Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa
File:                     34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa (raw, json)
Hash identifier:          oXWzJ6mjaRlBA2kObEj++CFgCPON0D0hKMHqQsuD43k=
Subject key identifier:   23:9F:BA:DF:CF:1F:6C:25:53:0A:53:2C:DB:5E:3D:2D:4C:14:6F:EF
Certificate issuer:       /CN=82DAF5D14F902F8E9F28B1DCF3D990C0F6844033
Certificate serial:       24F3F7BF56FA42E8FFC73D5D6DF9FB785E49E6DF
Authority key identifier: 82:DA:F5:D1:4F:90:2F:8E:9F:28:B1:DC:F3:D9:90:C0:F6:84:40:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa
Signing time:             Tue 02 Jan 2024 16:53:40 +0000
ROA not before:           Tue 02 Jan 2024 16:48:40 +0000
ROA not after:            Tue 31 Dec 2024 16:53:40 +0000
asID:                     269362
IP address blocks:        45.184.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f3:f7:bf:56:fa:42:e8:ff:c7:3d:5d:6d:f9:fb:78:5e:49:e6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82DAF5D14F902F8E9F28B1DCF3D990C0F6844033
        Validity
            Not Before: Jan  2 16:48:40 2024 GMT
            Not After : Dec 31 16:53:40 2024 GMT
        Subject: CN=239FBADFCF1F6C25530A532CDB5E3D2D4C146FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:2e:bd:ae:af:f0:85:64:1c:db:0c:56:0b:
                    07:8f:12:46:77:e1:db:41:8c:ca:1d:a4:e7:ce:22:
                    b3:02:c4:2d:e7:94:42:12:69:fc:84:6c:11:01:b2:
                    ad:6c:b5:72:0d:bc:d1:06:14:a6:a3:72:6a:dd:f1:
                    db:57:18:eb:8c:43:fc:a5:25:fa:98:0c:4d:1a:df:
                    7f:34:4c:b9:9e:8b:0b:7d:f8:3d:75:54:c1:fa:bf:
                    06:dc:de:2a:fd:a1:68:04:c8:78:ee:dd:4a:6b:6c:
                    7c:a4:0f:51:b9:05:f8:b5:06:52:58:d6:09:2f:da:
                    dd:fc:16:55:cf:56:b2:be:45:89:83:d7:35:42:09:
                    b0:16:17:43:f5:eb:01:c4:09:78:99:34:0a:91:e1:
                    df:1b:3b:ff:b9:08:c0:02:00:f5:5e:3e:ac:30:8c:
                    5d:3f:43:2a:af:4a:71:97:2c:a5:9f:c3:74:ed:65:
                    d7:6a:7e:83:a3:f0:00:c9:99:04:aa:76:86:76:e6:
                    2c:cc:ce:0c:12:b4:5d:66:bc:e8:ad:8e:0a:2a:8d:
                    c4:84:d0:52:52:8a:c4:b5:7a:3a:a5:bf:89:1d:4b:
                    cf:36:27:26:c0:b5:e9:96:d2:47:4d:6e:c8:23:15:
                    d5:4a:fb:bc:1b:2b:6a:9c:9c:64:1f:9e:11:5f:e4:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9F:BA:DF:CF:1F:6C:25:53:0A:53:2C:DB:5E:3D:2D:4C:14:6F:EF
            X509v3 Authority Key Identifier:
                keyid:82:DA:F5:D1:4F:90:2F:8E:9F:28:B1:DC:F3:D9:90:C0:F6:84:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:fc:19:8f:d2:5a:c6:c0:60:89:f2:0a:72:58:ad:5c:9c:32:
         8f:4b:ff:2b:e9:63:2c:44:47:ff:5e:3e:e6:ea:db:5c:63:ba:
         4d:ab:50:50:40:68:95:b1:3a:34:6a:81:21:bf:3b:e9:fe:9a:
         97:9e:75:1f:30:1e:ed:ae:9a:23:05:04:e2:fe:f6:51:f7:25:
         47:06:9b:aa:9f:73:7a:d4:de:6e:f7:28:86:9d:31:56:eb:48:
         85:2a:45:19:26:0c:6d:94:0d:68:04:33:b3:7b:4f:e7:20:23:
         52:05:e5:22:33:b9:fd:47:72:b0:67:29:2d:d7:f2:76:3e:90:
         b8:7c:95:99:2a:7b:22:12:6f:dd:0a:04:3c:45:48:6a:b5:e7:
         8f:dd:e5:0a:f6:d4:53:b3:de:3c:5d:c0:41:31:ad:71:8d:bd:
         74:09:c2:13:44:0c:90:bf:f3:08:ed:1a:e3:6a:de:c5:00:54:
         c7:21:09:fa:a7:04:1a:f9:58:54:a9:40:46:73:c5:6e:27:fb:
         15:03:e3:58:d4:1f:85:f2:ab:da:f1:9d:55:01:9e:0c:c0:2a:
         ea:39:b2:40:0d:76:31:10:84:04:7e:58:56:f9:92:ae:98:99:
         62:11:c9:de:b9:e0:46:b8:da:45:f1:93:0c:2b:c3:b3:94:72:
         95:c4:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org