Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32332d3233203d3e20323638333230.roa
File:                     34352e3233382e39322e302f32332d3233203d3e20323638333230.roa (raw, json)
Hash identifier:          P/k9Ayko8fkF46s25VsYcj9nE51EGwUKT0wMXMN4iFo=
Subject key identifier:   A7:C2:12:06:D4:7C:78:91:27:17:12:D9:1F:5E:0C:FD:6D:BD:53:B1
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       4FCBD77E8193AE5214CAC8ACF16731E3E4EFF271
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32332d3233203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:00:53 +0000
ROA not before:           Thu 03 Aug 2023 16:55:53 +0000
ROA not after:            Thu 01 Aug 2024 17:00:53 +0000
asID:                     268320
IP address blocks:        45.238.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cb:d7:7e:81:93:ae:52:14:ca:c8:ac:f1:67:31:e3:e4:ef:f2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:55:53 2023 GMT
            Not After : Aug  1 17:00:53 2024 GMT
        Subject: CN=A7C21206D47C7891271712D91F5E0CFD6DBD53B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:b3:ec:58:56:6e:44:42:f3:47:bb:b0:0e:
                    58:28:51:41:1a:2f:61:b8:af:06:31:3c:9d:76:f2:
                    a3:36:c5:04:fc:c4:04:12:38:b5:42:fd:39:3d:f8:
                    5d:f8:39:a4:af:8f:6f:2b:a9:c8:14:85:2f:77:39:
                    f8:ae:e7:d2:ac:e6:23:ea:6d:b4:77:08:c5:4a:37:
                    fa:aa:14:2e:a4:74:ca:7f:0b:ae:a8:6a:37:fb:46:
                    0a:f6:4c:fb:4a:26:22:a7:79:79:0a:45:0c:42:07:
                    24:61:a9:f3:ad:57:f6:7b:85:9e:e7:7b:bb:97:2c:
                    58:63:ab:11:89:ae:f2:88:4a:92:69:c7:c9:25:11:
                    cb:f0:64:70:98:76:03:62:43:da:4c:ff:25:71:66:
                    ab:6f:cd:80:ed:30:54:5f:03:3f:84:b5:e9:95:12:
                    4f:50:60:a4:84:41:23:98:d0:58:66:b8:ac:64:b7:
                    d5:2a:94:38:87:b2:7c:00:2a:ae:99:93:8b:e2:b4:
                    e2:37:46:a3:5b:11:a5:f2:3d:58:f9:04:91:a8:0f:
                    7c:48:de:bf:ec:f9:2a:2b:fd:f9:f3:2f:42:9a:ab:
                    17:e9:5a:8d:98:cc:ad:e4:93:5b:a2:60:42:9b:fd:
                    8f:5a:67:fb:6f:2b:7a:31:4d:6f:c1:b9:10:54:74:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C2:12:06:D4:7C:78:91:27:17:12:D9:1F:5E:0C:FD:6D:BD:53:B1
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32332d3233203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:ec:0a:b9:4a:96:53:cf:a4:e7:99:11:07:11:9f:1b:27:59:
         5b:65:e1:58:58:f2:d6:37:cc:d0:dd:55:8a:fb:b5:ac:7b:c3:
         80:18:6a:65:c9:2c:e2:fd:6b:00:9b:f1:0c:3d:2e:9c:89:11:
         db:03:c3:22:15:6f:c3:20:64:d0:3a:29:7a:88:77:ed:0a:a0:
         9b:61:36:c6:34:79:32:dc:f3:4c:d4:0a:00:06:bd:f0:68:8a:
         37:98:6e:c9:00:d1:35:81:e8:0f:15:f0:d9:b8:d1:dc:f8:07:
         52:d9:46:42:d2:c6:68:c5:0c:0d:60:0f:99:df:da:d6:49:f6:
         08:fd:2e:cb:db:13:0d:bb:37:cd:eb:17:db:12:e7:66:42:84:
         06:90:f4:7f:bc:10:a9:82:da:54:2b:58:a6:a8:6c:13:17:9c:
         f5:33:cd:28:a8:68:6c:2c:85:4b:ba:71:6e:3c:d9:ff:a1:44:
         7c:14:e0:78:0a:fa:a9:a1:29:85:15:51:cb:17:30:d5:e6:ad:
         fc:f3:c1:c2:f0:79:32:13:08:05:51:81:0a:f7:10:13:b9:73:
         46:72:d2:ac:ee:26:91:0e:84:b7:9f:32:7b:c8:79:37:74:94:
         23:c6:07:6b:a9:34:74:ac:db:70:f8:96:83:49:d5:7f:57:d7:
         e3:40:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org