Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa
File:                     34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa (raw, json)
Hash identifier:          NgvOP9FEt6LWGwozElaaaQBh0o9NhAR8xQbLr537Ra8=
Subject key identifier:   44:A7:E0:C2:43:E8:A9:A5:64:3E:62:46:22:99:FA:93:79:C6:26:C6
Certificate issuer:       /CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
Certificate serial:       21B831EF0291F1EAFC4446BE62C362B20871C828
Authority key identifier: D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa
Signing time:             Thu 15 Feb 2024 20:41:00 +0000
ROA not before:           Thu 15 Feb 2024 20:36:00 +0000
ROA not after:            Thu 13 Feb 2025 20:41:00 +0000
asID:                     266356
IP address blocks:        45.234.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b8:31:ef:02:91:f1:ea:fc:44:46:be:62:c3:62:b2:08:71:c8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
        Validity
            Not Before: Feb 15 20:36:00 2024 GMT
            Not After : Feb 13 20:41:00 2025 GMT
        Subject: CN=44A7E0C243E8A9A5643E62462299FA9379C626C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:53:29:38:44:9f:57:63:bd:fe:ec:08:87:
                    5f:cc:cb:de:dd:79:82:78:ef:f0:4b:8e:31:99:36:
                    e9:0a:8d:35:e1:8e:ba:c2:4e:e0:3c:07:54:e1:2d:
                    f9:e0:a0:65:30:14:d1:05:8a:c1:e1:78:f3:b7:59:
                    2e:f9:2d:92:f3:89:ec:31:0f:ee:5e:bf:ae:40:60:
                    a6:4d:d6:67:d2:79:3f:9b:b5:16:27:13:de:21:09:
                    f9:8c:93:aa:18:b5:86:e7:99:06:5e:8b:5e:f4:f2:
                    ea:be:56:0c:6d:1c:89:08:f3:d9:35:4c:e7:8d:52:
                    bc:d2:0b:e9:5c:a5:92:24:fc:8b:77:6a:d5:be:c8:
                    e5:9b:d7:24:cc:46:7a:d9:b0:de:17:aa:b3:3d:3c:
                    59:a7:29:6f:a2:69:fc:ea:9d:64:00:cf:7a:a0:1c:
                    5a:97:ab:b6:6b:27:40:e3:f8:ad:29:93:7f:de:b5:
                    73:35:14:01:c2:b7:04:0b:5a:8c:23:14:d8:f3:b2:
                    d2:51:d9:03:5d:c4:93:ca:46:fa:fd:cf:e6:d1:e6:
                    76:49:cb:d8:16:de:26:68:a4:83:44:c3:21:25:79:
                    db:d0:b7:24:84:94:b9:86:69:81:e4:bd:d7:32:d9:
                    7f:32:7d:93:c2:ed:1b:e4:05:93:e8:70:d0:de:4c:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A7:E0:C2:43:E8:A9:A5:64:3E:62:46:22:99:FA:93:79:C6:26:C6
            X509v3 Authority Key Identifier:
                keyid:D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:b6:6f:a3:e0:61:10:14:94:18:cd:f5:65:1f:08:cf:2e:31:
         74:9f:0d:af:f3:ec:7f:e1:29:24:e7:b5:76:88:37:2a:61:06:
         5c:90:20:95:5b:35:dc:b2:f9:c3:d9:c5:a4:61:ee:29:1a:81:
         9d:e4:4e:e4:bb:6b:3c:40:59:96:52:0f:04:38:de:fe:51:17:
         55:23:5a:2f:f2:b7:d1:8a:ac:69:b8:4e:c4:44:16:f9:75:2a:
         30:fd:c9:81:e8:0b:ad:ed:39:5b:c7:90:11:cb:e1:3c:44:ca:
         09:32:43:2f:3e:8f:aa:36:c5:e0:25:5a:4f:59:56:7f:60:2a:
         f5:6a:4e:15:97:65:0f:cd:ce:44:a5:18:84:a1:95:d6:2b:fd:
         54:f1:b9:a9:66:7c:72:93:b1:4b:74:a1:be:4c:72:d4:c1:53:
         33:0a:20:56:a2:be:4a:21:7a:97:e8:18:14:4b:e6:4c:fe:86:
         25:b1:7d:ce:c5:0b:51:88:b4:5c:a2:67:4b:14:41:f9:9b:3a:
         14:36:79:d7:36:cf:84:3d:4c:ed:ff:f4:bf:b0:b7:13:23:3c:
         da:d2:53:00:ef:a7:b4:07:93:74:bd:60:93:db:9a:4e:05:46:
         17:7a:86:ff:b7:de:77:06:f7:16:6d:c4:eb:22:b2:0e:53:9b:
         bd:82:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org