2024 12:36:10 +0000
asID:                     268027
IP address blocks:        45.168.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d6:8e:0a:c6:33:81:3a:ed:a8:38:c0:84:e8:40:94:00:3c:c5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
        Validity
            Not Before: Apr 18 12:31:10 2023 GMT
            Not After : Apr 16 12:36:10 2024 GMT
        Subject: CN=93D93688BEA33842BE728B441563085041C8DF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:17:54:cc:8a:50:78:9c:d3:3e:af:2d:29:
                    e4:68:ea:18:6c:2d:fe:89:f1:1e:fe:49:c1:7b:4c:
                    4f:9b:f9:a7:88:21:1d:22:a8:ab:92:ba:c4:63:ac:
                    09:29:a7:23:79:a7:89:24:8a:2e:da:41:f1:70:d2:
                    d8:bf:11:df:56:73:d4:87:c6:30:1e:41:67:2e:af:
                    ec:89:2e:3c:38:60:ee:e0:b6:b2:92:3e:45:94:21:
                    f4:ce:72:6f:da:74:d4:53:93:7c:62:05:ef:5c:13:
                    ce:90:7d:87:e5:ac:4b:a5:4a:ef:4d:d1:ef:d5:f3:
                    a8:f0:3b:ad:29:20:97:38:8c:5c:ae:50:3a:d3:df:
                    0f:2f:ae:90:8d:6c:c9:17:79:06:24:13:21:8f:86:
                    34:ef:18:23:5b:2a:89:4c:46:77:b6:94:95:0b:2f:
                    b9:21:c2:7c:6e:d2:02:a3:1a:07:c3:b1:60:07:3e:
                    2a:86:92:02:4e:2f:1a:03:cf:b9:49:e8:c0:3a:a2:
                    3f:ed:71:74:29:09:bf:a9:51:86:a1:9e:8b:87:16:
                    83:c4:3f:77:b6:93:d3:a4:12:50:68:b4:d3:45:1b:
                    62:c7:4c:c7:d0:41:77:ce:74:1f:d7:ac:1e:3b:1c:
                    e0:01:91:ae:7d:d8:cf:68:b9:55:ac:76:11:f2:4d:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D9:36:88:BE:A3:38:42:BE:72:8B:44:15:63:08:50:41:C8:DF:0D
            X509v3 Authority Key Identifier:
                keyid:AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32342d3234203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:52:8a:77:a3:80:9a:99:a1:e3:0e:20:c5:19:36:ed:c3:7d:
         97:3b:e2:43:ac:e0:15:ef:2f:1d:0f:07:60:9e:f3:ab:72:90:
         48:b8:02:23:80:23:a7:69:8e:09:f7:8e:dd:0f:a7:97:0e:ea:
         af:74:6c:35:6e:3e:69:48:4a:8b:eb:23:f4:50:5a:82:4b:87:
         0f:22:c7:67:72:e6:2e:bf:54:45:b5:e2:3c:58:67:e2:cb:00:
         47:7f:f7:4e:53:22:d1:05:83:29:f8:50:96:90:37:37:f5:c9:
         00:af:3b:be:05:8b:74:55:ee:03:8e:3a:7d:41:96:fa:1d:10:
         3e:20:6b:e3:52:02:47:81:7f:67:d0:06:5b:f5:75:a9:b8:f5:
         80:18:0d:46:be:8c:c0:a8:af:27:96:5a:6a:93:d8:0c:fb:a7:
         8c:35:db:71:90:90:24:81:18:eb:a9:0d:ed:b3:69:5f:03:3a:
         af:b8:41:6a:25:38:b7:24:56:af:50:a4:ed:a1:6d:e2:ce:8c:
         34:4c:74:5f:66:2a:b6:d7:03:74:23:6f:d8:ee:16:ad:85:5b:
         3b:05:f6:5e:45:59:0a:36:18:5f:fe:04:c6:a9:db:54:ba:36:
         3a:fc:87:62:09:67:5a:84:59:51:e3:07:a8:26:a7:0f:b6:40:
         77:fe:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org