Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/34352e3233382e3131362e302f32322d3234203d3e20323638333233.roa
File:                     34352e3233382e3131362e302f32322d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          aUyE64eu5ricW7D/II1UUsgDxFF9lhvkCmrxjdrZJ/o=
Subject key identifier:   20:FA:76:0F:2C:16:6B:BC:67:D4:B2:E3:08:78:70:0F:C3:FD:68:D9
Certificate issuer:       /CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
Certificate serial:       6D80E4BF8D8627FFC76BAD0041802C5ABE2BCF33
Authority key identifier: 4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/34352e3233382e3131362e302f32322d3234203d3e20323638333233.roa
Signing time:             Tue 19 Mar 2024 13:01:15 +0000
ROA not before:           Tue 19 Mar 2024 12:56:15 +0000
ROA not after:            Tue 18 Mar 2025 13:01:15 +0000
asID:                     268323
IP address blocks:        45.238.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:80:e4:bf:8d:86:27:ff:c7:6b:ad:00:41:80:2c:5a:be:2b:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
        Validity
            Not Before: Mar 19 12:56:15 2024 GMT
            Not After : Mar 18 13:01:15 2025 GMT
        Subject: CN=20FA760F2C166BBC67D4B2E30878700FC3FD68D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:29:2a:57:e6:ed:96:9f:6e:35:50:0a:23:
                    90:c1:5f:ab:8c:70:85:ec:9e:9b:67:1f:5a:6c:e1:
                    c1:d9:50:6f:2c:d8:ab:a6:78:75:88:3b:52:0d:38:
                    7a:bd:a7:2f:56:60:69:83:55:0c:33:fc:90:fb:98:
                    0b:03:9b:1d:66:e8:80:29:6f:58:c7:79:2f:38:e2:
                    36:f4:ef:77:f5:5c:91:8b:04:33:21:66:61:0e:6a:
                    0f:90:e8:fe:9d:98:a5:78:63:4c:ad:ae:3c:be:1d:
                    ec:41:6b:83:d6:68:76:47:3c:df:be:c7:01:e7:79:
                    42:09:55:2a:bf:3d:4e:ee:ed:e3:e6:95:df:dd:d8:
                    9f:19:15:2f:a0:33:85:26:9a:6a:3f:b7:82:0c:0f:
                    02:7f:3c:46:38:6f:37:4b:85:0c:39:b2:46:5d:5a:
                    ed:74:ed:de:0f:c8:a9:ee:82:df:d8:21:d4:e3:e8:
                    e3:2c:34:bd:82:84:c6:4a:08:f6:5b:8d:a5:7d:f6:
                    9c:0f:1e:16:cc:c8:36:20:c5:9d:ea:93:c9:bf:67:
                    7a:df:96:ac:35:3e:20:d8:fb:47:da:46:2f:25:72:
                    94:87:5f:f4:ff:69:46:36:ec:3e:96:3f:4c:32:71:
                    e3:13:30:53:0b:3c:ce:84:49:ae:cb:20:f8:a7:7c:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FA:76:0F:2C:16:6B:BC:67:D4:B2:E3:08:78:70:0F:C3:FD:68:D9
            X509v3 Authority Key Identifier:
                keyid:4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/34352e3233382e3131362e302f32322d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:a8:da:4b:4e:47:88:17:43:2d:89:5c:78:9f:9e:3f:6e:67:
         a0:bb:a8:52:44:94:5e:f9:75:52:eb:79:37:2b:6f:90:c4:ee:
         29:75:bc:7e:1a:05:54:38:5d:ea:a7:19:29:f3:b7:4d:5d:0f:
         fa:d8:ea:2e:4a:0e:48:30:e8:e2:43:ac:85:9b:82:10:d0:e4:
         82:f4:c9:17:d1:19:b4:66:82:a3:b7:8e:a3:f4:db:09:23:02:
         9c:05:9f:1a:16:9e:23:8e:73:dd:b3:1c:82:4d:0f:75:c7:ce:
         80:7d:f0:65:3e:c0:e8:94:0a:b0:55:33:f3:c4:8f:49:d2:8c:
         f4:d1:81:d4:4c:18:27:e0:61:1a:9e:c0:ab:2b:f4:60:76:4e:
         11:9d:1c:07:92:6b:6c:fd:8c:2d:9b:3b:5f:91:7b:ef:b2:cf:
         2e:b6:b0:8f:bf:27:55:03:d1:7d:7f:2c:ac:71:89:2e:5d:26:
         20:36:21:18:04:2a:cc:b6:b6:69:0e:1b:11:4b:f8:cb:62:cb:
         f4:0b:42:8c:88:14:46:5b:11:52:36:67:41:de:54:b3:85:16:
         be:b8:08:ee:0d:46:89:96:2b:79:1e:55:ec:7f:c6:a4:af:02:
         86:aa:6d:81:38:a9:43:97:8b:28:a2:80:c4:e1:ac:68:aa:d6:
         1c:1a:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org