Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASDkacDPRHw9AzPTZGMChp5Vw3mdGPYrZZHcGmsHSJqx/1/34352e3136332e3232302e302f32322d3332203d3e20323638353836.roa
File:                     34352e3136332e3232302e302f32322d3332203d3e20323638353836.roa (raw, json)
Hash identifier:          OCp/l2OBU4tvg6uP/tYRcf+fl3hKmQlCl1+ooCI/nD8=
Subject key identifier:   0C:71:B7:B2:5E:93:D7:05:ED:BC:BB:98:28:E1:3B:44:D0:5E:BF:20
Certificate issuer:       /CN=E04435DA0086C81FD7E60060EB4B055F5201C72B
Certificate serial:       218E6C1A58859F4EF80B6423453FDDD5A60343D7
Authority key identifier: E0:44:35:DA:00:86:C8:1F:D7:E6:00:60:EB:4B:05:5F:52:01:C7:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E04435DA0086C81FD7E60060EB4B055F5201C72B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASDkacDPRHw9AzPTZGMChp5Vw3mdGPYrZZHcGmsHSJqx/1/34352e3136332e3232302e302f32322d3332203d3e20323638353836.roa
Signing time:             Fri 05 Apr 2024 00:09:24 +0000
ROA not before:           Fri 05 Apr 2024 00:04:24 +0000
ROA not after:            Fri 04 Apr 2025 00:09:24 +0000
asID:                     268586
IP address blocks:        45.163.220.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:6c:1a:58:85:9f:4e:f8:0b:64:23:45:3f:dd:d5:a6:03:43:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E04435DA0086C81FD7E60060EB4B055F5201C72B
        Validity
            Not Before: Apr  5 00:04:24 2024 GMT
            Not After : Apr  4 00:09:24 2025 GMT
        Subject: CN=0C71B7B25E93D705EDBCBB9828E13B44D05EBF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:53:6a:b5:da:84:53:6e:a5:d3:a1:ce:3a:
                    01:43:a3:a7:2b:60:6f:50:6c:17:1b:9a:71:9d:6e:
                    c5:37:de:58:b0:78:09:ec:1c:77:e5:56:c8:9b:32:
                    ad:c6:bd:c6:2a:f4:45:46:a4:89:58:3e:47:62:24:
                    0e:34:e4:6f:91:c0:4e:98:6b:6c:7a:09:09:85:99:
                    02:48:5f:e2:f3:aa:3b:4d:71:6e:89:42:8a:ff:52:
                    7b:cc:f8:10:ba:a4:22:61:cd:54:14:ee:b9:39:06:
                    5d:14:32:48:59:91:2a:c6:c5:78:a5:3f:8d:e6:76:
                    37:cd:35:84:a9:0b:4d:6a:93:c0:9f:8d:46:92:61:
                    1b:1a:01:1e:29:46:9d:64:65:99:3f:85:7b:10:8d:
                    f6:75:ee:44:e8:b4:55:8b:c3:5f:46:da:76:d3:2d:
                    37:7b:4f:da:d4:0f:76:66:49:b8:89:2b:3f:76:9f:
                    f3:74:14:ef:a7:69:9d:67:28:42:ce:9e:c0:4c:90:
                    32:ac:7e:6c:8b:31:b4:c5:ae:eb:c1:8d:6e:27:f2:
                    3f:66:5c:d7:49:99:75:36:0a:1b:69:f8:29:8f:24:
                    4a:19:cf:6e:6a:f6:29:05:d2:f4:3f:50:f5:28:ff:
                    df:2d:38:89:ec:e4:70:ee:d0:fe:cf:60:97:ff:89:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:71:B7:B2:5E:93:D7:05:ED:BC:BB:98:28:E1:3B:44:D0:5E:BF:20
            X509v3 Authority Key Identifier:
                keyid:E0:44:35:DA:00:86:C8:1F:D7:E6:00:60:EB:4B:05:5F:52:01:C7:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASDkacDPRHw9AzPTZGMChp5Vw3mdGPYrZZHcGmsHSJqx/1/E04435DA0086C81FD7E60060EB4B055F5201C72B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E04435DA0086C81FD7E60060EB4B055F5201C72B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASDkacDPRHw9AzPTZGMChp5Vw3mdGPYrZZHcGmsHSJqx/1/34352e3136332e3232302e302f32322d3332203d3e20323638353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:47:89:1d:31:02:e3:ad:71:79:1a:5f:39:cf:ab:9b:b6:37:
         7d:5f:81:ec:df:ad:c5:5c:b9:fc:cb:a8:27:ae:23:a5:9e:d0:
         f9:ee:26:d0:02:3e:c4:cc:82:00:3e:36:64:d9:22:2a:27:a0:
         10:64:90:01:f0:11:3d:de:26:ef:b6:3a:6a:03:59:0b:33:b1:
         ba:ac:50:9c:7d:39:1d:1d:af:75:35:07:ba:98:2c:b1:cf:71:
         c2:6d:b2:68:49:45:e1:40:b2:27:dc:8a:2e:10:d6:7f:59:c2:
         a5:ef:8f:19:f6:54:82:00:b4:4d:78:c8:ef:ca:31:58:a3:e6:
         11:db:60:18:86:ae:6f:a8:f0:a5:84:73:dc:0f:f2:99:09:16:
         68:7e:f5:c1:a3:06:01:38:0c:be:f0:f7:49:a8:bf:05:e5:83:
         0c:71:79:f8:18:a8:96:d5:85:7b:36:91:d8:82:fc:52:19:a0:
         4f:29:34:7f:97:ea:0d:81:08:0b:b3:9a:ee:d3:10:57:eb:ef:
         47:81:62:d4:22:92:a0:3d:e5:8c:9f:57:1d:ec:13:ea:9f:18:
         59:3e:fd:53:e2:c5:fd:d7:1d:d4:68:2a:78:c6:68:3a:a2:c5:
         47:cb:7a:aa:28:01:4f:a1:5f:97:90:26:4b:b8:84:c3:59:7f:
         c6:d4:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org