Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3234203d3e20323639353436.roa
File:                     34352e3138372e35362e302f32322d3234203d3e20323639353436.roa (raw, json)
Hash identifier:          2eCifqIKjRDORGdhl5mNIvhtQpVsTKZ5rD0I7urT6sU=
Subject key identifier:   10:47:3E:42:48:39:D2:5A:BE:5C:5D:7E:76:2D:CB:8F:2C:62:82:EB
Certificate issuer:       /CN=09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C
Certificate serial:       4FC67680C8F6657BA8B5E63F7534924B799FB4F4
Authority key identifier: 09:F8:FC:D6:DF:30:EE:8E:51:B0:8B:F2:0A:61:B5:C9:16:23:6B:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3234203d3e20323639353436.roa
Signing time:             Thu 07 Mar 2024 12:20:26 +0000
ROA not before:           Thu 07 Mar 2024 12:15:26 +0000
ROA not after:            Thu 06 Mar 2025 12:20:26 +0000
asID:                     269546
IP address blocks:        45.187.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c6:76:80:c8:f6:65:7b:a8:b5:e6:3f:75:34:92:4b:79:9f:b4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C
        Validity
            Not Before: Mar  7 12:15:26 2024 GMT
            Not After : Mar  6 12:20:26 2025 GMT
        Subject: CN=10473E424839D25ABE5C5D7E762DCB8F2C6282EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:a3:72:7f:3f:36:4e:89:40:42:0f:70:af:
                    21:b4:8a:ee:d5:73:06:84:ed:d2:8c:26:29:40:fe:
                    63:92:1b:6c:2d:09:2b:d4:d0:71:67:52:cf:c8:c0:
                    bc:dd:a9:58:8d:62:ef:07:07:e9:52:9d:00:74:f8:
                    cd:b5:19:e6:d1:7f:53:fa:98:3b:a5:e1:a3:67:cb:
                    cb:41:45:4b:40:a6:e4:ad:b5:61:9d:43:41:36:ae:
                    b0:b5:d5:61:ea:6e:13:60:9f:a8:79:48:79:39:66:
                    27:67:d7:a4:a4:46:ca:f2:1e:4a:38:b2:3a:8d:e6:
                    27:58:b1:5b:1f:d6:54:54:5b:ad:98:69:ca:1d:89:
                    31:d8:75:f2:79:17:d8:f6:83:70:ce:53:d6:40:87:
                    55:8b:5c:7e:37:75:d2:cf:3f:cd:42:b6:de:ce:30:
                    20:fb:49:cf:34:3b:26:a8:a9:eb:26:b2:45:d5:58:
                    a7:c2:9a:c3:c0:ee:46:28:7b:72:3b:36:b2:bd:ac:
                    ca:3d:1b:e9:eb:04:f7:2f:6a:a2:5b:08:43:02:d2:
                    6f:15:74:41:06:9a:0f:2d:d1:84:13:25:2b:35:34:
                    88:ad:67:0f:cd:05:f1:ac:5d:7d:47:9f:c4:65:01:
                    69:1d:bf:18:d4:4b:38:c8:84:b9:f9:32:67:28:34:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:47:3E:42:48:39:D2:5A:BE:5C:5D:7E:76:2D:CB:8F:2C:62:82:EB
            X509v3 Authority Key Identifier:
                keyid:09:F8:FC:D6:DF:30:EE:8E:51:B0:8B:F2:0A:61:B5:C9:16:23:6B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3234203d3e20323639353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:9c:2d:67:58:b7:66:d7:74:80:47:98:d7:d2:b8:cb:cd:a1:
         6f:21:3e:42:91:d4:bd:88:e1:2a:ad:a7:fb:9b:cf:ee:16:be:
         b0:89:53:73:8a:d4:c4:fe:d1:69:f4:a7:e7:3b:71:79:67:da:
         62:05:d7:8d:2f:e3:12:d5:51:29:27:08:8b:c9:ea:c8:e2:d4:
         ec:bc:9f:91:70:d6:bc:e4:b1:bc:83:59:b2:d7:f0:af:99:d2:
         d3:8f:13:f7:66:71:5f:f2:d9:8e:3a:9f:54:48:36:f8:b0:da:
         2b:2e:81:bd:5b:04:31:78:46:51:2e:ac:be:a2:35:d0:8c:04:
         50:7f:db:fa:92:bf:2e:ad:1d:02:31:f7:0b:16:8f:d0:94:20:
         1e:ed:76:be:46:f6:0f:b2:a3:26:eb:ea:fc:23:76:8e:06:93:
         ca:b8:cd:78:46:97:3b:9a:a8:2b:07:ed:99:fd:88:c8:25:d3:
         46:c4:fe:e5:e0:a7:fa:c4:52:bc:b2:89:58:55:79:9a:df:70:
         d8:ae:c2:e7:7d:3c:85:9f:84:44:ec:7f:ba:03:5b:1d:cf:bf:
         f5:fd:c5:c3:63:d0:2b:c8:81:f9:9c:5c:7a:08:26:7a:91:99:
         22:86:16:6b:4c:db:ef:3e:71:2f:66:71:0f:02:d5:c8:b3:ca:
         ea:71:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org