Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3234203d3e20323639303531.roa
File:                     34352e3137382e3234382e302f32322d3234203d3e20323639303531.roa (raw, json)
Hash identifier:          ht8U0MVGpQVQVz5ygTBZ8CidYjorpXgTPpGl5oXSjlM=
Subject key identifier:   4B:E8:9B:36:F8:F6:C9:C3:37:AE:C2:38:C5:29:04:FB:6C:EA:4E:E6
Certificate issuer:       /CN=0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048
Certificate serial:       5026A37A34A3BE5F24E57AC16013ABB6D84789EF
Authority key identifier: 0E:A5:ED:0B:D9:E5:F3:A3:E0:18:D8:8B:6A:B7:8B:F5:83:30:B0:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3234203d3e20323639303531.roa
Signing time:             Mon 04 Mar 2024 17:43:49 +0000
ROA not before:           Mon 04 Mar 2024 17:38:49 +0000
ROA not after:            Mon 03 Mar 2025 17:43:49 +0000
asID:                     269051
IP address blocks:        45.178.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:26:a3:7a:34:a3:be:5f:24:e5:7a:c1:60:13:ab:b6:d8:47:89:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048
        Validity
            Not Before: Mar  4 17:38:49 2024 GMT
            Not After : Mar  3 17:43:49 2025 GMT
        Subject: CN=4BE89B36F8F6C9C337AEC238C52904FB6CEA4EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:f4:13:e0:af:e1:48:18:f8:ed:21:dc:1a:
                    ba:cb:1b:25:d0:15:20:ac:65:b3:d5:2f:bc:74:a0:
                    1b:a5:74:7f:7d:04:da:e2:e6:e7:0c:4d:fb:1e:aa:
                    72:b6:72:ef:08:1e:4e:db:e3:a7:75:05:1d:91:3b:
                    01:30:c8:28:d2:cb:ee:53:d9:1c:07:98:23:9e:fb:
                    73:95:17:e3:71:52:03:a6:66:9b:95:4e:fb:ed:7c:
                    41:0b:d7:bb:d0:7c:d3:f5:0a:ef:ec:23:7e:cb:df:
                    2f:41:55:69:a2:9a:1d:05:7a:23:7f:21:e1:7b:43:
                    d0:06:85:5f:f9:74:7d:19:65:42:05:91:b6:df:55:
                    d5:52:b3:0f:04:b7:8a:54:95:a7:21:c4:ab:6f:40:
                    e7:e2:55:ee:70:7c:22:68:5b:95:c8:04:1d:fd:db:
                    a0:3f:05:a8:c2:d3:83:24:09:d7:da:65:ad:22:38:
                    75:97:b9:18:2b:cc:9a:22:c4:48:1d:b9:0b:e3:cb:
                    5d:2c:fc:79:a4:dc:f2:7c:39:10:88:dd:92:29:1f:
                    94:6a:e6:23:a0:c5:c2:39:e0:63:b6:1c:77:40:c4:
                    4a:04:e0:39:8b:5a:c0:9e:82:bb:8d:ef:63:66:aa:
                    44:9a:93:b2:df:bc:3f:5a:40:ff:0c:82:81:aa:cf:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E8:9B:36:F8:F6:C9:C3:37:AE:C2:38:C5:29:04:FB:6C:EA:4E:E6
            X509v3 Authority Key Identifier:
                keyid:0E:A5:ED:0B:D9:E5:F3:A3:E0:18:D8:8B:6A:B7:8B:F5:83:30:B0:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3234203d3e20323639303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:71:34:07:a1:44:36:33:86:15:ac:36:3c:2b:ed:12:ca:
         90:09:4b:d3:25:d4:a1:af:9b:f1:e7:92:50:4d:16:4c:9a:fd:
         d8:02:ed:db:0f:37:06:c6:0e:29:51:bf:0f:ee:96:36:6b:d9:
         1c:37:72:16:ac:05:35:87:35:1b:e5:79:44:53:ee:2b:e9:49:
         41:23:48:19:04:e9:e5:eb:05:0a:ed:38:c5:f4:bc:ce:69:d0:
         89:cf:fe:95:53:a9:a2:a1:bc:ed:d7:f6:11:b2:5d:b0:94:60:
         ae:9e:a7:0f:ad:1e:f7:f5:dc:eb:27:19:cf:4b:7b:d0:60:44:
         79:62:fc:24:8f:78:1a:39:2c:d0:85:b5:78:d2:a7:24:a0:47:
         2c:70:26:28:89:ba:c2:d0:92:ac:9c:69:22:a4:bc:7f:ae:d6:
         a6:78:32:20:cd:d6:4e:0e:0c:3d:ce:2e:3e:58:b4:c3:c6:32:
         37:67:ac:8c:74:b5:b6:c6:99:8e:3e:cc:2e:f7:cc:b5:94:d3:
         b3:02:71:74:da:71:b9:5a:a3:5c:1b:f3:c8:7f:8c:f2:93:91:
         30:b5:6c:b7:81:35:36:9d:bf:7f:ad:5e:a6:63:97:d8:9d:2b:
         a9:8f:f1:d7:9f:d4:7a:6c:c8:61:fb:3c:bf:a1:2d:0c:59:4a:
         0b:a0:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org