Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa
File:                     34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa (raw, json)
Hash identifier:          TPDb39A7Tw/ksuyEZ7H8TZCwFYkO00NoGDe7zSNTYm8=
Subject key identifier:   7E:E4:D5:0F:E2:EB:01:2F:CE:DA:61:34:F5:90:DD:43:24:C5:3B:D2
Certificate issuer:       /CN=B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD
Certificate serial:       3527090A9FBE8A2ABFA075FE4FEACFC2F5F33D5F
Authority key identifier: B3:DC:EA:24:6C:36:CB:EF:4D:EA:95:90:9D:08:AC:33:1E:A4:BD:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa
Signing time:             Thu 14 Mar 2024 14:12:11 +0000
ROA not before:           Thu 14 Mar 2024 14:07:11 +0000
ROA not after:            Thu 13 Mar 2025 14:12:11 +0000
asID:                     268528
IP address blocks:        45.162.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:27:09:0a:9f:be:8a:2a:bf:a0:75:fe:4f:ea:cf:c2:f5:f3:3d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD
        Validity
            Not Before: Mar 14 14:07:11 2024 GMT
            Not After : Mar 13 14:12:11 2025 GMT
        Subject: CN=7EE4D50FE2EB012FCEDA6134F590DD4324C53BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:1a:4d:a9:e2:44:1a:ab:f9:24:19:8c:d8:
                    d8:e4:d8:bd:83:97:a3:00:8a:45:53:92:57:ac:61:
                    f1:bc:c3:71:f5:25:4f:e1:d0:7d:e9:4a:7c:03:9c:
                    65:14:d7:1e:94:aa:5b:c5:28:99:04:f0:2a:51:93:
                    4d:71:82:ad:ff:17:94:0c:e2:d0:e9:b5:af:4a:59:
                    15:48:3f:1d:8e:c6:cc:9f:37:c0:6d:0c:5b:8f:f1:
                    75:00:5c:b6:bc:5e:fb:2a:e9:0e:6c:84:4a:47:04:
                    3c:d1:e8:af:fe:43:f4:a7:07:ed:03:82:7c:d6:34:
                    fb:15:24:00:0a:e2:cb:2d:73:19:6f:22:79:10:6e:
                    24:c2:1d:99:f0:0f:93:55:06:39:fa:c2:28:42:d9:
                    85:fc:a5:82:e1:38:40:a6:7c:59:93:b8:fd:0f:2e:
                    d9:96:f6:61:53:53:cb:a9:29:0a:12:95:a0:61:4b:
                    cc:44:c2:dd:d0:6a:a2:a5:f0:00:b6:d4:7a:b9:c6:
                    5c:dc:95:2f:22:e1:5c:38:32:c3:80:c7:eb:46:7d:
                    f8:63:55:0b:b2:6b:8b:ff:6e:21:19:e2:44:ed:66:
                    15:64:43:08:74:0f:74:bd:98:a2:49:cf:b6:a8:d3:
                    70:f0:44:06:de:b9:48:f0:5e:46:3b:4f:dc:86:35:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E4:D5:0F:E2:EB:01:2F:CE:DA:61:34:F5:90:DD:43:24:C5:3B:D2
            X509v3 Authority Key Identifier:
                keyid:B3:DC:EA:24:6C:36:CB:EF:4D:EA:95:90:9D:08:AC:33:1E:A4:BD:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:30:34:16:fa:4d:58:83:6c:92:1d:4d:c8:9d:6a:af:a1:3f:
         43:2d:30:9e:df:b3:65:4b:ba:12:83:d2:15:36:ee:ee:8f:98:
         32:83:13:31:29:a7:0c:b3:17:9a:94:b5:b0:6c:e1:f4:e2:6e:
         1d:c6:d7:1e:0b:e5:ec:23:9c:13:84:35:0a:f9:0c:81:41:31:
         61:3b:e3:32:f4:e8:4e:a3:c5:60:0b:e2:03:81:e2:1e:a5:e5:
         fa:0f:ae:53:44:6e:a6:fa:69:fa:7f:50:a9:5a:03:d2:14:15:
         4f:8f:c2:2c:98:84:13:8b:00:46:e2:44:b7:d6:c0:e6:29:19:
         d6:a3:8e:ad:82:b1:f6:18:41:81:f0:12:fd:03:54:b2:c6:59:
         e2:31:06:9e:cf:78:4b:96:7f:aa:8d:1b:47:ee:c9:2d:b4:95:
         14:12:16:c6:97:13:de:46:ec:fe:1a:aa:d7:bf:c1:f5:1e:c6:
         b1:d6:4d:ec:6a:d0:4b:bb:20:f3:ba:e5:6c:aa:54:ea:ab:23:
         53:de:c4:a8:16:f6:2c:ba:0d:64:7b:da:57:73:93:f6:10:6d:
         08:67:47:cc:5b:73:34:8e:93:dc:80:75:52:95:02:e2:52:e5:
         a1:1a:78:4c:3a:67:00:ea:7e:b2:ac:6b:5d:63:12:91:14:4b:
         3d:bc:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org