Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa
File:                     34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa (raw, json)
Hash identifier:          8YwG4U3Yp8JYnTF0CdlXWM1z4SCmFqHddES7JGjDywU=
Subject key identifier:   46:B9:CF:94:2C:44:A8:C5:E2:89:B6:E2:42:CD:A4:AE:16:8E:26:B9
Certificate issuer:       /CN=48DFE379FC64C3F50512033477F929291FC10CF2
Certificate serial:       D5BC82B1C3CC52427D947FFB114D0546605A18
Authority key identifier: 48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa
Signing time:             Fri 08 Mar 2024 19:47:23 +0000
ROA not before:           Fri 08 Mar 2024 19:42:23 +0000
ROA not after:            Fri 07 Mar 2025 19:47:23 +0000
asID:                     268106
IP address blocks:        45.169.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:bc:82:b1:c3:cc:52:42:7d:94:7f:fb:11:4d:05:46:60:5a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DFE379FC64C3F50512033477F929291FC10CF2
        Validity
            Not Before: Mar  8 19:42:23 2024 GMT
            Not After : Mar  7 19:47:23 2025 GMT
        Subject: CN=46B9CF942C44A8C5E289B6E242CDA4AE168E26B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:b1:bc:87:f0:71:3d:79:79:2f:6c:3a:89:
                    e0:48:93:d1:86:46:50:5d:90:26:2f:39:cf:6d:7d:
                    d0:68:61:fc:ba:8f:ef:6f:9c:3c:a1:d8:9b:89:49:
                    c2:33:d4:d9:b0:aa:b6:75:79:f1:3d:19:1f:2e:66:
                    1e:4d:b7:ae:34:97:51:46:54:52:49:8e:a2:62:0a:
                    b6:9d:6a:d8:fb:71:64:7e:c1:d8:6c:40:91:e3:e6:
                    1a:64:97:7d:2d:ef:a8:b0:ea:ee:4a:03:b2:c4:53:
                    8d:1e:99:4c:89:bd:ea:07:12:db:6b:35:46:9d:9f:
                    ab:eb:91:66:84:36:72:63:1e:08:6c:9a:b1:91:72:
                    40:1a:ab:c3:09:bd:9d:34:ac:f7:32:d0:49:86:a2:
                    33:4e:20:6a:55:38:8e:7d:af:5a:34:5b:32:e1:6d:
                    23:cf:7b:89:88:12:f4:03:88:eb:95:86:df:12:c7:
                    e0:45:53:2f:59:29:8a:f8:9b:10:5d:ba:e8:c4:b5:
                    c2:73:88:be:14:cc:6c:ce:e2:b9:18:cb:43:c7:29:
                    8a:b2:eb:a0:62:d5:0c:b9:6c:82:fb:ab:a4:37:ad:
                    56:7d:e9:f8:30:37:f1:04:a3:df:71:05:b6:00:59:
                    16:92:c2:cb:b6:84:7b:6e:92:96:23:40:fa:d7:02:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B9:CF:94:2C:44:A8:C5:E2:89:B6:E2:42:CD:A4:AE:16:8E:26:B9
            X509v3 Authority Key Identifier:
                keyid:48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:09:fa:bd:ba:99:1d:1f:83:63:76:bb:c7:5d:e7:0e:71:c2:
         17:36:10:8c:34:db:60:7e:a3:0e:4a:33:a9:77:dc:cf:1f:91:
         17:80:c2:66:e8:79:4d:b2:cc:9c:f4:6b:ef:4f:b2:71:dc:f9:
         11:db:da:cc:d0:90:48:d0:c7:1d:a2:8b:bf:df:f3:0f:17:bb:
         f2:bd:71:22:e8:8e:c1:b8:80:de:55:e8:33:9d:05:2d:4c:f8:
         c3:62:e8:74:7f:af:dd:04:4e:84:08:7f:6f:a5:03:c4:34:ff:
         24:00:bd:7e:7b:71:f9:72:62:b2:cb:36:2d:0b:08:35:2a:bb:
         41:41:35:49:45:32:2e:f3:74:6f:3b:44:5f:72:e6:05:02:38:
         17:c3:23:a6:12:07:a9:13:cf:72:e6:95:62:cf:df:09:93:07:
         c4:c3:b4:38:f4:79:02:9c:40:df:aa:1e:94:2e:de:60:3d:72:
         61:b2:2b:18:25:9b:07:83:35:9d:e7:21:6d:db:cc:f5:03:d1:
         ca:a0:34:89:42:61:8d:12:c5:aa:2e:9c:a7:1c:4b:bf:f1:79:
         5f:02:06:80:c7:b6:7e:db:71:02:8a:76:0d:ea:49:50:c8:50:
         63:0e:52:7b:6c:c8:7e:14:3b:19:a5:db:c7:31:01:8d:5a:4f:
         47:e1:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org