Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/0/34352e3233312e35362e302f32322d3234203d3e20323637323030.roa
File:                     34352e3233312e35362e302f32322d3234203d3e20323637323030.roa (raw, json)
Hash identifier:          XMFaoyX8U45DH0e0wjpG1C/UqHC7s5gvKu9XdPFFSig=
Subject key identifier:   92:C1:47:C0:81:B1:62:91:1E:3E:0D:21:56:7B:82:6C:03:C0:27:5E
Certificate issuer:       /CN=3E5FBAF81C3A51F098208C2766BFFC3498DC63FF
Certificate serial:       7A3FDEFBB78AEA5150BC761DE05AD52B17F1A7E0
Authority key identifier: 3E:5F:BA:F8:1C:3A:51:F0:98:20:8C:27:66:BF:FC:34:98:DC:63:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/0/34352e3233312e35362e302f32322d3234203d3e20323637323030.roa
Signing time:             Sat 15 Apr 2023 21:56:04 +0000
ROA not before:           Sat 15 Apr 2023 21:51:04 +0000
ROA not after:            Sat 13 Apr 2024 21:56:04 +0000
asID:                     267200
IP address blocks:        45.231.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3f:de:fb:b7:8a:ea:51:50:bc:76:1d:e0:5a:d5:2b:17:f1:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E5FBAF81C3A51F098208C2766BFFC3498DC63FF
        Validity
            Not Before: Apr 15 21:51:04 2023 GMT
            Not After : Apr 13 21:56:04 2024 GMT
        Subject: CN=92C147C081B162911E3E0D21567B826C03C0275E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c2:ca:51:fe:03:50:1e:79:54:d3:c6:49:06:
                    56:59:8b:9b:f0:cb:f0:87:e9:fb:52:17:e3:da:db:
                    ea:ad:c6:43:d9:d4:63:4b:82:b2:ab:80:c6:3e:dd:
                    24:db:56:0c:5f:f5:77:90:b2:48:83:17:c5:9f:7d:
                    a1:28:35:d9:72:e3:f8:88:33:cc:10:30:2d:6a:86:
                    1c:60:75:e0:9e:3c:f3:89:40:70:5b:6d:5d:4f:59:
                    ca:15:60:5a:a1:a7:01:6b:50:50:98:e1:c2:b1:54:
                    a8:9c:d1:b3:7d:90:a7:8c:23:b0:25:bd:eb:60:91:
                    63:b7:f2:a6:fd:d0:9f:64:c8:23:15:d2:07:11:23:
                    96:f2:1e:9e:72:1b:ed:83:4e:1d:48:a5:1f:78:a8:
                    fb:77:c9:9c:0d:3b:a2:ab:f8:bd:4d:27:2d:e4:a3:
                    6d:f4:52:3a:bf:25:43:dd:70:15:c7:d2:40:2f:d4:
                    83:6e:a6:70:82:a2:02:0d:91:9a:2d:5b:42:1f:93:
                    7a:09:21:cd:18:84:b7:bb:b5:0d:27:be:6f:8f:f4:
                    ee:15:e1:82:50:86:07:63:01:9b:9d:97:48:b2:2a:
                    1c:bd:81:42:3f:46:4e:77:1f:20:c1:24:2b:1f:54:
                    a9:0b:94:3c:7f:27:8a:ba:ec:c0:ab:bc:2f:23:f2:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C1:47:C0:81:B1:62:91:1E:3E:0D:21:56:7B:82:6C:03:C0:27:5E
            X509v3 Authority Key Identifier:
                keyid:3E:5F:BA:F8:1C:3A:51:F0:98:20:8C:27:66:BF:FC:34:98:DC:63:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/0/34352e3233312e35362e302f32322d3234203d3e20323637323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:82:8b:21:a4:14:a4:3e:c9:17:02:da:2e:b0:1b:62:ec:98:
         a7:38:51:88:55:d0:ee:02:89:be:71:6d:84:08:84:a3:4c:c5:
         ce:88:bc:20:29:ae:82:5e:a5:2d:7f:06:2a:d6:f1:bc:7d:63:
         6a:7d:b6:40:2f:ec:46:9c:ea:ff:6b:aa:db:6c:fc:9b:6a:a2:
         d5:f6:58:76:47:6f:e5:08:d0:3e:3d:2e:56:3c:15:f1:07:c7:
         43:48:d1:86:59:ba:06:e7:36:18:bc:d3:e5:bd:9d:8f:23:39:
         28:c6:06:7a:57:01:3b:de:a2:a2:7e:c2:96:d9:65:55:5e:5c:
         12:b3:37:2e:f6:2d:c0:6e:1b:6a:d3:b5:89:4c:ee:d4:4e:ff:
         e7:03:92:cc:26:af:ca:c6:5d:8d:34:69:45:f6:11:26:37:9f:
         5a:8d:90:1f:37:7f:53:26:f7:ee:fb:c6:08:77:97:85:1d:ae:
         44:23:91:a4:8f:35:34:8a:73:73:35:4b:55:ef:72:58:23:ff:
         a1:7d:05:21:9c:33:fb:77:27:31:8b:3c:96:03:b7:ce:0f:a4:
         c1:f0:d1:c8:38:63:54:3d:f5:2e:42:ce:fd:69:3a:cc:6c:b1:
         10:ef:65:04:eb:2e:19:bf:d9:d5:5d:b3:40:e1:8e:ff:13:02:
         99:59:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:53 2024 by rpki-client on console-ams.rpki-client.org