Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/34352e3233342e39362e302f32322d3234203d3e20323637343031.roa
File:                     34352e3233342e39362e302f32322d3234203d3e20323637343031.roa (raw, json)
Hash identifier:          44DTmAa1pR7vUokAIn7nw7YLsPw4+FdUlRLAksL0Gzs=
Subject key identifier:   4A:F3:5F:9B:A3:02:AE:39:90:85:73:8C:1E:C9:CB:B6:5E:FE:D8:AC
Certificate issuer:       /CN=C3D07EF0DC5105B2707D1E75F52C1A0E15A80881
Certificate serial:       4BD1C0C82B60BDAE6656CD3C723DBA79CA0BC7AA
Authority key identifier: C3:D0:7E:F0:DC:51:05:B2:70:7D:1E:75:F5:2C:1A:0E:15:A8:08:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D07EF0DC5105B2707D1E75F52C1A0E15A80881.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/34352e3233342e39362e302f32322d3234203d3e20323637343031.roa
Signing time:             Fri 05 Apr 2024 20:45:21 +0000
ROA not before:           Fri 05 Apr 2024 20:40:21 +0000
ROA not after:            Fri 04 Apr 2025 20:45:21 +0000
asID:                     267401
IP address blocks:        45.234.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d1:c0:c8:2b:60:bd:ae:66:56:cd:3c:72:3d:ba:79:ca:0b:c7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D07EF0DC5105B2707D1E75F52C1A0E15A80881
        Validity
            Not Before: Apr  5 20:40:21 2024 GMT
            Not After : Apr  4 20:45:21 2025 GMT
        Subject: CN=4AF35F9BA302AE399085738C1EC9CBB65EFED8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:01:99:d4:32:e3:60:35:d3:3a:ce:f5:32:
                    ab:84:98:54:d1:ea:2b:72:66:55:be:99:f6:ac:46:
                    f9:4d:c8:65:c9:26:12:4f:7e:6a:d7:ad:ed:2a:9d:
                    ff:6c:74:c2:ee:a1:13:d8:0d:37:07:11:3a:cb:a8:
                    76:64:81:9b:40:0a:1c:6a:a1:2f:55:6b:ce:90:78:
                    6f:24:23:67:f8:c2:5b:7b:97:2b:ec:ff:ca:1d:0f:
                    8c:fe:be:51:ea:92:9f:5f:36:69:49:59:23:ec:e0:
                    f2:3b:5e:d0:da:7e:2f:a2:cd:80:45:76:2a:4c:b3:
                    99:60:90:79:fd:09:17:7e:05:42:98:48:b3:20:51:
                    d9:9b:8b:7d:87:8c:d6:26:f3:66:96:b7:de:ff:d0:
                    5f:46:7e:b8:f9:57:92:8d:74:17:72:a0:29:01:77:
                    3b:03:23:04:fa:3c:90:51:bf:40:bf:c5:2f:e8:12:
                    fa:75:06:23:21:3e:27:5f:f0:b6:c6:15:c4:bc:e5:
                    97:04:e7:31:fc:b0:1a:b9:ad:be:a9:8d:14:cd:69:
                    99:05:08:c1:93:f4:58:d5:e1:99:b0:fc:3e:78:23:
                    2a:c1:49:34:26:55:d5:88:d0:20:67:59:2e:34:23:
                    66:8d:fe:db:78:d7:f2:d9:13:d7:57:c4:f5:c5:e2:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:5F:9B:A3:02:AE:39:90:85:73:8C:1E:C9:CB:B6:5E:FE:D8:AC
            X509v3 Authority Key Identifier:
                keyid:C3:D0:7E:F0:DC:51:05:B2:70:7D:1E:75:F5:2C:1A:0E:15:A8:08:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/C3D07EF0DC5105B2707D1E75F52C1A0E15A80881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D07EF0DC5105B2707D1E75F52C1A0E15A80881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/34352e3233342e39362e302f32322d3234203d3e20323637343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:84:9a:a4:69:9f:6b:da:c7:27:ae:00:61:6d:f3:a1:8f:
         1b:1e:de:75:1d:21:9d:62:f4:bb:72:57:ab:22:9b:b9:c4:e1:
         32:31:48:0e:95:11:f4:4a:40:4f:7e:1b:b0:89:5b:57:a6:54:
         e5:e4:40:d3:ff:5c:0d:79:96:d0:0f:e9:ff:65:5a:1e:dc:d3:
         9e:43:a4:57:cb:2e:79:8a:c1:eb:d4:03:74:15:eb:ac:0b:ea:
         27:10:b8:36:da:d0:7e:e1:a4:5e:22:64:aa:01:47:18:c2:f4:
         0a:51:ad:36:61:36:e6:f3:95:37:bd:d9:af:75:9e:35:21:23:
         08:3d:88:bc:32:02:7b:b6:11:f0:62:9a:48:64:be:4b:4a:55:
         25:0c:64:5a:5a:1b:75:fa:07:dd:9b:c8:26:54:37:84:f4:71:
         00:85:60:5e:36:2d:6c:01:c6:78:93:8c:0a:1c:4f:f7:c1:ca:
         bb:58:b8:32:a2:16:c8:ec:fc:8b:f9:bb:37:12:c7:6a:36:96:
         42:e6:89:d1:d4:b4:bf:6f:93:7e:1f:1f:f0:47:af:ab:84:dd:
         f2:c2:3e:50:3b:93:5c:7f:7b:6b:0a:18:25:19:b4:3f:06:c4:
         26:09:02:89:76:87:47:06:d4:0c:e7:52:b6:6b:68:88:e6:76:
         93:bb:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org