Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa
File:                     34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (raw, json)
Hash identifier:          eUZ1gxFKxLXk4HGVoyv1rU/gM2Y5v5YAMENFw9bYYS4=
Subject key identifier:   C4:37:C5:1C:FC:CC:DD:FA:0D:9E:E7:CF:F2:79:2E:B4:5C:A8:8F:AC
Certificate issuer:       /CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
Certificate serial:       537A6414F082018DC41F9FA61E29A73BDEDD5E48
Authority key identifier: F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa
Signing time:             Tue 02 Apr 2024 19:00:00 +0000
ROA not before:           Tue 02 Apr 2024 18:55:00 +0000
ROA not after:            Tue 01 Apr 2025 19:00:00 +0000
asID:                     268254
IP address blocks:        45.236.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7a:64:14:f0:82:01:8d:c4:1f:9f:a6:1e:29:a7:3b:de:dd:5e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
        Validity
            Not Before: Apr  2 18:55:00 2024 GMT
            Not After : Apr  1 19:00:00 2025 GMT
        Subject: CN=C437C51CFCCCDDFA0D9EE7CFF2792EB45CA88FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:45:4a:49:64:7c:df:3d:9c:55:19:99:e2:
                    0b:9f:1a:8a:bd:e0:fc:79:62:62:f3:44:7f:45:47:
                    d5:e4:9a:08:a9:7f:f2:c5:83:e4:40:6c:77:cd:3a:
                    2a:d1:da:52:ee:d4:97:3d:f5:47:6f:65:c2:8b:b2:
                    b2:19:d5:87:22:bb:02:eb:3f:9d:a6:c5:8b:c4:8a:
                    d9:53:24:68:5e:3b:ae:56:79:e7:b9:ed:10:e8:3d:
                    20:fe:2c:ba:7a:df:31:8c:a2:dc:36:70:af:58:19:
                    54:fd:d6:c7:77:d0:99:19:f4:49:2d:98:33:f7:c5:
                    45:62:4d:ae:ad:b9:4d:ce:09:df:9e:7d:7b:f4:7e:
                    2a:0b:ac:a5:e9:7d:e3:e8:4b:b3:7c:c9:a1:db:c1:
                    60:84:14:b8:ef:c7:64:63:ee:28:e3:ec:f3:e5:6b:
                    d0:4f:e5:11:5e:26:3c:9b:95:d8:a0:23:86:56:c9:
                    ac:1e:7b:00:bc:8a:9f:ee:d2:da:97:56:f0:4b:d6:
                    6d:c8:f5:8d:d7:f4:74:53:09:16:00:e4:8a:92:8d:
                    82:12:ac:0b:b9:00:1f:d9:22:97:9a:ec:28:9a:ee:
                    7f:b0:2c:c6:09:24:9b:37:bc:0d:f5:d0:1a:e7:e1:
                    7d:5c:e5:2b:f5:c0:c4:1e:e3:c7:96:42:09:d9:63:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:37:C5:1C:FC:CC:DD:FA:0D:9E:E7:CF:F2:79:2E:B4:5C:A8:8F:AC
            X509v3 Authority Key Identifier:
                keyid:F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:b3:4c:05:e8:fa:91:c6:38:cf:60:88:77:fc:47:5c:a1:0a:
         1c:84:4e:2e:ce:22:f1:60:09:4c:5a:8d:df:c2:d7:60:29:19:
         26:79:fa:f7:86:c2:58:d9:45:12:1c:44:9f:2e:58:37:62:37:
         b2:cf:c1:5e:15:ab:c5:97:22:0a:c6:82:19:96:96:ab:7c:67:
         0b:31:40:c5:16:2f:69:c1:62:00:f4:3a:52:fa:77:7c:2e:df:
         c4:20:49:7a:0c:5d:93:e7:7b:3a:f9:84:df:45:d9:7c:5c:bc:
         4e:45:8a:7c:7f:30:dd:e7:fc:da:eb:73:6e:ac:38:41:4a:a5:
         d6:b2:39:7f:83:42:a0:40:99:dd:b5:94:b4:a9:40:fb:eb:12:
         51:90:92:ed:0b:e5:2e:dc:39:8d:23:ca:83:28:f5:44:97:6c:
         d8:72:02:0e:5d:62:8d:fd:b2:be:71:3a:90:ac:bc:e7:99:b5:
         3f:a1:f8:41:36:00:21:71:9c:77:6d:7a:8e:66:3f:4e:f4:c1:
         aa:ad:1a:1e:d9:d8:13:fb:28:e6:5d:de:7a:12:fb:ab:79:16:
         81:01:38:01:42:36:f7:e2:6a:36:97:96:8a:b8:cf:b4:8c:0d:
         d9:12:7b:99:36:04:f5:65:87:b0:92:9e:8e:a6:99:49:b2:53:
         0e:94:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org