Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32322d3232203d3e20323637323536.roa
File:                     34352e3233322e34382e302f32322d3232203d3e20323637323536.roa (raw, json)
Hash identifier:          EqijbHo/636Zabxk0qtqVxS5EpQsTo6JfP86cg9Jxj8=
Subject key identifier:   30:F2:88:7B:57:E0:48:90:A9:38:9A:B2:F2:24:AB:90:E2:C7:59:1B
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       1A5D7854E390EDC718756596F02EF464C2C2E6A5
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32322d3232203d3e20323637323536.roa
Signing time:             Fri 08 Mar 2024 20:03:22 +0000
ROA not before:           Fri 08 Mar 2024 19:58:22 +0000
ROA not after:            Fri 07 Mar 2025 20:03:22 +0000
asID:                     267256
IP address blocks:        45.232.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5d:78:54:e3:90:ed:c7:18:75:65:96:f0:2e:f4:64:c2:c2:e6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar  8 19:58:22 2024 GMT
            Not After : Mar  7 20:03:22 2025 GMT
        Subject: CN=30F2887B57E04890A9389AB2F224AB90E2C7591B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:cd:35:db:83:fd:4b:8c:b2:14:fc:38:24:
                    23:21:6c:71:f3:17:d6:cc:12:4a:0f:93:54:21:c8:
                    b8:09:a8:6c:13:57:d6:ea:5b:9c:35:5c:fd:8e:ff:
                    4a:e6:cf:af:23:b5:18:24:86:e8:37:91:c2:c5:96:
                    bb:05:78:dc:b1:14:b9:ba:70:97:45:32:bf:17:32:
                    94:91:7c:50:e3:d1:d2:d2:8b:61:14:83:d2:4e:1b:
                    e7:d9:1e:20:1a:e9:21:a8:d5:0b:5d:ec:f3:c7:82:
                    f1:3f:f0:51:d6:9d:83:1c:ed:4d:22:c6:58:f7:34:
                    b8:10:a4:6e:3d:4a:41:cb:fe:df:63:77:be:c3:22:
                    18:b9:1c:df:8b:07:1e:bc:6f:5b:ef:6e:70:75:2f:
                    43:8c:4f:37:77:4a:c1:c8:5d:4d:a3:17:79:6f:ba:
                    b5:0c:49:a2:bc:28:bf:07:95:ff:59:20:06:71:62:
                    be:ea:c0:ad:2f:9f:11:5e:48:9c:53:4f:7b:a5:f7:
                    50:80:1d:cb:df:3f:cb:ed:49:4a:4c:98:d9:db:d1:
                    0a:74:d2:60:3c:3f:dd:72:a4:9a:96:11:b9:04:1b:
                    e4:db:6b:7b:20:1b:85:b2:9a:8c:9b:3b:09:dc:41:
                    0e:eb:41:d8:31:6f:36:f6:1a:4f:05:6d:19:38:f7:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F2:88:7B:57:E0:48:90:A9:38:9A:B2:F2:24:AB:90:E2:C7:59:1B
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32322d3232203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:d3:bf:1f:0d:96:30:9b:1f:26:96:82:02:53:9b:b4:f5:f4:
         3f:d3:8f:b3:63:13:62:a8:df:5c:9c:cf:b7:bc:9d:a1:13:eb:
         ad:fd:22:21:68:ba:52:a8:27:0d:22:94:f9:4f:c2:96:9b:5a:
         1c:eb:19:4b:41:89:63:1d:02:49:a9:31:6e:9b:32:dd:d1:24:
         9d:a0:18:de:98:c2:ad:08:7d:70:50:96:d0:8a:b4:57:53:51:
         89:e5:0b:b9:2e:11:fe:c7:2d:a9:f1:9f:7d:94:e8:1e:d3:ad:
         2e:79:02:b7:80:b1:75:5c:72:7f:0e:26:d3:88:1a:fe:34:64:
         27:c7:3a:b5:a9:25:5e:7c:23:a8:ab:3a:a1:ac:88:cd:b3:97:
         10:9e:08:4c:d5:00:61:c9:8e:5e:41:77:67:54:55:17:f9:b1:
         fa:95:79:08:65:ff:5e:1d:fa:58:44:aa:6e:38:25:d5:38:19:
         08:33:64:0f:b8:14:5c:e3:fe:9c:ae:41:dd:10:4a:90:b6:06:
         f5:f9:d0:79:f8:c0:bb:6a:0e:9c:30:11:a4:c8:a9:0d:74:5e:
         21:0f:34:5c:be:cf:76:58:86:ce:64:36:67:4e:e2:f6:76:68:
         d4:32:3d:5f:61:5f:60:82:79:04:43:7e:12:06:d8:15:fd:b8:
         99:92:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org