Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35302e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          t7Re1Pf6bdorPQdKxUme2vR9lfzbd6J/1adBnE67MGE=
Subject key identifier:   D1:87:8F:33:31:F2:65:41:C6:2E:A0:9E:37:AA:E0:85:63:D7:61:B8
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       08512C635E31E10B5C17FF7C05CDD3886627F05C
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa
Signing time:             Fri 08 Mar 2024 20:03:21 +0000
ROA not before:           Fri 08 Mar 2024 19:58:21 +0000
ROA not after:            Fri 07 Mar 2025 20:03:21 +0000
asID:                     267256
IP address blocks:        45.232.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:51:2c:63:5e:31:e1:0b:5c:17:ff:7c:05:cd:d3:88:66:27:f0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar  8 19:58:21 2024 GMT
            Not After : Mar  7 20:03:21 2025 GMT
        Subject: CN=D1878F3331F26541C62EA09E37AAE08563D761B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:47:d4:91:72:08:b0:b0:68:ba:97:83:72:
                    10:01:12:0c:fe:c0:eb:47:ba:3e:6a:e6:6c:57:11:
                    2c:49:4c:fd:93:cf:c8:72:03:33:53:77:4f:7f:d9:
                    d9:bc:a9:f6:b2:71:b7:c7:22:4a:16:57:16:3c:8c:
                    d7:af:8b:94:02:df:cd:01:a7:9b:a3:12:52:f9:18:
                    e2:fa:92:1f:c0:b7:83:79:0e:39:43:5d:bc:c3:f3:
                    1e:07:8a:28:62:7f:5c:4c:7f:29:2d:11:76:61:e2:
                    b8:bd:8b:82:64:66:ce:e5:df:80:c9:a1:5b:fd:aa:
                    ed:45:56:63:22:30:0b:0c:50:ed:a0:21:b0:10:ee:
                    7b:ce:33:24:7a:d0:ec:25:29:7e:39:69:cf:63:06:
                    35:fb:d8:4e:2f:b0:15:f9:67:66:34:26:c9:dd:38:
                    24:fa:dd:cf:7b:08:e2:11:b8:eb:d7:0b:ee:24:84:
                    da:48:25:3e:3a:e1:de:0f:83:4b:9d:18:b4:cb:6f:
                    3f:44:ab:a7:19:45:09:8e:28:30:d3:5d:f6:1f:a7:
                    6e:b3:31:f1:1e:27:be:62:10:5d:7e:d6:38:ca:0c:
                    f1:ed:62:a3:a5:68:2f:3c:7c:60:c9:9a:f3:9d:92:
                    63:37:d0:2e:96:16:ab:6a:0d:20:df:94:6a:6c:74:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:87:8F:33:31:F2:65:41:C6:2E:A0:9E:37:AA:E0:85:63:D7:61:B8
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:4d:11:64:84:a2:5e:db:62:8a:52:68:b2:6a:67:46:f3:3e:
         39:98:32:58:81:36:2d:22:d4:67:cc:0c:be:9a:fc:66:2e:49:
         ec:cc:27:90:67:ba:dc:cf:96:9e:47:a6:ee:02:75:1f:94:bd:
         70:bc:9a:a5:d6:f7:bc:08:a1:2c:0f:25:43:2b:49:90:f1:30:
         fc:2d:27:4e:40:c7:7e:34:74:7e:f4:49:3a:6d:02:ec:20:b1:
         00:9a:15:16:b8:09:58:03:40:6c:ab:8c:d1:52:3e:6c:6e:19:
         40:f5:88:ef:b1:b4:19:16:b7:19:66:7f:04:94:41:89:47:9c:
         0c:bc:de:94:86:1d:b6:ae:22:66:0a:0d:6c:7f:e5:53:f7:4f:
         37:22:d4:1a:a9:40:0d:d8:59:37:23:fe:21:57:55:d8:ba:ba:
         51:99:5c:9a:8a:ad:41:ca:ae:44:a6:4e:ae:6c:ce:d9:f7:03:
         a8:e3:af:db:2d:7f:99:3a:87:4c:48:73:34:03:fd:b0:e5:55:
         52:5e:42:62:06:2c:67:a4:b4:cd:12:b8:5a:21:14:17:be:55:
         b4:18:7a:d0:4b:35:9a:74:9e:8c:e8:58:32:24:cf:22:41:b5:
         19:45:8b:bb:fd:a3:31:db:85:aa:e0:12:39:ac:30:e3:9b:07:
         a2:d8:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org