Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/34352e3233352e302e302f32322d3232203d3e20323637333930.roa
File:                     34352e3233352e302e302f32322d3232203d3e20323637333930.roa (raw, json)
Hash identifier:          hhMQaRWflRFvILoJIxDOoSrmGXKaaSP0R4njO5p6XqE=
Subject key identifier:   5B:8E:59:7B:41:9E:4F:56:F1:99:83:0A:6D:5B:1E:E1:F8:6F:32:F4
Certificate issuer:       /CN=EDC897E4325310FDE32E946F296A0E9166F42300
Certificate serial:       78CF5DD6B95B2999B2F3CC87F3F34948F91A9438
Authority key identifier: ED:C8:97:E4:32:53:10:FD:E3:2E:94:6F:29:6A:0E:91:66:F4:23:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDC897E4325310FDE32E946F296A0E9166F42300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/34352e3233352e302e302f32322d3232203d3e20323637333930.roa
Signing time:             Thu 04 Apr 2024 15:29:01 +0000
ROA not before:           Thu 04 Apr 2024 15:24:01 +0000
ROA not after:            Thu 03 Apr 2025 15:29:01 +0000
asID:                     267390
IP address blocks:        45.235.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cf:5d:d6:b9:5b:29:99:b2:f3:cc:87:f3:f3:49:48:f9:1a:94:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDC897E4325310FDE32E946F296A0E9166F42300
        Validity
            Not Before: Apr  4 15:24:01 2024 GMT
            Not After : Apr  3 15:29:01 2025 GMT
        Subject: CN=5B8E597B419E4F56F199830A6D5B1EE1F86F32F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:0e:af:2a:9f:be:4c:b5:f8:93:92:ee:70:
                    11:3b:99:9c:36:7e:3c:fc:1f:3f:34:2e:e6:76:2a:
                    cc:d6:36:1b:45:d1:83:33:17:f0:96:3b:8d:c8:b5:
                    2c:6a:11:0f:e9:87:ce:62:d5:5d:c7:cd:94:70:d9:
                    36:5d:63:89:de:73:f4:e9:c6:1a:1a:88:af:90:39:
                    96:6b:81:1b:3a:7d:1e:c2:75:05:e9:f8:cd:8e:08:
                    04:67:dd:60:76:54:3e:7a:0b:b4:f1:97:c5:b3:30:
                    76:9b:2d:dc:8f:90:c2:35:94:30:fb:06:b0:25:3a:
                    9a:fb:c7:be:7a:0b:fa:24:b6:9c:5b:2e:db:17:f3:
                    e5:af:32:e7:59:16:a3:07:1e:13:1c:67:65:07:8e:
                    86:9f:c2:2c:d0:fc:e9:25:5a:2c:98:77:9e:63:22:
                    55:98:e5:ee:b9:7f:b9:97:36:6b:5a:e8:04:7c:5b:
                    61:3b:3c:84:f5:96:e8:8b:68:7c:e3:52:d9:76:9b:
                    18:7f:e9:55:01:6e:03:67:98:31:d1:90:a2:98:45:
                    1a:08:0b:fa:77:8f:2a:ab:2f:00:cf:0c:05:57:64:
                    2d:25:dd:4c:fd:b7:a3:a0:a4:c1:68:87:6f:cd:6c:
                    1e:a3:de:31:aa:a7:a9:5d:7a:fb:b9:04:5c:5e:e9:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:59:7B:41:9E:4F:56:F1:99:83:0A:6D:5B:1E:E1:F8:6F:32:F4
            X509v3 Authority Key Identifier:
                keyid:ED:C8:97:E4:32:53:10:FD:E3:2E:94:6F:29:6A:0E:91:66:F4:23:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/EDC897E4325310FDE32E946F296A0E9166F42300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDC897E4325310FDE32E946F296A0E9166F42300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/1/34352e3233352e302e302f32322d3232203d3e20323637333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:90:36:bb:42:72:32:38:4b:23:b5:b1:8a:ef:ea:bd:7f:f7:
         27:b9:a4:13:a8:51:42:06:6d:7c:5c:57:87:94:2b:3b:bd:c0:
         b3:ca:65:92:67:73:5b:9a:8d:e0:ba:6f:9e:b7:14:77:1c:f6:
         07:20:b1:c1:e6:86:3a:77:e9:db:a3:7f:e6:36:9f:ca:6b:ed:
         a9:d5:9d:38:42:69:a7:c6:36:7e:65:d4:5d:63:cc:6e:dc:a0:
         4c:6f:e1:1f:01:4e:d9:45:26:87:13:28:60:b2:fe:8b:13:44:
         d1:de:a2:8a:d1:e4:5d:9d:58:f8:fe:9c:37:4c:22:36:ca:43:
         27:67:c3:98:78:f7:0c:f1:d6:29:8c:ac:c1:2d:9f:dd:07:e5:
         da:05:9a:71:02:56:d7:33:66:fa:b5:66:ea:33:b9:09:a9:f2:
         97:77:ce:83:0c:d3:3f:47:9d:f3:08:ca:aa:3a:7e:0d:9c:0a:
         3e:42:66:92:63:de:d3:3c:d6:6a:37:43:11:e5:26:3b:f7:37:
         9e:3b:d4:ff:16:38:37:1d:e5:18:5f:48:6d:b2:51:9d:39:39:
         7c:2b:a0:89:40:98:05:f0:09:5d:6e:34:3f:1f:22:7f:b7:d4:
         0e:7d:06:43:63:34:8d:86:89:b1:0e:46:e2:62:70:56:6b:70:
         64:e4:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org