Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa
File:                     34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa (raw, json)
Hash identifier:          P/T1M1ULi1h1UiZxelaWO1ag7tnfu7kpUkaF7fC0N+o=
Subject key identifier:   A9:36:E3:69:C2:48:24:87:B9:C3:47:31:79:2D:CE:1F:15:0C:14:7A
Certificate issuer:       /CN=A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B
Certificate serial:       6CE3FDEFEF38F3A77D461A4444220524E1A01A76
Authority key identifier: A2:0B:DD:CD:2F:FB:E8:C8:E5:36:76:93:28:2A:EB:F7:83:D8:0B:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa
Signing time:             Fri 26 Jan 2024 13:09:12 +0000
ROA not before:           Fri 26 Jan 2024 13:04:12 +0000
ROA not after:            Fri 24 Jan 2025 13:09:12 +0000
asID:                     273350
IP address blocks:        45.224.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e3:fd:ef:ef:38:f3:a7:7d:46:1a:44:44:22:05:24:e1:a0:1a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B
        Validity
            Not Before: Jan 26 13:04:12 2024 GMT
            Not After : Jan 24 13:09:12 2025 GMT
        Subject: CN=A936E369C2482487B9C34731792DCE1F150C147A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:e8:f3:1e:49:15:25:bc:47:d4:4b:55:a7:
                    fa:11:09:a7:b5:b5:18:c0:51:16:54:15:6c:73:cf:
                    18:24:b4:80:68:9c:8c:95:78:c3:85:b3:68:a0:af:
                    8c:20:18:af:ce:d0:2c:79:af:77:5a:ea:f5:39:3b:
                    fa:a1:13:f6:a4:e0:f9:e8:5c:a7:26:20:1f:69:2b:
                    70:5d:72:56:28:f2:b3:0c:6b:17:93:91:16:29:07:
                    3d:41:19:08:69:54:9a:0f:67:ec:9f:d8:d1:2e:4d:
                    77:df:c9:9f:22:73:38:02:33:b7:6f:7f:96:0e:a9:
                    5f:46:13:66:db:37:8c:dc:9a:3c:fe:1a:be:da:80:
                    7e:04:99:75:3e:c4:ff:a4:1d:ab:b5:17:3e:1c:2b:
                    4c:24:ff:be:0a:2a:51:ce:90:71:3a:33:a1:cb:b5:
                    31:d3:03:d5:a6:5e:0a:e0:dd:f4:be:f1:c3:b7:ea:
                    29:4a:7f:59:ed:85:44:73:7d:ec:6d:0b:a9:46:b0:
                    d6:a1:e9:02:35:fd:9d:ab:aa:7a:38:2e:42:2f:f1:
                    4e:af:64:9e:f3:d9:2e:26:f8:af:7f:95:09:99:9e:
                    d4:95:48:a1:ea:0c:e3:06:57:06:73:55:df:d4:d3:
                    0a:ca:06:e3:fe:09:f3:3e:17:4a:48:24:cd:af:ce:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:36:E3:69:C2:48:24:87:B9:C3:47:31:79:2D:CE:1F:15:0C:14:7A
            X509v3 Authority Key Identifier:
                keyid:A2:0B:DD:CD:2F:FB:E8:C8:E5:36:76:93:28:2A:EB:F7:83:D8:0B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:3f:9c:6b:c8:66:59:e7:c8:61:94:7e:0c:4b:07:2f:51:46:
         08:e4:87:34:2d:43:06:5f:f2:29:67:22:be:8b:9d:95:8e:70:
         6e:db:59:1e:d9:64:7d:f8:f0:16:fb:f0:01:3b:6a:ac:47:4a:
         cb:45:d7:b5:78:14:3c:c0:51:25:05:75:5a:4f:a6:33:07:2d:
         8a:f9:83:2d:5f:68:d3:61:78:0f:ab:a7:dc:cf:51:7c:34:fa:
         fe:1c:5f:b1:b7:23:7a:a0:fa:23:dc:32:77:25:86:8f:80:40:
         eb:92:33:b0:c7:0b:02:66:3e:a8:8d:61:2f:f7:96:a9:5c:d8:
         8b:9e:2d:36:08:d9:4b:de:4c:59:e4:dc:ad:b3:4f:21:e1:de:
         18:56:84:c7:de:03:0b:75:64:d2:7b:e6:22:b8:2c:70:9f:22:
         9a:47:d1:7f:67:e0:a8:57:de:e7:09:1a:d6:86:a4:69:eb:21:
         18:1f:99:98:23:17:26:34:b3:11:7c:0a:cb:b6:9f:63:17:4e:
         ad:a8:47:7e:83:75:7a:dd:5e:3c:9d:69:d4:24:21:dc:78:49:
         24:62:cc:75:9c:84:f4:97:57:99:0c:26:ee:47:40:a0:1f:77:
         9d:45:4e:fe:bf:e4:ae:b3:02:17:82:1f:20:db:e7:2d:3b:9e:
         f8:df:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org