Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa
File:                     34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa (raw, json)
Hash identifier:          nhGmg6wIw5Eg+gTcgr7Vnj3bq6s8W1z+K2H1posbNqQ=
Subject key identifier:   D0:0A:EC:5A:52:78:7F:A0:C1:D7:D6:A8:09:72:D8:5C:4B:B7:BE:88
Certificate issuer:       /CN=BE22DC93D9DEC10D07526785DECD4A3F53639199
Certificate serial:       2559ED47B99215A7AB7E71A22D08965BF7FFCB73
Authority key identifier: BE:22:DC:93:D9:DE:C1:0D:07:52:67:85:DE:CD:4A:3F:53:63:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE22DC93D9DEC10D07526785DECD4A3F53639199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa
Signing time:             Fri 01 Mar 2024 19:54:28 +0000
ROA not before:           Fri 01 Mar 2024 19:49:28 +0000
ROA not after:            Fri 28 Feb 2025 19:54:28 +0000
asID:                     266934
IP address blocks:        45.225.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:59:ed:47:b9:92:15:a7:ab:7e:71:a2:2d:08:96:5b:f7:ff:cb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE22DC93D9DEC10D07526785DECD4A3F53639199
        Validity
            Not Before: Mar  1 19:49:28 2024 GMT
            Not After : Feb 28 19:54:28 2025 GMT
        Subject: CN=D00AEC5A52787FA0C1D7D6A80972D85C4BB7BE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:bc:17:4c:e8:27:7f:7f:8a:15:22:2e:d5:
                    7f:89:b8:c6:ba:3f:d7:c6:34:ee:ea:16:77:8e:7b:
                    55:97:18:66:35:1e:08:17:a0:9e:6a:1e:1c:39:72:
                    f5:ae:d9:12:db:f7:2d:83:2c:c4:57:6a:cc:3e:0a:
                    9f:c2:47:b4:31:dc:e4:58:79:07:55:49:13:37:21:
                    11:51:84:b6:02:c2:66:1b:72:69:0d:eb:c1:77:72:
                    cf:04:a6:d9:09:f7:24:03:40:4a:e5:23:96:a3:fb:
                    10:7b:e9:c2:cd:65:dd:55:dc:3c:38:3e:b3:23:fb:
                    5e:7f:5a:b3:e8:15:27:5e:c2:22:a6:55:24:46:53:
                    da:72:f2:e3:b9:86:d9:c0:5a:b2:bc:3e:8b:17:75:
                    5f:f8:18:63:11:bc:da:9e:df:5c:58:fa:a4:0f:9e:
                    e6:2f:26:58:68:78:d5:85:d5:81:c3:70:b1:7d:11:
                    a2:f5:5f:f0:ec:95:a1:c3:2f:31:dd:0c:e5:33:34:
                    01:ae:d4:3a:6b:f2:87:58:62:e4:e1:78:af:5f:f8:
                    6b:38:30:a1:ef:b8:8a:ad:0b:f6:2e:bd:ca:7b:bf:
                    43:48:c5:85:52:7a:97:0d:a0:a8:35:68:b4:38:1a:
                    64:7e:fa:66:3d:c4:0a:2e:be:eb:ee:58:61:a4:d4:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0A:EC:5A:52:78:7F:A0:C1:D7:D6:A8:09:72:D8:5C:4B:B7:BE:88
            X509v3 Authority Key Identifier:
                keyid:BE:22:DC:93:D9:DE:C1:0D:07:52:67:85:DE:CD:4A:3F:53:63:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/BE22DC93D9DEC10D07526785DECD4A3F53639199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE22DC93D9DEC10D07526785DECD4A3F53639199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:b0:ff:53:1c:34:4f:9c:87:4c:0d:3a:94:0d:5e:07:d9:7c:
         74:c1:0f:a3:85:5a:71:12:66:61:f0:8d:66:4d:88:62:5b:9d:
         88:46:89:f3:e6:d5:53:27:60:bf:bd:ff:7f:32:c0:f5:de:0c:
         ab:d2:be:f4:d0:38:70:01:f5:ce:f6:b9:aa:c4:67:4a:98:b5:
         92:15:97:d0:17:49:48:87:f0:0c:82:26:af:41:b5:46:d7:a2:
         39:da:dc:45:86:cd:a2:d1:87:06:c8:64:1c:df:31:e6:bf:56:
         87:2d:70:3e:cf:c2:8a:8f:16:9e:b2:5a:a0:fa:c1:5f:4f:86:
         20:92:d4:da:9c:30:66:6a:c4:89:9c:49:4d:03:8f:a6:d6:b7:
         24:87:8f:2c:52:55:ca:e7:e6:00:2d:17:9d:3c:e0:06:8e:9e:
         62:33:cb:74:d9:17:59:bb:53:ec:f5:c5:5f:7e:63:52:60:d0:
         81:a3:4f:5d:f5:d0:ae:9e:d1:7b:6d:42:28:05:6b:7a:cf:3e:
         bf:60:5d:7e:18:2c:aa:0e:a2:40:b4:f2:85:fa:e6:53:59:09:
         90:e5:8c:8b:24:02:2a:22:77:70:b2:7e:ff:de:34:76:da:3d:
         e8:54:33:d9:31:be:49:2e:b7:cc:e8:39:24:23:da:52:ae:13:
         54:6b:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org