Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32332d3233203d3e20323638323136.roa
File:                     34352e3233352e3234382e302f32332d3233203d3e20323638323136.roa (raw, json)
Hash identifier:          SjcMgSOQmpfxXlFnDeyIGvZMd/+cFvXsKiJDGPk6xhE=
Subject key identifier:   84:8C:E5:6D:A3:E4:B5:61:70:56:45:F7:32:44:25:1E:1F:55:AA:B6
Certificate issuer:       /CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
Certificate serial:       0B3D015A263C79DE3257E94BEB7A475BF3637926
Authority key identifier: 41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32332d3233203d3e20323638323136.roa
Signing time:             Wed 20 Mar 2024 23:39:17 +0000
ROA not before:           Wed 20 Mar 2024 23:34:17 +0000
ROA not after:            Wed 19 Mar 2025 23:39:17 +0000
asID:                     268216
IP address blocks:        45.235.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3d:01:5a:26:3c:79:de:32:57:e9:4b:eb:7a:47:5b:f3:63:79:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
        Validity
            Not Before: Mar 20 23:34:17 2024 GMT
            Not After : Mar 19 23:39:17 2025 GMT
        Subject: CN=848CE56DA3E4B561705645F73244251E1F55AAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:9c:21:38:00:74:83:e7:d5:74:85:4a:6b:
                    4f:f9:6c:d6:be:14:e4:be:64:b7:24:b9:fc:c4:00:
                    56:28:18:ad:61:3a:e2:aa:18:8a:44:5b:bc:52:79:
                    10:7a:4e:03:94:ee:50:2f:93:23:48:db:be:33:63:
                    10:ad:cf:46:cb:16:cb:14:fa:a0:f9:cb:fd:ec:33:
                    de:54:4e:95:69:23:77:e8:c5:7a:97:5c:34:91:18:
                    43:35:ce:64:75:dd:fc:91:db:4c:c7:74:f7:59:00:
                    eb:b1:d3:81:f4:4b:af:82:cb:09:bc:80:34:f9:da:
                    fb:71:c0:66:4a:30:25:8b:27:25:e9:e7:8e:d9:69:
                    27:37:0c:f3:c4:28:f6:02:03:ac:ba:41:01:8a:a2:
                    79:9b:15:13:e9:fc:aa:a5:f3:fb:ee:e6:77:52:8e:
                    9d:58:6d:25:fd:ab:1c:39:47:56:94:f8:85:0a:2f:
                    b3:25:7d:47:d0:c1:12:37:a5:a9:e7:02:90:f6:d2:
                    44:88:df:08:21:de:ca:a3:03:e9:7c:9c:f8:11:51:
                    56:5e:1d:0f:65:5a:74:21:08:fa:6f:9c:39:4c:9e:
                    24:f7:ff:af:94:8f:e6:0a:e5:77:4d:0b:5b:3e:a9:
                    35:ba:7b:5f:6f:ce:5f:fd:f0:62:26:4f:62:1c:cb:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8C:E5:6D:A3:E4:B5:61:70:56:45:F7:32:44:25:1E:1F:55:AA:B6
            X509v3 Authority Key Identifier:
                keyid:41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32332d3233203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:1f:e1:8a:3d:d7:26:84:08:78:f6:1c:58:13:72:d4:50:
         a8:1d:fb:5f:94:02:2f:6c:07:de:c4:69:21:6a:9f:71:2d:ac:
         9a:d2:3a:30:94:91:39:04:c6:ad:aa:79:07:79:69:52:f1:2c:
         5e:13:9b:be:02:8e:04:d6:d3:58:e7:c8:47:f0:ca:5b:a3:ca:
         85:e2:8f:0e:a0:32:e4:28:72:67:da:9b:1f:b4:c5:fc:bc:e5:
         40:2b:64:5b:44:ac:65:c7:d3:41:9e:e2:39:74:7f:1c:de:a6:
         98:5b:55:c1:bc:87:95:e9:50:5a:e6:30:cf:49:a9:6a:76:c7:
         59:70:cf:50:9b:eb:f9:ed:f9:1e:9e:26:89:12:70:3a:d5:c3:
         70:11:43:bb:fd:27:48:be:e9:85:81:37:34:cf:54:4f:a6:ef:
         47:fc:0a:20:08:78:3e:c5:59:f0:25:a9:31:83:08:61:00:a7:
         18:3d:7e:a6:5a:33:da:d9:12:df:3d:8b:bd:40:b2:35:c4:32:
         e9:de:56:10:9a:77:58:7c:7a:df:75:ca:52:ae:a6:61:81:16:
         5a:08:1f:49:0d:ce:73:57:3c:4f:ff:de:a5:6f:67:53:87:69:
         e1:d8:04:3d:5b:cc:ee:77:53:0f:32:44:0f:3a:4e:27:cc:21:
         be:00:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org