Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323639303934.roa
File:                     34352e3233382e372e302f32342d3234203d3e20323639303934.roa (raw, json)
Hash identifier:          aXWWID3giKtriA9n2fogqA/mc879Q5I+24V9/DyJo+Q=
Subject key identifier:   D1:A8:76:6E:15:60:C0:50:8A:03:A7:C2:AC:BF:50:A1:39:9F:41:72
Certificate issuer:       /CN=492F6DC9B3DF348BE0F1C631CD16D9B6921A3760
Certificate serial:       A3F1E161F0B2FCB8F9A2DB5BF1E9ED7D27F8ED
Authority key identifier: 49:2F:6D:C9:B3:DF:34:8B:E0:F1:C6:31:CD:16:D9:B6:92:1A:37:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/492F6DC9B3DF348BE0F1C631CD16D9B6921A3760.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323639303934.roa
Signing time:             Mon 26 Sep 2022 17:38:59 +0000
ROA not before:           Mon 26 Sep 2022 17:33:59 +0000
ROA not after:            Mon 25 Sep 2023 17:38:59 +0000
asID:                     269094
IP address blocks:        45.238.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:f1:e1:61:f0:b2:fc:b8:f9:a2:db:5b:f1:e9:ed:7d:27:f8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492F6DC9B3DF348BE0F1C631CD16D9B6921A3760
        Validity
            Not Before: Sep 26 17:33:59 2022 GMT
            Not After : Sep 25 17:38:59 2023 GMT
        Subject: CN=D1A8766E1560C0508A03A7C2ACBF50A1399F4172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:2b:9b:d4:a7:2e:99:2e:94:56:77:a6:51:
                    a0:f8:f2:e4:cb:ec:a3:3c:2d:1a:1b:dd:44:b5:09:
                    a3:4e:c8:4e:01:8b:53:85:90:2b:e7:52:e2:cb:49:
                    df:24:8d:5d:46:a2:18:f7:b1:5d:aa:2b:d7:36:c8:
                    3c:e5:5e:c6:22:96:56:b3:42:f5:c2:6f:61:b0:8f:
                    77:e7:20:49:a5:ad:af:23:13:92:1d:63:a6:b2:3f:
                    13:b0:93:ec:56:35:3b:9f:09:9a:f6:95:95:fa:ec:
                    f4:04:0d:27:9d:10:7b:1c:cc:64:f6:5c:de:08:83:
                    a1:97:8e:47:ed:70:d4:78:e0:a0:c6:80:13:de:23:
                    85:44:6a:c1:69:55:fd:cf:ed:e3:af:13:69:76:03:
                    49:7a:53:9e:00:59:75:af:83:07:c0:b0:b9:25:f9:
                    e0:d4:b2:13:87:ef:25:0b:b7:a0:73:d2:88:ea:14:
                    e2:56:63:6a:29:e3:c1:9e:35:64:29:13:23:07:b5:
                    c2:95:49:19:bc:f3:a1:bc:7c:4c:58:69:cf:0a:4c:
                    c1:ba:d0:54:13:59:3d:c4:da:39:c8:c1:84:82:28:
                    47:1e:fd:6c:22:86:4f:1e:f5:9e:80:f0:3a:62:a1:
                    07:43:f3:ab:45:5a:84:00:60:09:5e:01:63:1d:77:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A8:76:6E:15:60:C0:50:8A:03:A7:C2:AC:BF:50:A1:39:9F:41:72
            X509v3 Authority Key Identifier:
                keyid:49:2F:6D:C9:B3:DF:34:8B:E0:F1:C6:31:CD:16:D9:B6:92:1A:37:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/492F6DC9B3DF348BE0F1C631CD16D9B6921A3760.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/492F6DC9B3DF348BE0F1C631CD16D9B6921A3760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323639303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:5a:c6:d9:f5:0f:e4:60:a2:0e:a7:bd:ab:ea:74:35:65:93:
         19:19:97:4d:fe:4c:74:47:e4:bd:0f:64:33:1c:13:10:22:29:
         33:37:a4:8f:9b:9e:f0:d7:ca:48:ce:ce:98:73:b9:fa:77:2b:
         b5:c9:96:45:91:b4:ab:b8:86:a8:35:99:96:f1:32:dc:28:7f:
         67:f6:40:ea:79:bf:ec:7e:93:55:96:8c:f7:5c:0f:43:ea:91:
         3e:6a:42:41:5c:4e:f7:c7:61:c4:e8:4c:3d:2c:c6:85:e2:23:
         b4:a4:9a:62:4b:f9:c6:73:7d:54:38:bd:42:27:6c:34:cd:48:
         23:dd:b4:d2:4b:91:61:98:fe:0c:00:86:cd:19:83:3a:a8:bd:
         94:96:20:d7:45:83:c0:d2:64:f1:96:b0:60:60:00:a8:55:91:
         5c:e0:6e:60:4a:bc:0e:65:ed:8c:ae:74:4c:6b:bf:5a:a7:59:
         28:2d:c8:64:ce:2d:ba:c4:b4:46:f8:3e:8a:75:02:86:1a:6c:
         ea:64:4e:c7:b5:11:e5:39:27:1b:b6:23:2e:03:d1:6a:16:09:
         5b:51:7d:75:6e:b9:2f:39:27:2d:2f:eb:2a:32:b3:12:12:a5:
         b0:8f:91:72:1c:f6:69:90:af:9f:49:71:50:0f:45:30:99:68:
         5e:0f:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org