Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa
File:                     34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa (raw, json)
Hash identifier:          pn7ZPyb0Nap6IbqPfinusBGtA/0kFgI5Q8ILJCI60N4=
Subject key identifier:   AE:C2:D2:B6:31:A9:6B:50:95:A7:BD:F1:9B:DA:AB:66:F2:B2:F0:E7
Certificate issuer:       /CN=508BE4765FF07F810603397F670DFABC89D1CBCA
Certificate serial:       485D458709AA85D8DBDF26F165C3DA9BD6A64A19
Authority key identifier: 50:8B:E4:76:5F:F0:7F:81:06:03:39:7F:67:0D:FA:BC:89:D1:CB:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/508BE4765FF07F810603397F670DFABC89D1CBCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa
Signing time:             Mon 29 Jan 2024 21:00:26 +0000
ROA not before:           Mon 29 Jan 2024 20:55:26 +0000
ROA not after:            Mon 27 Jan 2025 21:00:26 +0000
asID:                     267125
IP address blocks:        45.228.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5d:45:87:09:aa:85:d8:db:df:26:f1:65:c3:da:9b:d6:a6:4a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=508BE4765FF07F810603397F670DFABC89D1CBCA
        Validity
            Not Before: Jan 29 20:55:26 2024 GMT
            Not After : Jan 27 21:00:26 2025 GMT
        Subject: CN=AEC2D2B631A96B5095A7BDF19BDAAB66F2B2F0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:0d:f5:8b:6d:21:c5:61:42:c6:03:71:e3:
                    d0:ed:fd:1d:a5:4b:2b:dd:a0:8d:74:df:60:14:2a:
                    fe:86:95:50:6d:13:59:42:89:91:2a:5b:51:a3:19:
                    1a:a8:dd:a6:08:f6:5a:d7:76:a8:de:e9:0a:19:43:
                    81:fc:60:ef:4c:5e:75:1b:97:ad:e7:e3:af:00:8e:
                    28:13:ba:7c:18:d8:44:d1:ca:e9:97:99:25:46:5c:
                    02:b7:d9:c6:6f:71:02:48:8b:a2:5a:7c:f9:64:e8:
                    86:dd:ec:92:e8:63:00:66:91:38:88:24:12:8d:55:
                    0e:e4:29:f5:37:e1:c1:e3:d3:4a:c7:76:90:95:f2:
                    da:b8:e1:5e:fc:a4:26:3e:f5:24:b4:80:f9:86:9a:
                    81:dd:08:5a:d1:81:d4:24:b0:50:50:55:a4:60:99:
                    fc:21:fc:43:6f:88:bc:c4:3b:3d:08:43:71:0f:ba:
                    a6:a1:77:1c:84:3c:3c:c3:c3:f0:19:5f:aa:bf:7b:
                    59:b7:f9:ce:f8:c5:d4:cc:ae:94:dd:8b:b7:22:51:
                    71:90:99:b7:61:d7:2a:c5:53:66:c2:73:ec:ee:3d:
                    6a:df:5f:8f:61:55:12:25:b3:35:0b:38:8e:3e:cf:
                    1f:c0:94:88:42:6a:de:15:95:a8:4c:bc:f5:58:16:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C2:D2:B6:31:A9:6B:50:95:A7:BD:F1:9B:DA:AB:66:F2:B2:F0:E7
            X509v3 Authority Key Identifier:
                keyid:50:8B:E4:76:5F:F0:7F:81:06:03:39:7F:67:0D:FA:BC:89:D1:CB:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/508BE4765FF07F810603397F670DFABC89D1CBCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/508BE4765FF07F810603397F670DFABC89D1CBCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:2c:1c:68:7d:d4:6c:ad:69:ad:a0:57:c3:51:8f:61:c7:
         2d:8c:47:c3:70:81:fa:88:0f:af:49:4f:93:7c:2d:5c:5a:93:
         39:b7:8c:b6:b0:51:0e:be:68:5f:c3:78:a0:8d:fd:85:e0:b8:
         55:7a:a2:40:6a:a9:a6:4b:1c:39:b1:c2:a1:82:10:ec:2a:42:
         47:4d:86:b5:76:48:42:ab:69:bc:6a:66:f8:77:55:94:dd:9d:
         5a:3a:33:a1:8b:89:ff:e1:bc:b5:3e:1a:04:46:f1:e1:67:63:
         e6:4f:87:de:1f:f2:ad:70:b6:99:d7:2e:4f:fc:06:0c:ac:9f:
         d4:f7:2b:1d:d2:4b:75:30:53:b9:52:1b:43:05:4c:67:0f:41:
         a8:0a:c1:8b:06:74:fa:a9:cf:cf:67:7e:1d:7d:7a:28:df:ca:
         69:09:00:a1:0c:43:a3:e4:45:1b:10:9b:c1:01:f3:99:4c:f1:
         d1:45:2d:ef:3e:62:bf:cd:96:f9:79:d3:db:39:2e:f6:df:74:
         9a:66:df:12:7a:18:54:92:a4:d3:fb:99:08:69:01:8d:7b:22:
         8b:ee:a8:69:35:9d:39:3d:6d:d9:98:5c:13:da:29:43:06:7a:
         1a:8e:1d:f8:3d:b3:a2:d0:5e:8c:f8:97:4b:ef:2e:ea:ee:96:
         cf:db:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org