Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa
File:                     34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          bnQ/H7ieSwg824qXdV9nXfJ1VzlT453kr0fKg9lI690=
Subject key identifier:   FA:10:DF:97:F3:90:2E:25:48:B0:86:2E:12:A0:06:1C:3B:37:DF:95
Certificate issuer:       /CN=78C362024931EABCD22430437714D086537F64FD
Certificate serial:       3A94EFBFBDE1E79E3D268BCE7BB5EBDC2678E28A
Authority key identifier: 78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa
Signing time:             Thu 02 Nov 2023 13:00:39 +0000
ROA not before:           Thu 02 Nov 2023 12:55:39 +0000
ROA not after:            Thu 31 Oct 2024 13:00:39 +0000
asID:                     266433
IP address blocks:        45.226.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:94:ef:bf:bd:e1:e7:9e:3d:26:8b:ce:7b:b5:eb:dc:26:78:e2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C362024931EABCD22430437714D086537F64FD
        Validity
            Not Before: Nov  2 12:55:39 2023 GMT
            Not After : Oct 31 13:00:39 2024 GMT
        Subject: CN=FA10DF97F3902E2548B0862E12A0061C3B37DF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c7:6d:d0:d7:3f:d2:d0:45:45:7d:14:cb:83:
                    1d:a9:1e:5d:ad:77:ab:38:d0:c4:0c:2b:cb:1e:92:
                    13:d9:71:3f:6f:86:1c:7a:75:b6:c0:d9:46:21:59:
                    8d:4b:f7:bd:9d:5a:c5:44:74:bd:7d:7b:f2:82:0c:
                    63:f2:f9:ca:52:02:6a:a4:fa:a6:07:52:94:67:6f:
                    bf:27:f1:72:df:e4:ae:17:a4:d2:5d:20:06:81:99:
                    a7:2f:f8:11:cd:b8:23:e1:b4:47:99:9c:02:8d:9c:
                    50:47:4b:5b:f7:a5:b3:9f:0b:5a:4a:7b:8f:5c:9f:
                    0b:ba:67:f2:67:28:ae:99:4c:5e:c8:78:6d:c9:80:
                    2c:9e:67:d2:b7:81:55:18:22:9a:b9:76:d7:4c:81:
                    70:0d:56:72:8b:ec:d0:23:db:5b:83:c3:ed:91:2a:
                    2a:26:85:c5:cf:5d:96:e6:c9:38:83:ca:21:7b:c0:
                    16:36:98:05:0a:b2:4e:e8:41:c9:3d:a6:b7:86:1d:
                    f0:32:eb:c7:8f:d5:a6:1a:9a:fd:f0:02:9a:d6:6c:
                    ce:02:b3:6b:ac:99:7f:36:05:fc:7a:7c:07:bd:ec:
                    3e:ce:5e:08:6b:50:19:a3:4c:49:a6:ec:88:2d:33:
                    8d:95:dd:74:7a:c3:31:c8:9d:52:9c:ef:c3:ef:d8:
                    25:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:DF:97:F3:90:2E:25:48:B0:86:2E:12:A0:06:1C:3B:37:DF:95
            X509v3 Authority Key Identifier:
                keyid:78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:fd:47:70:d4:ab:3b:77:1c:41:73:fc:f9:00:d2:e4:5d:c1:
         23:7d:6a:b4:af:53:7d:29:85:97:01:00:18:4b:66:a6:dd:5f:
         76:4a:5a:a7:13:50:05:a3:aa:20:48:1a:da:90:d9:48:e7:41:
         be:ae:6e:ca:ba:05:d1:f9:41:7c:f8:47:88:63:1f:20:45:ab:
         6f:d9:66:dd:82:20:86:6c:08:cf:67:50:c4:91:43:42:ac:69:
         64:73:c5:02:cb:15:f3:76:ad:45:1e:cc:91:55:c1:2e:15:d5:
         31:60:15:69:75:b0:5f:11:5b:81:f9:a6:26:50:92:93:bd:ed:
         79:90:d4:e8:6d:30:77:52:c3:63:76:67:be:8d:03:65:4c:04:
         1e:8d:2b:a7:04:5b:a5:35:5f:00:ae:2b:01:02:2a:65:20:8c:
         44:45:7f:c2:4d:0c:c7:10:69:01:92:73:a0:c9:5e:82:32:8b:
         f7:f9:7f:58:93:b7:bf:3a:17:48:66:a7:fd:b3:30:7e:70:02:
         56:60:10:56:c8:71:78:f7:54:bc:dc:c0:cc:38:44:a0:ea:72:
         94:87:f1:70:30:1c:7b:bf:d6:ff:d0:8e:dc:48:7f:b3:92:2e:
         8f:7b:58:31:a1:62:a1:06:ac:6d:5c:a6:53:77:9e:ae:24:e9:
         59:7d:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org