Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32342d3234203d3e20323637323338.roa
File:                     34352e3233322e342e302f32342d3234203d3e20323637323338.roa (raw, json)
Hash identifier:          ajndh2o20/kgrK0/9vVUEXmmeeQ3bJw/WaJDhS2lJNQ=
Subject key identifier:   23:38:92:6B:BE:1E:36:97:B7:35:7F:F3:94:09:F5:40:40:C2:5A:D8
Certificate issuer:       /CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
Certificate serial:       7CEB847BB8A4DA0B878370E4BED55C77F05507C8
Authority key identifier: 12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32342d3234203d3e20323637323338.roa
Signing time:             Mon 19 Sep 2022 15:49:54 +0000
ROA not before:           Mon 19 Sep 2022 15:44:54 +0000
ROA not after:            Mon 18 Sep 2023 15:49:54 +0000
asID:                     267238
IP address blocks:        45.232.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:84:7b:b8:a4:da:0b:87:83:70:e4:be:d5:5c:77:f0:55:07:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
        Validity
            Not Before: Sep 19 15:44:54 2022 GMT
            Not After : Sep 18 15:49:54 2023 GMT
        Subject: CN=2338926BBE1E3697B7357FF39409F54040C25AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:20:3f:bb:c2:f7:51:09:3f:f8:07:e4:0f:
                    ba:81:d0:b7:b9:b4:7f:77:15:fb:7b:31:f8:81:83:
                    92:d5:8d:83:2a:e1:de:96:85:bb:fb:d5:fb:f6:36:
                    fa:d7:df:43:4c:22:b4:63:2d:91:99:d8:51:a5:40:
                    a3:54:2e:2e:36:4f:79:fa:19:36:de:37:f2:2e:df:
                    1b:6a:c7:35:46:fd:0f:37:71:75:cc:d9:34:bb:d7:
                    59:04:e0:fc:50:10:9b:ba:6b:8f:cc:48:7a:a0:d6:
                    95:40:34:57:e3:92:67:6e:45:fa:38:3b:36:8d:cb:
                    d0:85:c5:b7:9b:a0:7c:5d:59:b2:a9:85:47:22:4b:
                    0e:5e:26:43:82:25:e6:1e:99:47:eb:43:6d:80:72:
                    c3:1a:fc:fd:1f:66:34:96:e1:54:60:cb:b0:d0:e8:
                    aa:68:21:82:ac:16:c6:ce:b6:57:0b:e5:af:67:84:
                    56:26:35:16:da:93:39:90:56:f4:41:ac:09:6b:2a:
                    38:c2:78:e1:0c:c5:bf:cd:f7:40:3b:e2:e9:e1:be:
                    9b:f3:75:7f:9a:bb:3a:95:71:9e:60:0e:af:e9:3c:
                    91:e9:61:2e:37:0f:0d:d7:1d:24:c2:d0:06:7c:e4:
                    84:a0:4e:cc:ff:7a:f7:78:f9:99:e1:b1:e0:e0:63:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:38:92:6B:BE:1E:36:97:B7:35:7F:F3:94:09:F5:40:40:C2:5A:D8
            X509v3 Authority Key Identifier:
                keyid:12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32342d3234203d3e20323637323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:d9:05:3a:a1:cf:0b:12:91:f9:ab:3e:5b:2c:05:9b:3a:df:
         33:2f:2f:36:74:b2:10:be:bf:a1:d6:75:47:57:40:1c:66:11:
         21:6c:be:30:ac:7c:21:fa:a3:81:50:9c:ee:23:9b:b1:d6:d0:
         5e:d1:45:b7:8b:e8:4c:c5:b6:4f:4d:91:8c:10:85:29:3d:ad:
         e7:5b:7c:61:fb:3c:39:65:91:03:ca:81:1f:89:8e:fe:16:82:
         a6:97:fd:d1:0a:11:08:f1:96:97:b2:5d:0c:5d:6a:b7:4a:c5:
         38:0c:0a:64:b9:37:aa:f8:d5:10:e2:05:23:2c:15:d8:fd:69:
         8c:56:d2:f1:cd:78:98:81:67:75:51:b1:af:d3:43:d4:d0:94:
         55:01:c8:eb:6b:fe:55:bd:63:e3:79:1c:0b:a2:49:55:33:88:
         a8:40:40:aa:16:63:6a:5a:19:b3:bf:fd:71:3d:8f:79:a9:b8:
         a5:a2:10:0a:2e:ae:70:86:72:92:b8:91:af:5a:54:90:39:96:
         f3:92:d6:f4:25:97:62:7c:57:02:4b:ec:67:51:5b:6b:5b:a8:
         cf:61:51:c7:2a:55:6a:24:87:8c:c0:47:52:4f:9b:ad:b4:b0:
         d7:c0:55:c6:76:29:37:ce:52:81:20:d6:76:3b:37:37:99:21:
         74:e3:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org