Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
File:                     34352e3137322e34342e302f32322d3332203d3e20323638373432.roa (raw, json)
Hash identifier:          AahFij0o/CDZeOlaQ3ItrHz8p7wzUbcUJ+QRXyCszqs=
Subject key identifier:   34:6A:C3:EA:C0:44:4D:AA:34:07:D3:89:80:9B:A7:80:14:71:FE:74
Certificate issuer:       /CN=B432410FF204DD80C535B6B43485D75E1298EC61
Certificate serial:       03E8F0F6037AD2EA2DCF4D5C5FE31756031413F7
Authority key identifier: B4:32:41:0F:F2:04:DD:80:C5:35:B6:B4:34:85:D7:5E:12:98:EC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B432410FF204DD80C535B6B43485D75E1298EC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
Signing time:             Sat 17 Feb 2024 06:23:54 +0000
ROA not before:           Sat 17 Feb 2024 06:18:54 +0000
ROA not after:            Sat 15 Feb 2025 06:23:54 +0000
asID:                     268742
IP address blocks:        45.172.44.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e8:f0:f6:03:7a:d2:ea:2d:cf:4d:5c:5f:e3:17:56:03:14:13:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B432410FF204DD80C535B6B43485D75E1298EC61
        Validity
            Not Before: Feb 17 06:18:54 2024 GMT
            Not After : Feb 15 06:23:54 2025 GMT
        Subject: CN=346AC3EAC0444DAA3407D389809BA7801471FE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:91:28:a2:4d:26:6c:c5:68:1e:84:3e:97:
                    1c:39:bb:05:75:23:02:13:56:91:07:4b:f6:30:ba:
                    e4:b1:21:47:db:8c:a8:e0:f2:06:47:d5:f2:d9:67:
                    e5:3c:99:59:f5:cc:4b:5d:81:cb:c9:1f:9c:ff:11:
                    68:7d:1a:1b:8f:5a:bf:cf:a7:bf:8f:30:4b:56:93:
                    85:de:01:4c:f9:91:4b:d4:bd:07:15:4c:a2:e7:45:
                    9c:d5:59:90:7f:e4:90:ef:fa:ed:08:a7:b9:e6:c4:
                    c7:26:39:b2:ad:c1:8d:73:da:64:6e:f8:01:29:ed:
                    11:47:1b:2a:fb:d6:9d:f7:77:2d:4e:78:27:3a:c7:
                    40:de:8f:42:fc:b4:10:98:0a:6e:2b:a1:22:0e:90:
                    fa:aa:f6:53:8c:18:4a:a4:d0:a9:d4:c5:56:f3:57:
                    bd:46:43:36:b8:15:7a:72:8c:d8:2c:c0:f2:6c:ec:
                    13:4d:70:5d:25:6a:c7:af:51:3e:03:8d:d9:8e:bb:
                    df:0c:04:c0:65:60:18:56:c7:42:2f:e0:c9:90:09:
                    39:2d:b8:cb:a4:ba:f3:ff:3f:10:7d:cc:d7:f6:ea:
                    d7:ab:93:54:5c:7f:e4:8c:3b:c6:b3:6d:08:04:2c:
                    7f:0f:e7:44:ed:14:7b:b0:3b:4a:b9:5b:d6:cb:ce:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:C3:EA:C0:44:4D:AA:34:07:D3:89:80:9B:A7:80:14:71:FE:74
            X509v3 Authority Key Identifier:
                keyid:B4:32:41:0F:F2:04:DD:80:C5:35:B6:B4:34:85:D7:5E:12:98:EC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/B432410FF204DD80C535B6B43485D75E1298EC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B432410FF204DD80C535B6B43485D75E1298EC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:29:0c:0b:6d:2b:84:95:bf:56:c8:a8:85:41:07:dd:08:0d:
         29:da:62:8a:92:00:7f:27:02:e3:85:54:b2:69:95:fc:9d:4b:
         60:5c:a1:c4:b6:52:3d:db:75:14:7e:a4:9c:94:f8:7e:12:5d:
         20:09:a6:81:a1:c5:f5:31:54:08:3c:79:38:9a:c0:29:0e:04:
         59:40:e5:1d:f2:6b:6e:87:d6:8b:55:54:4f:b6:bb:bf:07:fb:
         a3:fd:2f:75:37:7e:6b:9a:29:ec:f2:7d:81:be:31:d1:53:26:
         b2:66:ab:70:f2:7e:e6:39:b5:54:de:91:df:4a:fb:d2:b5:d5:
         82:93:58:ed:85:81:c5:22:93:2f:76:fb:5c:87:8b:53:95:6a:
         75:1c:2d:76:45:50:d3:ff:ed:f2:24:0b:ac:7a:59:50:42:05:
         f7:52:f4:59:86:af:8f:28:2e:94:e3:b4:12:a0:0c:78:ce:23:
         35:4f:bf:47:88:ef:82:40:aa:e2:ff:13:eb:e5:a2:3c:54:76:
         89:2d:7d:20:46:ec:06:14:d6:fd:8a:8a:f2:18:b3:7f:6d:ec:
         ff:d2:07:47:d4:d7:6d:59:83:31:d8:89:59:4d:db:04:d7:be:
         91:dc:d9:9a:71:83:79:39:36:5f:a5:b1:c5:05:c1:30:51:52:
         31:84:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org