Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/34352e3233342e3139322e302f32322d3234203d3e20323637333738.roa
File:                     34352e3233342e3139322e302f32322d3234203d3e20323637333738.roa (raw, json)
Hash identifier:          ecbtyq07jaaaW3q2wiEImyZ+wvj4qORu/b1E2xjyhaY=
Subject key identifier:   36:A0:43:85:60:F6:EB:A3:6F:23:16:CE:19:C0:0D:76:A8:89:E3:CB
Certificate issuer:       /CN=EC389DE08DFB27C1537B15EF34B9BAC05F951EF4
Certificate serial:       30C8CA657E86CA55A04E07307AB4DBAC91693BC3
Authority key identifier: EC:38:9D:E0:8D:FB:27:C1:53:7B:15:EF:34:B9:BA:C0:5F:95:1E:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/34352e3233342e3139322e302f32322d3234203d3e20323637333738.roa
Signing time:             Tue 12 Dec 2023 18:01:21 +0000
ROA not before:           Tue 12 Dec 2023 17:56:21 +0000
ROA not after:            Tue 10 Dec 2024 18:01:21 +0000
asID:                     267378
IP address blocks:        45.234.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c8:ca:65:7e:86:ca:55:a0:4e:07:30:7a:b4:db:ac:91:69:3b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC389DE08DFB27C1537B15EF34B9BAC05F951EF4
        Validity
            Not Before: Dec 12 17:56:21 2023 GMT
            Not After : Dec 10 18:01:21 2024 GMT
        Subject: CN=36A0438560F6EBA36F2316CE19C00D76A889E3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:70:8f:39:12:47:b5:e4:d6:cf:2b:7d:55:ed:
                    d9:0a:e3:4e:5f:60:fc:44:cb:d8:f9:0b:3d:68:b2:
                    a0:79:22:f8:55:68:2c:3f:63:45:20:00:ba:82:02:
                    83:e8:79:64:bc:ad:02:8d:27:a3:d8:e2:8a:1a:93:
                    4c:28:d0:fc:d8:fe:54:1e:1d:bd:92:17:07:f0:2e:
                    1d:9e:2b:82:ef:e5:a4:a9:3a:8a:29:81:20:ce:7f:
                    aa:fd:b8:5a:e1:af:5b:a5:60:ea:ae:52:dc:f9:1a:
                    4d:c5:ad:3e:2e:4e:c6:25:6d:52:8e:19:9e:01:7f:
                    00:35:df:8f:ad:81:51:58:dd:48:9c:2f:6f:50:8d:
                    e5:70:50:86:e2:a5:01:92:8f:fd:ce:58:20:9f:b9:
                    8f:cd:82:85:e9:73:c1:00:11:8d:ee:2e:c2:f9:43:
                    6b:88:70:cb:c9:1d:3f:35:2c:86:aa:87:8d:32:0b:
                    df:62:eb:10:0f:45:9d:b2:98:30:29:ec:75:d4:13:
                    63:17:0c:28:ae:71:5f:4e:1a:a1:a9:38:72:95:76:
                    8a:1b:e1:42:2f:61:65:b0:f8:a2:dc:8c:27:a9:71:
                    70:e8:06:ec:85:b8:ed:37:a1:c0:1d:c1:11:07:2b:
                    3f:4c:b6:4d:7a:07:5a:20:01:00:ee:89:cf:23:6e:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A0:43:85:60:F6:EB:A3:6F:23:16:CE:19:C0:0D:76:A8:89:E3:CB
            X509v3 Authority Key Identifier:
                keyid:EC:38:9D:E0:8D:FB:27:C1:53:7B:15:EF:34:B9:BA:C0:5F:95:1E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/34352e3233342e3139322e302f32322d3234203d3e20323637333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:78:b3:00:74:68:8e:f0:ab:ce:82:b4:e6:13:6c:24:6e:79:
         23:82:50:0b:b9:c0:19:14:ad:56:25:7f:13:03:bf:c3:2b:c3:
         48:13:83:5c:e9:9b:70:3c:0b:9e:f2:9f:98:bb:bf:0e:54:c0:
         6a:bb:00:6d:cd:d5:6a:6d:28:1c:82:b5:52:ba:73:5b:05:05:
         65:a3:c3:42:a2:0b:30:b4:44:d6:f6:09:67:5a:44:a3:93:66:
         06:78:cb:28:92:86:52:25:8c:9b:95:45:94:7d:95:32:c9:ca:
         17:f6:e9:62:79:c1:3f:72:f0:8b:f0:51:5b:55:be:63:8b:22:
         b5:60:c0:11:c0:25:ae:6d:ff:78:87:60:2a:e7:e2:fb:73:1e:
         cd:22:7f:32:8c:35:ee:b8:e4:ee:19:31:a4:7a:c9:9c:d7:df:
         eb:7d:ba:24:32:81:4a:7c:6c:62:f6:b1:8b:84:46:2e:10:1d:
         56:d3:88:42:27:8e:78:2f:c6:f5:57:0c:61:6f:ef:a3:06:b6:
         a0:57:28:d2:ed:d7:fa:d1:60:7a:0e:62:59:f0:47:96:62:f9:
         78:18:01:a3:64:80:51:4c:85:85:7c:24:e2:45:c0:f4:85:5a:
         4c:08:66:14:05:69:09:c4:ba:2d:0c:21:56:e6:01:cc:26:5a:
         d4:ef:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org