Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fzZJAzxhGTMuRfmDmvidUjdeYkk4prk3LNjNzEzxbs7/1/34352e3233382e34392e302f32342d3234203d3e20323638333039.roa
File:                     34352e3233382e34392e302f32342d3234203d3e20323638333039.roa (raw, json)
Hash identifier:          Lq3fC1G+o7PeXoT07JX29oL2ApJA6bA4I0dHa7T7rRY=
Subject key identifier:   AC:4F:04:41:59:EC:65:CE:A6:CA:C6:4C:1F:1D:5B:2D:46:55:82:CE
Certificate issuer:       /CN=350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020
Certificate serial:       17D75632E4058F40DE437A9F2B685C80BAD78BF3
Authority key identifier: 35:0E:4C:DA:2B:8D:5D:99:7F:CC:F0:53:2C:C6:8E:D1:C1:A7:A0:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fzZJAzxhGTMuRfmDmvidUjdeYkk4prk3LNjNzEzxbs7/1/34352e3233382e34392e302f32342d3234203d3e20323638333039.roa
Signing time:             Mon 07 Feb 2022 12:09:27 +0000
ROA not before:           Mon 07 Feb 2022 12:04:27 +0000
ROA not after:            Mon 06 Feb 2023 12:09:27 +0000
asID:                     268309
IP address blocks:        45.238.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:56:32:e4:05:8f:40:de:43:7a:9f:2b:68:5c:80:ba:d7:8b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020
        Validity
            Not Before: Feb  7 12:04:27 2022 GMT
            Not After : Feb  6 12:09:27 2023 GMT
        Subject: CN=AC4F044159EC65CEA6CAC64C1F1D5B2D465582CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:dd:c3:16:9a:74:84:09:78:98:05:53:15:
                    50:f2:c8:90:8b:b9:40:cc:8d:1a:c8:8f:ae:5d:53:
                    cc:a6:a1:10:6f:ea:f3:e2:9e:5d:fb:1e:4e:ba:4a:
                    9b:6e:92:c7:39:45:d6:ae:98:2a:d3:86:60:a5:63:
                    9b:99:5c:f9:a1:ac:a4:75:03:fc:c4:a2:02:fb:f8:
                    26:0a:7e:b7:1f:32:81:78:d4:50:40:9e:e8:aa:60:
                    3f:b8:ec:8f:75:65:a8:5e:12:b5:09:2b:fa:98:24:
                    2a:78:dc:21:04:ac:34:02:f5:c6:b8:85:4c:76:c7:
                    3e:75:65:d4:b9:0b:9f:a5:79:d8:08:61:20:a3:49:
                    f5:49:51:4f:6f:87:ad:57:b4:14:8f:b9:50:16:f9:
                    63:57:05:28:1a:f3:a5:85:81:75:d9:07:f8:31:df:
                    9a:f6:8c:f8:c0:b0:11:0a:70:ce:c0:ee:d5:62:d4:
                    40:f2:36:42:5b:0c:92:b9:d7:2c:f3:83:4c:7c:aa:
                    b9:ee:98:4f:73:b9:e5:f7:6d:17:33:c4:ca:6f:37:
                    98:9d:ae:34:6b:4b:46:ee:37:28:73:b8:cb:19:66:
                    e3:87:bc:06:58:c5:80:e0:d9:18:a0:0c:ba:b7:77:
                    aa:72:64:1a:e5:59:13:37:1e:37:d1:71:7f:5f:ca:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:04:41:59:EC:65:CE:A6:CA:C6:4C:1F:1D:5B:2D:46:55:82:CE
            X509v3 Authority Key Identifier:
                keyid:35:0E:4C:DA:2B:8D:5D:99:7F:CC:F0:53:2C:C6:8E:D1:C1:A7:A0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fzZJAzxhGTMuRfmDmvidUjdeYkk4prk3LNjNzEzxbs7/1/350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fzZJAzxhGTMuRfmDmvidUjdeYkk4prk3LNjNzEzxbs7/1/34352e3233382e34392e302f32342d3234203d3e20323638333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c3:d1:d9:f2:38:74:b2:39:5a:4c:e4:02:be:57:0c:87:d1:
         eb:97:9d:c5:6b:9b:7c:d2:a9:86:63:47:cf:8e:e5:66:43:7e:
         99:9e:10:80:ad:f4:e9:76:8e:32:3e:ee:9e:24:e2:38:b0:cc:
         f2:6a:18:14:5f:47:aa:d9:27:e0:b5:ed:f1:80:6f:b3:e4:3d:
         ec:24:cd:b7:ce:7d:a7:8c:e7:59:ae:1f:fe:51:e1:4f:b6:2f:
         94:19:86:64:d6:1c:47:7b:b5:a3:a8:1a:92:6c:ba:64:f8:86:
         71:42:e7:6d:3d:c0:c5:7a:ec:05:8d:22:cb:97:5b:da:fc:35:
         e9:db:62:8c:75:3f:37:6c:f6:df:a8:09:8a:ab:42:6d:60:fb:
         05:3a:5b:7c:cf:47:94:df:b5:c2:01:ad:87:7f:f3:ef:fe:4e:
         33:e3:29:2e:e0:57:89:42:5c:d1:bc:f5:e6:f8:5d:ae:a5:e6:
         3e:e2:46:67:d5:34:31:52:43:0f:da:0d:9a:fe:d6:a0:77:c7:
         64:c9:f3:86:09:ca:27:f5:70:78:04:42:e3:57:1f:d3:d4:b7:
         b3:d1:67:e5:b0:e3:8d:fd:ff:3a:c4:08:a7:15:00:14:b2:7b:
         c4:60:ae:e3:99:ae:69:c9:9d:5e:07:f7:45:5c:e7:e3:b5:b5:
         0d:43:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org