Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa
File:                     34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa (raw, json)
Hash identifier:          90cGOjGVUSMTtx8GEfeCRp9Iiq2EX+lrP0bum7yB8yA=
Subject key identifier:   49:F6:02:A9:E6:BD:50:1A:55:0F:65:C8:9E:81:04:FD:82:92:BC:76
Certificate issuer:       /CN=43601DF506C45BF04A33C11D3FD594AC48E74F90
Certificate serial:       143860C6B713DA1BD8585911337C413D96645AE2
Authority key identifier: 43:60:1D:F5:06:C4:5B:F0:4A:33:C1:1D:3F:D5:94:AC:48:E7:4F:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     267175
IP address blocks:        45.230.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:38:60:c6:b7:13:da:1b:d8:58:59:11:33:7c:41:3d:96:64:5a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43601DF506C45BF04A33C11D3FD594AC48E74F90
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject: CN=49F602A9E6BD501A550F65C89E8104FD8292BC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:80:dc:3e:04:5a:f6:8e:8e:31:3d:86:5c:dc:
                    25:8b:fe:be:7e:13:4c:95:5b:75:b4:f4:6b:1f:e6:
                    5c:0e:2a:a5:5b:ee:c8:40:37:40:7c:53:fa:28:56:
                    fd:2a:ae:35:97:b1:18:28:83:14:87:dd:ef:3b:c5:
                    da:95:21:96:2b:fa:0d:3a:fa:4a:12:3b:c2:ab:91:
                    a1:45:f1:c8:9e:bd:9a:b4:e8:f7:f7:bc:84:45:01:
                    f4:af:8d:5e:11:76:7f:72:eb:9b:5a:da:08:f8:32:
                    75:34:74:7e:9f:34:9b:fa:b3:f3:b3:13:bb:a1:4f:
                    9b:11:30:f3:ba:fa:28:17:62:2a:4d:78:e5:77:8b:
                    ad:a2:0b:4a:da:a5:b1:81:51:7d:91:9a:f4:aa:24:
                    24:61:1f:37:43:a9:d7:21:af:a0:88:15:7c:e7:31:
                    a1:f2:b2:58:cf:e3:5e:69:b1:0c:52:01:e9:40:6c:
                    e4:53:09:b1:d7:b5:a1:6b:02:83:7d:59:70:1b:a8:
                    3b:ee:64:de:d6:ab:7d:20:60:81:da:9d:e0:f5:5e:
                    a7:57:07:19:ef:3d:57:85:57:43:4f:1f:9e:1f:fc:
                    84:07:ea:dd:61:80:e8:47:79:d1:e0:9c:44:25:83:
                    97:af:28:c1:f0:97:e0:d8:12:92:36:02:d6:c2:7b:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F6:02:A9:E6:BD:50:1A:55:0F:65:C8:9E:81:04:FD:82:92:BC:76
            X509v3 Authority Key Identifier:
                keyid:43:60:1D:F5:06:C4:5B:F0:4A:33:C1:1D:3F:D5:94:AC:48:E7:4F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43601DF506C45BF04A33C11D3FD594AC48E74F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/1/34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:43:4e:15:92:1f:6b:88:fc:0a:c9:64:1c:1e:00:5b:f6:
         35:79:23:18:84:8e:46:bf:de:fa:a1:b3:5b:f3:e1:9f:e7:d7:
         24:ef:8b:96:d1:f8:1d:8a:79:6d:70:76:12:c8:19:fe:b3:71:
         07:b9:bc:a0:03:a7:00:e7:23:d6:3e:1c:24:fc:25:58:21:52:
         99:33:56:3e:85:89:66:c8:20:8e:71:75:b1:d3:6c:4d:68:f4:
         1e:f9:7d:e5:39:5a:80:99:18:c2:81:33:a3:a4:ee:41:03:58:
         42:72:6f:d5:e5:d8:ce:ac:01:73:9b:de:cd:7e:ec:73:4d:aa:
         1a:45:ec:ce:f6:d5:87:36:0a:cb:1c:3e:1c:5b:15:a2:68:f7:
         ac:74:ea:2b:e3:2d:4b:48:d1:1d:50:1d:43:d3:1d:77:9c:d0:
         7d:33:e2:e6:01:a2:9d:74:3a:bb:49:7f:bd:d0:6b:9c:23:b8:
         d9:5d:84:6b:7f:e9:ee:cc:5c:5e:93:60:83:5e:17:c6:fe:f8:
         f9:bb:eb:a4:94:b5:fb:13:f5:a2:a8:73:83:ba:26:6b:5c:41:
         1e:25:62:13:bc:ca:64:6a:72:9c:a0:c2:db:46:bd:dd:79:27:
         00:85:e9:9f:5d:93:1f:97:9c:85:ac:9c:24:d7:89:79:cb:96:
         5b:e5:5b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org