Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/34352e3233362e3135342e302f32342d3234203d3e20323638323535.roa
File:                     34352e3233362e3135342e302f32342d3234203d3e20323638323535.roa (raw, json)
Hash identifier:          0QsmFTpfDN6XH0NwJz6rZL2yXxa7d1IsW5/zNDm6Urw=
Subject key identifier:   A3:FF:D6:E1:7B:3B:30:FE:CB:E2:6F:7C:77:12:6F:F6:41:2A:87:8A
Certificate issuer:       /CN=B7EACE5FCD839D3B7EB07701983C797BF744943B
Certificate serial:       3331093F523E3BAA4B2FE92536A859101B4C6914
Authority key identifier: B7:EA:CE:5F:CD:83:9D:3B:7E:B0:77:01:98:3C:79:7B:F7:44:94:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/34352e3233362e3135342e302f32342d3234203d3e20323638323535.roa
Signing time:             Mon 03 Apr 2023 10:57:46 +0000
ROA not before:           Mon 03 Apr 2023 10:52:46 +0000
ROA not after:            Mon 01 Apr 2024 10:57:46 +0000
asID:                     268255
IP address blocks:        45.236.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:31:09:3f:52:3e:3b:aa:4b:2f:e9:25:36:a8:59:10:1b:4c:69:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7EACE5FCD839D3B7EB07701983C797BF744943B
        Validity
            Not Before: Apr  3 10:52:46 2023 GMT
            Not After : Apr  1 10:57:46 2024 GMT
        Subject: CN=A3FFD6E17B3B30FECBE26F7C77126FF6412A878A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:26:b4:44:f0:bf:97:1a:85:42:12:72:c6:
                    6c:f6:77:37:4d:92:3e:d6:8e:62:83:bf:3c:c5:45:
                    5c:ae:4d:7b:0a:29:f8:cd:40:9e:f1:4d:00:8b:9a:
                    a5:0d:2b:7d:d0:ed:c2:2d:00:9c:dd:a4:bf:dc:ed:
                    a3:71:f9:16:97:42:b4:c5:b6:91:0a:8c:a9:98:c1:
                    2e:8a:c8:0e:48:ea:f7:48:0a:c4:66:cf:b4:b9:3b:
                    f6:f3:26:a6:f6:52:f4:41:7e:0c:58:f3:31:02:ba:
                    b6:7c:2e:e9:91:f2:57:20:dc:4f:57:bf:65:3e:27:
                    a9:8c:38:db:d7:9d:27:1d:a6:ed:83:23:be:95:3a:
                    45:ca:3d:8a:2a:29:5a:ee:6a:cf:1c:ed:d5:84:f9:
                    12:91:19:22:43:50:b3:77:50:7a:bb:1f:f4:f2:4e:
                    47:dc:8a:b8:86:83:03:b3:07:9a:05:68:6e:00:a5:
                    a8:68:c6:a1:d2:ad:73:14:3b:4c:27:fa:9a:65:88:
                    4c:21:43:81:9b:c0:2a:b4:52:87:4a:90:a6:1e:9f:
                    24:8f:d0:35:ac:b0:b4:1a:04:53:51:14:e8:c0:42:
                    d9:7a:5b:3d:77:1f:8f:27:8d:09:40:4d:07:1a:68:
                    5b:83:c1:ec:68:03:16:3c:da:9d:f9:b2:22:37:6f:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FF:D6:E1:7B:3B:30:FE:CB:E2:6F:7C:77:12:6F:F6:41:2A:87:8A
            X509v3 Authority Key Identifier:
                keyid:B7:EA:CE:5F:CD:83:9D:3B:7E:B0:77:01:98:3C:79:7B:F7:44:94:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/34352e3233362e3135342e302f32342d3234203d3e20323638323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:83:8b:b6:49:06:a7:da:f6:79:6c:30:f0:ac:a9:68:8a:b8:
         8e:75:36:ba:eb:b2:fd:e3:05:68:3b:6f:3d:47:da:76:a0:e7:
         c7:db:cc:6c:14:ea:93:d8:a0:e2:c7:de:69:c3:29:47:e4:1b:
         75:33:db:ba:66:3e:fc:ca:25:6e:ff:b3:90:43:69:6e:78:a9:
         fc:75:c1:e4:e7:5d:7e:af:e7:68:80:2a:23:3d:41:7e:8e:48:
         9e:3e:8d:e7:43:01:34:cf:8d:95:ae:0a:e6:fe:87:28:c2:fd:
         d7:7c:63:11:22:ad:af:0c:39:58:e3:29:97:b0:b5:62:8b:f6:
         82:f4:76:cb:f8:c3:cc:2e:30:0a:1f:08:e3:ea:71:57:97:c4:
         75:d6:f8:07:c9:ed:95:92:5c:cb:9d:91:0f:fe:9d:e1:5b:bf:
         5d:a5:2a:e7:bb:f4:97:44:1b:ef:ce:09:4d:df:7f:4b:32:89:
         23:d3:43:45:4f:7d:eb:3e:10:02:ff:c8:10:07:05:41:09:ec:
         a1:d4:a2:4d:65:66:b3:95:58:b3:a0:07:20:ae:8e:9a:90:9c:
         21:2f:1f:62:10:35:3e:ce:41:02:00:00:93:63:93:65:9a:21:
         59:8d:9f:5e:be:20:3b:03:87:ac:68:71:ef:07:cf:ff:1e:1c:
         f6:b8:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org