Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33342e302f32342d3234203d3e20323638303438.roa
File:                     34352e3136382e33342e302f32342d3234203d3e20323638303438.roa (raw, json)
Hash identifier:          i/iDhdsLSjxTZ6oQSryRsmUcLiwNLbnW0DcmcjDuDP8=
Subject key identifier:   92:2D:A8:DE:A9:FE:4D:98:F3:3B:A1:28:B9:1B:E6:27:AC:25:95:27
Certificate issuer:       /CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Certificate serial:       026C138A4EC061776EF2028325A1EDE869D98E97
Authority key identifier: 30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33342e302f32342d3234203d3e20323638303438.roa
Signing time:             Tue 30 May 2023 16:09:35 +0000
ROA not before:           Tue 30 May 2023 16:04:35 +0000
ROA not after:            Tue 28 May 2024 16:09:35 +0000
asID:                     268048
IP address blocks:        45.168.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6c:13:8a:4e:c0:61:77:6e:f2:02:83:25:a1:ed:e8:69:d9:8e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
        Validity
            Not Before: May 30 16:04:35 2023 GMT
            Not After : May 28 16:09:35 2024 GMT
        Subject: CN=922DA8DEA9FE4D98F33BA128B91BE627AC259527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:1d:c6:61:64:b0:e5:89:20:57:90:d4:b0:
                    f3:bf:89:f4:15:4e:97:6e:11:f8:97:72:e9:f3:36:
                    10:4c:f4:d4:bd:c5:3b:ec:84:15:d2:71:ad:00:c1:
                    34:78:a0:fd:b4:7b:a5:1b:f2:26:e1:d2:c6:21:b2:
                    ad:15:32:c6:a8:5d:83:64:ed:66:6c:ff:ca:36:00:
                    53:15:0d:e0:71:e9:34:86:00:cb:c6:2d:de:46:7b:
                    4d:a2:a2:a5:cf:2b:cb:94:89:cd:05:e9:91:cd:86:
                    21:1c:3f:5a:9f:b0:63:82:fe:f9:f7:37:4c:41:65:
                    d7:28:fc:7a:fe:80:c7:bd:25:e7:09:0f:4d:47:49:
                    30:00:5f:4e:7e:f7:86:41:c1:df:fc:33:c3:11:98:
                    8a:f9:14:7f:a3:fc:8e:b5:5d:89:08:f6:56:53:85:
                    c8:22:40:cf:6e:0c:27:65:44:2b:ea:18:df:f1:7e:
                    c7:b9:53:42:5f:8e:b7:38:dc:76:60:92:14:f9:e7:
                    a3:b4:f8:72:90:0e:18:89:a1:fe:de:20:df:e0:04:
                    c5:5f:65:17:1b:f6:5b:2f:1e:bd:a5:7b:cb:2f:48:
                    29:50:c1:97:69:14:8c:2b:22:14:20:f6:2b:f8:64:
                    a5:c8:ce:9d:9b:b6:b6:5c:e9:7c:90:01:d9:17:43:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:A8:DE:A9:FE:4D:98:F3:3B:A1:28:B9:1B:E6:27:AC:25:95:27
            X509v3 Authority Key Identifier:
                keyid:30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33342e302f32342d3234203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:ed:d6:15:06:70:96:bd:a9:6a:ea:7e:b8:95:12:9d:ea:bc:
         73:1d:51:3e:57:40:d1:1a:2c:53:71:55:43:e9:d5:46:49:eb:
         5b:77:60:02:4f:29:f0:f2:cd:86:06:10:d4:45:c0:d9:f0:43:
         6d:60:f8:a6:33:12:83:4a:3d:56:a1:1a:47:d4:ff:a1:0f:4c:
         96:76:b2:e7:f5:ae:80:d5:5e:60:4b:82:13:f5:8e:a9:1f:c2:
         7a:f0:ab:37:df:a9:96:aa:c1:1f:19:ae:83:ca:3a:81:de:3e:
         6b:df:26:f8:44:5c:5a:af:5e:98:75:29:14:91:a9:98:d3:15:
         7b:58:92:4f:94:52:fb:c5:f9:86:fa:6d:a3:08:24:44:f8:ec:
         e1:60:9f:c5:40:6c:dd:96:ed:d1:d1:8a:42:32:17:ea:e0:d2:
         be:18:9d:50:cb:c0:17:e6:08:8f:67:0c:3c:6c:f7:fa:7c:05:
         dc:2e:b6:92:a3:13:62:63:b1:d5:cd:ef:2c:91:0a:cb:e2:d7:
         29:a3:68:67:f6:a6:e2:ea:3e:58:6a:35:fe:9c:69:02:0c:41:
         ea:ac:10:cb:b6:ea:6c:b5:13:89:98:c0:5a:78:61:cb:c8:89:
         35:3c:6a:94:5e:bb:a3:39:6d:e0:e4:d0:f8:28:14:80:47:21:
         cc:7d:97:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org