Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa
File:                     34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa (raw, json)
Hash identifier:          EyFOUIl8im+yGID6QoOH1H7Kg0MLPJglij+2yI73N5g=
Subject key identifier:   5E:D5:82:7E:59:8C:E0:E4:9C:7A:09:71:0D:E6:1E:81:EE:91:FB:7C
Certificate issuer:       /CN=E43F929F1A53246574F0400683594164F34379B9
Certificate serial:       0EA33BFAA2DFF5B14ED6CD55CD7C8F6BF04121E8
Authority key identifier: E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa
Signing time:             Fri 05 Apr 2024 05:58:16 +0000
ROA not before:           Fri 05 Apr 2024 05:53:16 +0000
ROA not after:            Fri 04 Apr 2025 05:58:16 +0000
asID:                     268333
IP address blocks:        45.237.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a3:3b:fa:a2:df:f5:b1:4e:d6:cd:55:cd:7c:8f:6b:f0:41:21:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43F929F1A53246574F0400683594164F34379B9
        Validity
            Not Before: Apr  5 05:53:16 2024 GMT
            Not After : Apr  4 05:58:16 2025 GMT
        Subject: CN=5ED5827E598CE0E49C7A09710DE61E81EE91FB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:53:d9:cd:d2:b3:cc:cb:e8:9a:ab:c6:f0:
                    ca:6c:7c:7e:be:9d:e0:51:5a:93:a2:ce:21:b0:db:
                    7a:30:a1:36:c1:0d:65:ce:2a:c1:28:36:55:03:b0:
                    dd:4b:8b:a6:40:7e:28:b0:fe:5b:3e:83:cb:79:cc:
                    99:90:03:5e:03:6a:73:9c:59:68:d7:71:3e:aa:e5:
                    70:ca:40:61:6d:59:fc:69:82:9e:70:11:52:47:d4:
                    f2:2a:e1:9f:ec:22:26:31:b9:61:ab:cc:bf:54:44:
                    11:d6:70:2b:25:42:b9:e0:f4:92:77:ab:41:69:c5:
                    58:35:8d:27:2c:51:f0:03:79:26:17:18:2d:10:a8:
                    ee:df:e3:74:e2:d5:e0:da:d5:78:90:68:f8:8c:c5:
                    4f:b0:de:d0:bc:2d:93:91:e7:0a:1d:87:d8:95:63:
                    90:db:e9:8c:e4:d7:07:79:f7:38:28:9c:25:41:6b:
                    c4:4e:a1:54:a5:c4:c4:07:7e:bf:19:79:92:0d:03:
                    92:1b:64:2a:5c:56:50:f7:ea:44:88:3a:bd:92:d1:
                    cf:7b:70:c7:25:98:64:69:40:c4:86:f5:7b:e6:f0:
                    1d:4c:7f:a5:d6:9e:ff:fa:b7:38:0d:b4:a0:94:a5:
                    28:b7:24:fe:12:de:20:6c:07:4e:34:a7:9c:38:5a:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:82:7E:59:8C:E0:E4:9C:7A:09:71:0D:E6:1E:81:EE:91:FB:7C
            X509v3 Authority Key Identifier:
                keyid:E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:0a:43:96:60:d5:b9:b0:3d:32:a0:17:21:ba:72:f0:d8:
         8b:88:d5:8a:3b:27:df:2e:01:9d:37:77:7f:d2:b7:77:55:d3:
         e4:09:c6:c2:70:54:cf:b2:43:64:40:dd:07:a6:10:20:3b:60:
         d7:a0:fb:41:e3:67:bc:fa:39:22:c3:99:a9:07:57:be:7e:57:
         ad:06:14:ac:86:0e:20:41:0e:b7:d5:b6:2c:fa:7d:2a:a0:7f:
         7e:62:ed:e2:70:f8:bb:64:65:07:cd:8b:5a:db:48:c8:6e:ff:
         ff:74:ce:f7:a8:16:0b:b5:db:5c:d7:70:4e:a5:4a:88:75:a2:
         8e:88:67:31:eb:f4:60:f5:cb:0b:e9:78:cb:01:08:2b:1e:32:
         97:e5:71:0a:6a:3e:ca:a7:70:b0:39:d5:77:e7:cf:7e:e8:97:
         85:c6:b6:fa:4e:96:2b:6f:e6:12:27:53:eb:eb:24:72:b4:30:
         b7:8d:a7:52:a4:d1:48:d7:64:37:ca:d6:b7:af:56:ec:3d:c0:
         2e:7e:a9:bf:05:8d:65:ac:f1:be:a8:e8:85:ed:01:71:29:5c:
         e0:bc:a0:02:53:b3:75:7a:5b:db:67:b9:e6:9d:2d:09:a6:c5:
         bd:93:2b:50:2b:9f:b1:c2:65:aa:9d:3c:43:38:e5:d3:20:dd:
         c3:34:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 19:41:54 2024 by rpki-client on console-fra.rpki-client.org