Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32342d3234203d3e20323638333230.roa
File:                     34352e3233382e39322e302f32342d3234203d3e20323638333230.roa (raw, json)
Hash identifier:          E1SK120hpBN/QltPidVJB1UhCwAz3Sz3WMw8V0KgO60=
Subject key identifier:   B8:3D:CF:88:83:C8:D6:C7:78:79:E5:0E:CB:B4:DF:37:FA:D9:4F:76
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       4DB250D2884A4DE012A99070D9656C3DA37A0C5D
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32342d3234203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:00:51 +0000
ROA not before:           Thu 03 Aug 2023 16:55:51 +0000
ROA not after:            Thu 01 Aug 2024 17:00:51 +0000
asID:                     268320
IP address blocks:        45.238.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b2:50:d2:88:4a:4d:e0:12:a9:90:70:d9:65:6c:3d:a3:7a:0c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:55:51 2023 GMT
            Not After : Aug  1 17:00:51 2024 GMT
        Subject: CN=B83DCF8883C8D6C77879E50ECBB4DF37FAD94F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:12:8f:ba:88:02:03:a9:8f:0b:70:a5:6e:
                    a1:9f:46:88:53:ae:46:d5:e0:61:24:cf:97:b4:3c:
                    cd:b4:83:74:88:a4:35:f2:68:aa:7b:e1:2d:93:c5:
                    9a:2a:e6:a6:20:01:32:0d:fc:cb:4a:f8:75:6c:ce:
                    37:01:db:cc:ae:f8:5d:2c:83:5c:f2:ec:e3:9b:20:
                    05:e8:2c:85:1e:64:32:28:95:4a:86:e8:cb:a5:a6:
                    0d:af:ba:53:a2:aa:a9:98:a2:85:96:3b:7a:76:75:
                    8d:41:84:ed:12:c0:5c:a7:70:64:3d:dc:d0:07:ef:
                    2c:05:04:ec:3a:df:09:4c:60:79:dd:04:b2:7f:e0:
                    dc:71:0a:50:d4:e2:d8:0c:21:ff:4c:57:4b:d5:ba:
                    af:76:de:e5:68:6e:58:00:27:78:e8:12:b5:22:7f:
                    c9:0b:3a:d7:d9:53:da:6d:06:0e:30:2a:94:7b:2d:
                    c4:71:da:56:98:1b:80:0e:f9:72:7f:e3:40:a4:52:
                    af:e3:07:8d:ea:4b:03:73:e6:66:b6:d7:8e:d9:8e:
                    e0:71:dd:4a:31:33:09:b3:f1:fa:1d:29:06:5e:01:
                    51:ec:6f:95:16:ec:82:24:1a:7b:98:e1:d2:03:c1:
                    41:cb:9c:fa:e1:3d:e2:e7:b7:d6:b8:b2:8f:3a:1d:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:CF:88:83:C8:D6:C7:78:79:E5:0E:CB:B4:DF:37:FA:D9:4F:76
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32342d3234203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:22:8e:73:f1:b6:f1:8d:be:2b:7e:57:65:36:55:6a:2a:42:
         8e:8e:21:bd:13:ed:be:a7:7c:11:20:47:1c:01:3d:28:37:9f:
         c3:ab:40:6f:21:f5:2a:a5:9c:57:a9:11:5a:11:31:4b:f9:1b:
         db:18:19:9c:5f:a0:3b:35:fb:78:cf:2f:78:a6:32:d6:7e:58:
         e6:ae:9b:08:49:4a:af:ac:31:df:16:a3:d5:aa:1d:a4:fe:df:
         2a:ad:ca:e4:f2:0f:22:c0:97:16:c0:56:f3:de:dc:79:3a:23:
         43:a7:e8:ee:0d:3a:cc:e3:10:24:d3:b8:14:f2:c2:36:08:66:
         4c:41:05:fa:f5:7e:ee:98:7f:c8:39:ff:7a:6d:c5:eb:e2:10:
         6a:8d:cb:dd:e0:13:11:1d:5a:d3:f7:15:e6:f0:27:df:3f:6a:
         84:78:06:76:75:4c:d0:59:57:1e:dd:47:cd:6e:f7:b1:b1:7d:
         2c:f1:89:d7:a0:8f:a4:a9:cd:13:e4:48:bf:f3:97:11:4c:1d:
         c4:27:b3:38:03:32:62:a5:db:f0:11:54:a8:46:ad:b2:86:66:
         b6:e3:b7:d1:1d:49:94:07:82:c1:26:fc:ad:3f:a8:19:65:ba:
         c6:a6:d5:8b:5b:e6:46:58:1d:e0:cf:80:a2:4b:eb:59:ed:c4:
         1f:62:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org