Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3234203d3e20323637303737.roa
File:                     34352e3232382e3130342e302f32322d3234203d3e20323637303737.roa (raw, json)
Hash identifier:          BbopuNi1uRk3CyQuXi/4c5R+dWy4p/pdGk+3BqQdsFU=
Subject key identifier:   09:E4:DB:24:5C:A6:89:F9:C0:A4:53:95:DE:F8:88:55:D6:8F:32:8C
Certificate issuer:       /CN=8137F50E2CC37D7E8A6CC2270A86A65B2B829B45
Certificate serial:       3F837A1311FBA7A08D0A3156946DFC65BFB6614E
Authority key identifier: 81:37:F5:0E:2C:C3:7D:7E:8A:6C:C2:27:0A:86:A6:5B:2B:82:9B:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8137F50E2CC37D7E8A6CC2270A86A65B2B829B45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3234203d3e20323637303737.roa
Signing time:             Tue 12 Mar 2024 02:22:23 +0000
ROA not before:           Tue 12 Mar 2024 02:17:23 +0000
ROA not after:            Tue 11 Mar 2025 02:22:23 +0000
asID:                     267077
IP address blocks:        45.228.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:83:7a:13:11:fb:a7:a0:8d:0a:31:56:94:6d:fc:65:bf:b6:61:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8137F50E2CC37D7E8A6CC2270A86A65B2B829B45
        Validity
            Not Before: Mar 12 02:17:23 2024 GMT
            Not After : Mar 11 02:22:23 2025 GMT
        Subject: CN=09E4DB245CA689F9C0A45395DEF88855D68F328C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:23:62:f4:87:13:69:50:4d:f0:92:fe:be:
                    10:d8:62:e0:98:fd:65:a4:ab:5c:19:04:35:66:69:
                    e0:e7:5d:20:a3:ca:26:eb:97:50:ac:99:f7:d2:ff:
                    7d:95:61:63:89:79:74:27:ae:e8:99:7c:f4:d3:64:
                    e0:c8:5c:86:3c:c2:70:91:2b:22:8d:d1:1d:1e:a5:
                    82:89:d1:fe:5b:f7:98:d3:ea:78:31:ac:f8:8a:a9:
                    38:1a:29:3e:51:4d:30:b9:18:c4:22:89:f1:73:b1:
                    c6:77:08:98:e6:1a:8f:1b:7b:e8:73:1b:d9:7a:73:
                    d5:82:9b:59:a1:bf:5f:9e:61:9a:f4:62:57:c1:92:
                    c3:59:ef:73:48:10:28:90:89:c8:94:6b:77:3f:e4:
                    09:8c:b1:3c:c1:85:a4:5c:f5:0c:86:4f:34:df:bf:
                    c8:38:45:a9:2f:f8:15:f8:22:77:f6:c7:dc:be:4c:
                    1e:da:c9:4e:42:8d:9c:74:43:4f:47:69:db:ec:44:
                    99:26:93:6c:16:ac:a9:63:0b:a7:d5:d2:ce:0e:99:
                    55:c4:08:81:9b:ba:27:74:7e:25:c9:ac:9d:59:86:
                    58:bd:56:42:9a:04:5e:e3:0b:97:ed:a1:98:63:af:
                    96:59:c0:cf:c6:25:55:5d:6f:00:81:dd:d6:b9:c9:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E4:DB:24:5C:A6:89:F9:C0:A4:53:95:DE:F8:88:55:D6:8F:32:8C
            X509v3 Authority Key Identifier:
                keyid:81:37:F5:0E:2C:C3:7D:7E:8A:6C:C2:27:0A:86:A6:5B:2B:82:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/8137F50E2CC37D7E8A6CC2270A86A65B2B829B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8137F50E2CC37D7E8A6CC2270A86A65B2B829B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3234203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:07:4c:32:83:e6:e3:1e:a9:2d:fd:6f:72:e3:db:2c:0b:f1:
         c9:4c:d6:23:c8:0d:de:19:5b:40:24:86:ca:97:13:4d:46:8d:
         52:0c:56:dd:3e:b1:c3:51:3e:1d:85:c1:0b:42:1a:ff:2a:d8:
         62:2d:e9:18:80:76:23:d4:47:c0:1e:c0:97:ce:f8:ff:47:0c:
         45:a5:b6:9a:ce:7e:61:b3:1c:36:da:f8:77:61:39:b1:e2:40:
         14:f8:cd:ea:fb:36:62:fd:9a:c5:79:8d:3e:fc:b9:65:3d:97:
         db:7b:65:ec:50:59:74:0a:bc:f5:df:15:72:6d:72:41:c6:1d:
         0e:d9:96:4d:79:ff:3c:80:0d:81:55:0f:c6:0e:7b:89:7c:b5:
         b3:d2:a8:88:0d:26:28:74:6b:95:c8:f9:be:78:d8:9e:f4:dc:
         46:91:8e:24:27:72:87:b4:cd:d3:55:78:f8:b8:a8:ec:1c:39:
         77:a2:83:74:be:d8:38:ec:b0:60:79:6a:f0:a0:9e:d7:4e:56:
         d6:24:66:ed:bd:87:1d:71:4e:90:7c:15:67:fa:15:c5:7e:1f:
         88:90:80:94:19:6e:07:ee:69:14:7a:f5:9b:6b:20:83:c5:e0:
         19:a9:0e:cc:e9:52:ca:ba:b7:91:c7:bd:1a:f8:fb:4f:41:c7:
         ba:88:1b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org