Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/34352e3232382e382e302f32322d3236203d3e20323637303632.roa
File:                     34352e3232382e382e302f32322d3236203d3e20323637303632.roa (raw, json)
Hash identifier:          n2QztUjlYn5Z6kT1a8SJ1E2N98mXUAt8VOxhRfmM344=
Subject key identifier:   55:C5:D3:A8:47:D5:67:74:AC:F8:F1:59:BD:84:9B:A4:73:E9:45:14
Certificate issuer:       /CN=70392AC965030959311AF7FE238B273C8513237D
Certificate serial:       4F43102E283BCF6FDE0849269E3A7089AE4743A6
Authority key identifier: 70:39:2A:C9:65:03:09:59:31:1A:F7:FE:23:8B:27:3C:85:13:23:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70392AC965030959311AF7FE238B273C8513237D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/34352e3232382e382e302f32322d3236203d3e20323637303632.roa
Signing time:             Tue 08 Aug 2023 17:22:23 +0000
ROA not before:           Tue 08 Aug 2023 17:17:23 +0000
ROA not after:            Tue 06 Aug 2024 17:22:23 +0000
asID:                     267062
IP address blocks:        45.228.8.0/22 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:43:10:2e:28:3b:cf:6f:de:08:49:26:9e:3a:70:89:ae:47:43:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70392AC965030959311AF7FE238B273C8513237D
        Validity
            Not Before: Aug  8 17:17:23 2023 GMT
            Not After : Aug  6 17:22:23 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:40:ac:ae:c9:ba:d9:77:05:33:81:23:e5:
                    45:9d:eb:52:79:38:76:17:e3:1e:8e:67:93:e5:07:
                    40:c5:0b:8f:fd:41:86:8e:07:25:74:2c:9e:2b:19:
                    ab:b3:91:c6:05:bf:6c:cf:61:99:1c:78:5d:c0:3c:
                    a4:45:e6:47:f7:7c:48:7e:3a:ce:12:1b:06:8b:3b:
                    57:56:4d:56:5a:bf:a6:5b:dd:c2:eb:d5:96:7b:99:
                    84:96:74:92:f5:8e:33:40:58:80:03:38:15:95:6d:
                    70:84:0c:4d:28:3f:55:21:31:0e:fe:1c:c6:32:93:
                    1d:5b:1d:11:e7:31:05:7b:ca:7a:4e:9e:41:de:f9:
                    bc:ef:13:78:8a:36:2c:69:2f:90:19:ec:f3:59:d0:
                    ea:f0:7b:d2:b6:8d:95:72:07:2a:74:f5:5b:30:0e:
                    10:eb:ba:33:01:92:ec:ec:a2:ad:96:5e:23:47:aa:
                    cb:1a:4c:00:02:4b:a9:54:cb:bd:f8:4a:b0:e2:ae:
                    f8:8d:8b:88:ec:9f:7d:94:d1:e1:dc:d0:cb:88:5e:
                    4e:f6:3b:55:bd:e3:f0:37:32:1d:8e:84:55:cd:ba:
                    44:8f:4a:7d:a8:7e:97:2c:09:81:8b:39:2e:5b:f0:
                    d3:e9:92:0d:1a:6e:23:23:f5:87:ff:0b:7e:cd:88:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C5:D3:A8:47:D5:67:74:AC:F8:F1:59:BD:84:9B:A4:73:E9:45:14
            X509v3 Authority Key Identifier:
                keyid:70:39:2A:C9:65:03:09:59:31:1A:F7:FE:23:8B:27:3C:85:13:23:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/70392AC965030959311AF7FE238B273C8513237D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70392AC965030959311AF7FE238B273C8513237D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/34352e3232382e382e302f32322d3236203d3e20323637303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:de:3a:0a:aa:0c:95:db:43:10:a1:54:e3:97:8f:64:a0:5a:
         f9:b1:77:8e:0d:dc:78:30:4d:0f:20:c8:d7:b8:70:dc:60:9e:
         f5:bb:9d:50:a7:62:20:d4:2b:8b:89:21:46:38:eb:6d:79:b0:
         25:3b:6b:78:22:46:e1:ab:33:f5:11:23:a9:e4:9b:ad:d8:b2:
         01:f5:53:42:44:49:0c:df:41:3a:29:8b:10:61:33:9b:91:bc:
         93:c2:78:f5:dc:7b:36:b2:75:92:54:72:a3:e9:56:b8:fb:84:
         53:d7:86:d3:91:80:46:7f:32:80:0a:71:49:1f:6c:d3:74:4b:
         0c:84:08:ab:5d:98:73:bf:f7:41:04:6b:af:27:2f:5f:40:36:
         30:26:37:25:8d:49:b2:c4:2d:57:49:4c:ea:53:5b:e5:bd:bc:
         b2:bf:d6:43:6e:33:5c:f3:60:5c:64:aa:a2:ae:e5:a0:e2:aa:
         36:68:dd:15:d9:72:7a:84:e6:09:c4:07:29:24:fc:fc:cb:a9:
         8d:ec:e5:40:d8:9f:33:fc:96:83:a1:05:93:ff:af:ce:eb:6e:
         04:1d:0a:c5:76:ef:0c:1e:36:9f:1f:01:93:d9:c3:5d:6d:37:
         76:8b:4f:87:71:80:34:c9:34:b7:2a:89:c1:52:9e:19:0c:d6:
         46:51:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org