Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e34382e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          No3Lsf7cpqISZeQ0HMXaXojSuoUtHONIQsgyU8JNWWA=
Subject key identifier:   DE:BE:E7:DC:52:BA:76:BE:C7:35:A5:46:66:7A:8F:1E:FB:CB:79:EC
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       23E2368D0E7528048DAA2AA08AB31147B9FF8B0D
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa
Signing time:             Tue 26 Mar 2024 15:00:57 +0000
ROA not before:           Tue 26 Mar 2024 14:55:57 +0000
ROA not after:            Tue 25 Mar 2025 15:00:57 +0000
asID:                     267256
IP address blocks:        45.232.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e2:36:8d:0e:75:28:04:8d:aa:2a:a0:8a:b3:11:47:b9:ff:8b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar 26 14:55:57 2024 GMT
            Not After : Mar 25 15:00:57 2025 GMT
        Subject: CN=DEBEE7DC52BA76BEC735A546667A8F1EFBCB79EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:22:a6:ab:d1:f3:d9:d6:90:36:c3:06:76:
                    d6:4a:6e:b7:3f:7b:1a:dc:14:c3:8b:a0:c4:34:e4:
                    fa:21:d3:27:f9:2b:93:8a:2f:e0:81:99:30:4f:5b:
                    85:cd:2f:62:ef:41:49:73:ca:83:7c:58:43:69:3d:
                    af:72:8b:54:b4:d8:4d:d4:b9:fd:db:18:5c:fc:a1:
                    c5:4a:37:59:da:40:5a:90:20:db:8e:8f:1f:dd:3d:
                    f0:78:87:7f:b8:8b:43:bf:ff:ae:69:b1:99:0e:e3:
                    33:0f:ab:0e:9d:e3:2f:a1:d4:43:8c:22:67:2d:0e:
                    ce:bc:32:1f:41:4a:14:40:4d:a7:77:e9:c9:3c:59:
                    55:e1:d8:16:69:96:f5:90:b4:fc:aa:6d:bb:28:62:
                    28:d0:fe:88:c4:8a:a7:5f:ad:f0:a1:ca:24:db:42:
                    29:62:00:27:50:a5:e1:44:54:65:89:71:ac:cf:55:
                    78:95:0c:c1:71:7e:53:c7:1b:2e:35:9e:2f:7d:ab:
                    c3:1a:66:e6:e3:14:7a:8a:10:bc:d8:e2:35:11:19:
                    bf:5d:09:93:ec:35:4e:9d:58:40:99:f1:2e:2b:ec:
                    5b:6c:81:70:50:b4:32:1e:b7:e1:75:71:1a:fa:9d:
                    fe:f1:47:33:10:83:33:43:45:af:95:88:2b:38:40:
                    87:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:E7:DC:52:BA:76:BE:C7:35:A5:46:66:7A:8F:1E:FB:CB:79:EC
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:41:28:ee:6d:21:1f:4d:41:7d:11:f1:85:81:a6:48:6e:
         da:69:ca:60:99:1f:6f:6b:6e:a6:93:38:e8:b2:8d:98:a3:ab:
         d1:b5:cc:6c:d5:f9:e5:b7:1b:cd:cc:70:6b:ef:c8:14:00:9d:
         ba:64:af:07:90:a0:ea:d7:49:d6:fe:0b:86:04:80:c4:8d:c7:
         6e:31:c7:3f:52:1c:79:65:20:ea:f6:30:a5:41:e5:5c:35:d5:
         b4:44:7c:1f:de:5e:14:b8:b3:34:9d:54:65:17:95:2d:e5:25:
         ac:8e:fc:bb:6a:e4:bb:47:a6:17:57:30:bf:b2:a7:58:9e:a0:
         61:f8:54:82:4d:6b:00:fd:e1:06:65:f7:5f:d2:25:07:7f:ca:
         27:fc:cd:95:8a:1f:c6:19:fd:d6:10:8f:cf:7e:60:e4:be:1a:
         3c:17:36:89:a2:63:b4:06:30:97:de:45:d1:45:25:e6:95:4b:
         43:71:21:22:9b:3f:f3:4f:62:45:b5:0e:28:2e:ce:03:37:8c:
         0d:dc:eb:99:92:b5:57:e0:5d:5e:11:6c:85:e2:66:54:86:dc:
         b6:7a:5b:5b:3b:3d:0f:fe:ea:25:34:ba:ea:f4:89:a5:af:6a:
         19:6b:e3:8b:b9:c2:1a:e5:f8:f6:96:0f:f3:aa:13:19:d7:bc:
         5e:c3:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org