Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33322e302f32342d3234203d3e20323638303438.roa
File:                     34352e3136382e33322e302f32342d3234203d3e20323638303438.roa (raw, json)
Hash identifier:          tHchexdAZ5yw3XUBxLV+b/FJUfATQxHr1gGDigJdG/4=
Subject key identifier:   83:AA:45:04:58:C1:02:77:9D:6F:B1:E4:8F:05:22:B0:81:68:7F:84
Certificate issuer:       /CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Certificate serial:       06CA65DC7266D494CF7279522799056AE6AD8D45
Authority key identifier: 30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33322e302f32342d3234203d3e20323638303438.roa
Signing time:             Thu 02 Nov 2023 20:02:14 +0000
ROA not before:           Thu 02 Nov 2023 19:57:14 +0000
ROA not after:            Thu 31 Oct 2024 20:02:14 +0000
asID:                     268048
IP address blocks:        45.168.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:65:dc:72:66:d4:94:cf:72:79:52:27:99:05:6a:e6:ad:8d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
        Validity
            Not Before: Nov  2 19:57:14 2023 GMT
            Not After : Oct 31 20:02:14 2024 GMT
        Subject: CN=83AA450458C102779D6FB1E48F0522B081687F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:79:77:b1:ef:9e:c1:8c:fe:0b:ac:af:ae:
                    1f:24:5e:84:59:5a:37:d4:63:cf:34:27:30:22:2c:
                    f4:6e:37:51:0c:95:16:03:5d:dd:4b:45:8e:58:b9:
                    d7:dd:b7:78:06:be:a3:15:b3:53:80:92:c4:a6:7f:
                    92:d6:c3:78:72:93:bf:fc:af:16:09:66:56:b5:4e:
                    2f:eb:3b:a5:23:05:6c:82:d7:4a:b8:73:02:e9:73:
                    67:cc:08:ab:3f:11:83:72:2e:2d:4d:0b:f0:80:53:
                    b5:85:b8:a6:b4:fb:9b:23:49:73:0d:85:6f:92:aa:
                    ee:f0:a0:69:7f:d1:8f:80:99:75:08:15:c8:27:9e:
                    b9:cd:c3:da:ea:b7:57:63:a6:3a:bd:a4:46:b0:1e:
                    00:f5:57:27:11:a0:f0:26:7c:ea:18:ac:a1:25:34:
                    c3:85:a7:08:4d:50:c0:6f:c1:2e:f0:55:81:15:0f:
                    ee:90:64:0c:31:3e:65:52:d7:76:dd:3b:1d:e9:6d:
                    fe:a8:61:ea:7f:cb:43:30:d3:f3:ad:d1:29:57:28:
                    da:dd:01:2e:eb:c0:99:4e:8b:b3:c3:73:ea:25:f3:
                    2c:77:2b:7f:4d:0f:77:b1:66:1a:40:62:e4:02:10:
                    8e:d9:c9:4e:52:7a:a8:cd:5a:8c:55:1c:d5:5d:83:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AA:45:04:58:C1:02:77:9D:6F:B1:E4:8F:05:22:B0:81:68:7F:84
            X509v3 Authority Key Identifier:
                keyid:30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33322e302f32342d3234203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:14:ae:f8:85:62:7f:0a:a1:4f:6e:29:2e:bb:f9:79:cf:21:
         76:88:be:e4:5f:68:c1:32:35:dd:93:96:de:ba:df:17:ee:13:
         45:8b:04:6c:49:37:a1:60:fa:b9:33:26:e0:dc:14:6c:8f:6a:
         96:10:08:9b:d7:71:fe:6c:1b:76:39:ba:d7:4d:51:66:74:63:
         71:7e:34:c4:97:c9:d6:2f:70:ab:26:bb:f0:d2:c8:52:e4:7b:
         b4:e8:bc:72:89:05:01:91:d0:fd:df:6e:ec:8e:3c:5f:9f:69:
         b6:b3:22:74:33:ee:8e:c0:d3:6d:5e:6b:f2:37:af:5a:0b:dd:
         c5:87:4b:6e:4a:76:4a:36:c3:ee:08:c4:7f:a8:d4:54:d3:2d:
         94:11:05:66:14:95:c8:2e:13:f8:21:89:55:f7:d3:1b:a6:c6:
         e2:4e:33:6b:54:77:ee:c7:71:7b:75:bd:1b:f1:2a:8c:9b:30:
         11:8b:7a:7b:33:6e:88:f0:1a:29:46:b5:99:43:8b:0b:fa:39:
         a0:ec:b8:b0:33:da:71:bb:7a:3c:80:cc:1a:55:f9:8f:5d:7c:
         8e:90:c0:0f:61:9a:c1:04:7f:5d:00:df:6c:07:f8:37:7d:77:
         a5:b7:fe:cf:a9:95:f4:c1:51:ac:89:a8:50:89:0d:17:67:2a:
         e2:1e:03:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org