Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa
File:                     34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa (raw, json)
Hash identifier:          JV1JXx9+NwmttCK/fz1Wm+16cLm++YPJFUbWEwL7vqU=
Subject key identifier:   50:DC:9D:A5:C5:49:12:1F:8E:A1:C2:68:EA:4D:7A:F5:D4:6C:52:08
Certificate issuer:       /CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
Certificate serial:       30B072B2090FAB38286EAAD831D358254EB70628
Authority key identifier: DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa
Signing time:             Wed 10 Apr 2024 13:18:03 +0000
ROA not before:           Wed 10 Apr 2024 13:13:03 +0000
ROA not after:            Wed 09 Apr 2025 13:18:03 +0000
asID:                     267672
IP address blocks:        45.224.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b0:72:b2:09:0f:ab:38:28:6e:aa:d8:31:d3:58:25:4e:b7:06:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
        Validity
            Not Before: Apr 10 13:13:03 2024 GMT
            Not After : Apr  9 13:18:03 2025 GMT
        Subject: CN=50DC9DA5C549121F8EA1C268EA4D7AF5D46C5208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:c2:c6:1c:d3:c8:6a:14:88:7b:6b:75:75:
                    2b:a0:16:55:a6:9d:70:2f:cf:ef:40:29:39:91:61:
                    c0:9a:88:ce:f5:17:16:90:0d:b0:56:8e:86:e8:0d:
                    09:48:b5:b3:b0:d9:2b:5c:91:8c:37:f4:d1:30:81:
                    af:b1:78:59:1e:8f:5b:26:3f:aa:7d:b5:47:c8:35:
                    f0:4d:5f:36:fe:1e:7c:7f:cc:97:e9:4a:1f:c3:83:
                    ba:6d:0f:8d:10:4d:0c:ef:50:a5:22:4c:a6:24:6f:
                    bc:ff:8b:94:e2:4f:43:c8:7b:fb:dc:08:60:06:78:
                    cf:78:38:46:fe:67:27:62:4b:9e:f0:2b:38:f2:90:
                    9c:62:37:44:ca:10:1f:1c:fd:1b:86:25:48:5c:26:
                    cd:d4:fc:14:47:a0:2a:5b:51:6d:b8:e8:4d:e3:3b:
                    e0:7b:e4:e9:1c:70:f5:56:13:00:01:02:cb:bc:2c:
                    e3:00:10:b7:97:8d:0e:40:6e:72:20:eb:81:89:0a:
                    ee:d4:37:ff:a0:83:b6:54:23:83:1d:4b:7c:9d:66:
                    e0:e8:af:64:a6:1c:22:05:05:e8:a6:f2:c2:3c:7b:
                    d4:02:78:87:67:59:06:36:37:1e:99:5c:d3:9d:ae:
                    01:40:be:db:5f:84:57:8b:90:df:ab:b7:5a:00:e0:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:9D:A5:C5:49:12:1F:8E:A1:C2:68:EA:4D:7A:F5:D4:6C:52:08
            X509v3 Authority Key Identifier:
                keyid:DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:d1:94:c8:c3:fb:be:d6:eb:f8:02:60:f0:13:e7:e0:9f:
         dc:91:07:8c:76:92:42:d9:94:0a:c5:8f:30:c8:6b:61:62:f4:
         26:82:ee:85:7a:9d:f6:c7:a2:24:32:be:0d:16:85:b5:43:81:
         7c:cb:74:25:18:56:ae:20:91:cc:70:5d:04:dd:2c:95:49:62:
         9c:0e:1c:75:b6:cb:3e:6f:8d:aa:f8:cb:6e:42:53:99:20:8f:
         d7:be:ab:99:6e:43:ca:3c:08:c5:4d:b9:d2:58:c4:e6:2a:f2:
         e1:68:28:e7:33:ba:64:31:d4:5a:84:f9:d1:97:71:e1:42:a2:
         25:f1:33:6d:b9:57:64:a0:ac:9a:ce:e6:23:c1:e5:5b:b0:5e:
         49:6c:82:ee:7b:ae:9d:45:a8:7c:71:24:46:2c:c9:5e:c3:b9:
         54:ea:92:39:84:9e:dd:f1:c1:37:d0:db:c5:22:00:b9:5b:11:
         c2:61:16:96:2c:e6:5c:92:67:88:df:d9:61:61:ec:7d:0e:6a:
         6c:72:b8:e2:87:aa:2b:ae:8f:57:f3:a5:d6:a0:82:51:af:57:
         ae:c1:a7:8e:1f:f4:a6:0d:33:1e:cb:fa:4e:ac:16:45:1a:1d:
         f6:49:c2:bd:28:65:97:00:5e:df:d9:6a:8a:51:ea:d4:42:5c:
         1f:87:71:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org