Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3234203d3e20323638333238.roa
File:                     34352e3233382e37322e302f32322d3234203d3e20323638333238.roa (raw, json)
Hash identifier:          nxDlvJx6U7XIRqId/yIqWejWB/QfvWO+hp8Uhotwu04=
Subject key identifier:   0B:49:9C:D3:6D:19:E1:CD:4B:3A:6E:8D:16:C6:7D:EF:11:71:D4:F6
Certificate issuer:       /CN=B20C19BE837487F270BE3762AA874E14A967E6EC
Certificate serial:       66A72FDE88A337E070D359624C12CAF2C4DC012B
Authority key identifier: B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3234203d3e20323638333238.roa
Signing time:             Wed 10 Apr 2024 20:24:36 +0000
ROA not before:           Wed 10 Apr 2024 20:19:36 +0000
ROA not after:            Wed 09 Apr 2025 20:24:36 +0000
asID:                     268328
IP address blocks:        45.238.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a7:2f:de:88:a3:37:e0:70:d3:59:62:4c:12:ca:f2:c4:dc:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20C19BE837487F270BE3762AA874E14A967E6EC
        Validity
            Not Before: Apr 10 20:19:36 2024 GMT
            Not After : Apr  9 20:24:36 2025 GMT
        Subject: CN=0B499CD36D19E1CD4B3A6E8D16C67DEF1171D4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b5:96:a9:94:eb:7c:23:73:07:f3:dd:bb:7e:
                    b5:d3:c0:e7:a6:0b:59:84:78:c5:1f:0a:ca:b4:29:
                    b9:44:69:e9:7a:43:3b:0e:b0:d6:ff:f0:53:ca:d7:
                    dd:37:9a:8b:98:02:bf:75:ac:3a:83:e8:d1:23:07:
                    9e:da:e1:3a:45:c0:c6:de:1f:5e:99:1b:3f:7f:4f:
                    b2:8b:e2:b8:d2:99:43:b8:01:7c:7e:e0:3f:73:05:
                    80:21:29:bb:e9:60:32:ca:01:b8:56:09:b0:72:57:
                    9f:b1:30:a4:34:ab:3a:78:58:10:3f:ed:b8:e8:47:
                    e2:9e:bc:04:41:3a:b9:5b:58:f7:e7:9a:e6:e8:24:
                    6e:a1:ef:d9:3a:54:01:5a:e8:af:32:2f:39:16:42:
                    08:cb:42:e2:76:38:0a:76:61:fb:fc:a2:9f:45:79:
                    e8:cd:ff:d8:e9:f2:ed:3f:5a:d3:bc:7a:1f:a6:b2:
                    84:9a:0e:29:4b:04:32:6f:a8:87:7f:20:f4:df:4d:
                    33:72:54:ff:3d:42:6c:2b:31:06:cb:b4:b5:cf:c4:
                    ed:a6:52:7d:19:be:3d:1d:38:aa:7f:0a:10:2a:c3:
                    3d:ba:0f:06:4b:eb:33:17:78:80:ae:e0:44:e9:c9:
                    5d:e0:d4:d8:03:db:28:a8:7b:a9:b9:9e:93:bd:4b:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:49:9C:D3:6D:19:E1:CD:4B:3A:6E:8D:16:C6:7D:EF:11:71:D4:F6
            X509v3 Authority Key Identifier:
                keyid:B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3234203d3e20323638333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:65:b4:d4:35:fc:34:df:2e:5a:27:c5:da:b5:22:f0:6c:
         34:a7:42:ee:21:4b:99:a7:c1:cc:ae:59:d7:f0:6f:f2:60:35:
         c3:58:95:b1:aa:38:10:0a:b1:1e:39:07:d9:b2:f2:ca:e6:61:
         1e:dc:cc:77:2f:d9:8d:84:06:6b:fa:e4:ab:3a:f2:19:55:10:
         e3:3b:3f:0d:09:1d:80:89:65:5f:f9:e5:b1:06:1f:66:0e:0b:
         d3:8e:fa:ae:a6:be:64:4b:8b:f9:b7:ab:40:21:ff:f8:50:de:
         24:27:04:7d:83:0b:4b:44:7a:08:3d:d7:fe:7e:7a:32:40:76:
         8a:1d:ff:04:ad:2e:bd:43:8a:3c:bf:82:5e:72:e5:2b:de:b0:
         db:d1:7f:b8:37:9d:0e:14:ab:9f:39:7c:39:6b:05:9d:d2:a8:
         29:f1:59:6f:71:c6:b7:90:78:17:7b:32:d0:4a:9d:f8:b3:a7:
         b1:6f:4b:6d:0f:ad:21:27:d1:89:16:47:2f:e8:ce:a2:75:b1:
         63:80:18:e6:29:be:b1:3e:68:9d:da:1a:31:99:a5:47:e2:49:
         6e:f8:bc:1c:12:e4:81:bc:8f:17:f4:4d:ab:1b:da:ea:c8:ed:
         b5:97:6c:c7:d0:a0:6e:fb:5a:00:05:4f:82:f0:f5:92:5b:44:
         9e:e3:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org