Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3234203d3e20323638333230.roa
File:                     34352e3233382e39322e302f32322d3234203d3e20323638333230.roa (raw, json)
Hash identifier:          pOhB2ywzbbqsNc0FP7bqBwMXS/YER6YwTX8v0KD394o=
Subject key identifier:   5F:B9:CD:76:D8:03:68:75:22:30:B2:C9:36:CF:95:22:F9:A2:65:8C
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       421B06DBBFD3820D773946F314DA518AC9FAC463
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3234203d3e20323638333230.roa
Signing time:             Mon 04 Mar 2024 15:12:37 +0000
ROA not before:           Mon 04 Mar 2024 15:07:37 +0000
ROA not after:            Mon 03 Mar 2025 15:12:37 +0000
asID:                     268320
IP address blocks:        45.238.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1b:06:db:bf:d3:82:0d:77:39:46:f3:14:da:51:8a:c9:fa:c4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Mar  4 15:07:37 2024 GMT
            Not After : Mar  3 15:12:37 2025 GMT
        Subject: CN=5FB9CD76D80368752230B2C936CF9522F9A2658C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:55:76:bb:a5:55:f4:18:7e:d0:ec:07:fe:
                    bf:81:ef:18:e9:dc:6f:98:c1:07:03:96:39:78:d9:
                    4a:df:e8:e8:9b:ae:e3:42:ce:49:b0:d1:ab:fb:58:
                    82:88:a5:33:26:71:99:64:4b:cf:29:9c:d7:e5:cc:
                    fd:5f:b1:d6:8e:d0:1c:8c:e8:ba:ba:6d:80:c6:20:
                    37:8e:fc:0c:27:12:e5:b4:6c:8d:a2:19:f5:0e:5e:
                    40:11:f9:e3:02:bb:55:5d:a6:b1:59:1b:bc:5b:b6:
                    1f:17:b8:aa:5e:31:83:46:86:c5:11:50:e6:a7:e7:
                    00:a1:86:be:23:6a:66:31:b1:59:cf:55:0d:81:9e:
                    be:2c:db:b0:3b:43:66:1e:ba:68:a0:1e:83:0a:a4:
                    e6:2e:49:b1:f3:89:37:ed:62:f9:21:3c:78:4e:6a:
                    bd:c8:93:fd:c5:9d:5f:33:51:02:a7:9f:f9:47:ba:
                    1b:dd:af:63:06:a5:e3:66:49:9a:56:c9:63:d8:93:
                    eb:0e:96:fd:52:a4:05:03:09:f0:a6:97:2f:2f:9a:
                    f4:6b:93:39:54:9c:1f:d6:0f:67:0e:09:bf:5f:5f:
                    0a:14:56:00:94:bd:ed:86:36:48:fe:15:14:6c:ee:
                    5c:e6:5b:48:b5:2c:15:f0:0c:2d:3f:72:c9:ca:fa:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B9:CD:76:D8:03:68:75:22:30:B2:C9:36:CF:95:22:F9:A2:65:8C
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3234203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:bf:e9:68:62:cf:32:d3:18:57:51:d5:ee:c0:b6:28:d8:
         32:63:ff:49:2a:db:78:5e:85:ae:d3:f1:3a:f9:f1:18:79:9b:
         65:79:b9:b2:7f:71:4a:f1:0d:4d:08:94:be:36:78:b2:50:fa:
         42:3d:20:56:09:82:cf:9d:4d:e1:2a:94:67:f4:75:1d:b4:0e:
         e4:d5:2b:f8:57:a9:75:33:b8:ed:ae:d0:c6:45:4a:07:f9:de:
         40:ad:5c:7f:7b:af:4c:08:17:74:6f:86:fd:b3:37:a1:15:3d:
         9e:c9:4d:b0:54:81:0b:41:02:c0:70:50:4b:27:ea:46:68:cb:
         c2:a1:80:40:02:a9:83:b4:bf:ee:3f:fe:09:59:78:79:28:79:
         7d:6d:38:d7:1b:9d:6e:61:92:a9:74:2f:42:63:b5:0b:ad:92:
         21:70:01:18:44:50:53:56:ce:38:8e:97:13:99:b4:85:bb:bf:
         61:54:41:45:ac:cf:9c:7c:85:d1:14:18:ca:9d:b1:b4:22:ba:
         54:b7:70:b8:89:20:0e:e9:e9:8f:36:e9:c7:d5:e6:10:98:8c:
         95:5e:34:c2:6d:54:e9:ae:72:34:45:fd:52:6b:07:34:63:c6:
         ff:ab:c2:50:13:6e:7c:9e:fa:54:a6:34:05:bf:22:c1:80:b0:
         e3:09:94:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org