Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/1/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa
File:                     34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          WxQSt7qDlenvXSdcKWmC6czWdu9rZZ/WBN9RZKmmCr4=
Subject key identifier:   15:B7:71:3A:85:FE:5F:2A:A0:59:C0:78:DB:BD:9D:28:7C:40:30:81
Certificate issuer:       /CN=8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6
Certificate serial:       5B25B51CDA06A174C6C36F250E2B6455486B19E9
Authority key identifier: 8D:FD:8A:1B:66:FA:FB:D8:7A:52:D0:D5:1C:57:DE:C0:55:81:68:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/1/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa
Signing time:             Thu 04 Apr 2024 08:02:57 +0000
ROA not before:           Thu 04 Apr 2024 07:57:57 +0000
ROA not after:            Thu 03 Apr 2025 08:02:57 +0000
asID:                     266433
IP address blocks:        45.226.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:25:b5:1c:da:06:a1:74:c6:c3:6f:25:0e:2b:64:55:48:6b:19:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6
        Validity
            Not Before: Apr  4 07:57:57 2024 GMT
            Not After : Apr  3 08:02:57 2025 GMT
        Subject: CN=15B7713A85FE5F2AA059C078DBBD9D287C403081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:f0:75:20:0f:b0:c7:bc:f5:78:f8:58:39:
                    2d:07:e6:89:54:65:fd:a1:06:d9:81:cf:81:cc:02:
                    fe:25:02:a2:be:7b:fb:0b:ce:26:75:88:fa:e8:53:
                    f5:22:fc:d5:43:c9:a1:74:80:29:ea:83:88:c3:e9:
                    73:51:b2:68:6f:56:05:96:c9:4f:7d:90:98:fb:5b:
                    8b:ce:19:9f:87:9c:68:b5:1c:da:88:30:36:d2:68:
                    a0:71:05:44:75:03:ad:ef:9f:54:e2:f1:5d:9e:92:
                    72:da:4a:20:38:0b:1f:aa:10:19:5a:83:41:9b:5c:
                    d4:e3:9c:9f:2a:ac:4a:f7:c4:ab:bb:60:de:d3:6d:
                    69:53:a6:cc:dd:3a:41:07:6e:e8:f1:2c:19:e9:4c:
                    da:0d:c7:b1:bb:37:89:34:a0:4b:28:04:0c:66:78:
                    c9:64:da:78:8d:b0:60:f3:0b:91:96:95:76:f1:9c:
                    df:93:7c:66:ca:7f:b0:23:0b:33:7c:c1:9f:d2:5f:
                    cb:ef:15:ae:ab:87:fd:7c:75:cf:7b:4c:ff:b2:75:
                    96:f1:dc:e0:c7:bc:e1:35:51:5e:ab:dc:3c:45:23:
                    dc:62:3f:14:ed:45:c5:5c:41:ae:e6:aa:44:a2:9c:
                    4d:cf:56:18:53:20:3f:e6:1b:d9:19:7e:b8:1a:fd:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B7:71:3A:85:FE:5F:2A:A0:59:C0:78:DB:BD:9D:28:7C:40:30:81
            X509v3 Authority Key Identifier:
                keyid:8D:FD:8A:1B:66:FA:FB:D8:7A:52:D0:D5:1C:57:DE:C0:55:81:68:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/1/8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/1/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:9b:43:8e:51:c7:01:43:4e:dd:8b:5c:bd:ad:10:28:65:cc:
         01:06:34:fb:a2:e1:0f:6b:de:19:94:96:27:5f:ec:08:34:51:
         10:48:92:a8:17:1f:15:79:fc:c9:c2:4b:32:fa:e7:f5:67:1b:
         05:d3:62:04:d4:f2:9e:fe:e7:ae:55:50:5c:3f:db:d0:f8:51:
         23:1d:e4:41:0a:82:f3:d5:e2:ea:2a:94:7f:a2:97:18:bc:cd:
         93:7b:c8:1c:1d:54:11:43:0c:2f:b3:76:b1:be:d3:ee:f5:2b:
         0c:bb:71:97:76:31:a1:23:36:5f:45:a8:96:e9:98:6f:8f:5c:
         3c:69:88:13:f6:32:a3:e9:8f:4a:9a:34:ae:35:6d:ea:66:2e:
         40:a8:be:4c:a8:6d:c6:f1:0e:b0:8d:e0:c3:70:24:9e:1f:b3:
         62:bf:70:0c:66:07:a3:0c:62:28:27:db:64:dc:5a:25:b6:e8:
         30:38:6d:ed:94:21:23:c0:77:8f:9b:45:73:e9:74:09:95:39:
         21:f9:3e:86:66:e1:68:83:64:6f:74:3d:d7:f0:74:7a:18:74:
         c4:86:ff:9a:ab:ef:80:de:05:ac:21:8e:ed:30:e9:9e:82:9b:
         fb:c7:7f:25:e0:71:26:88:46:df:09:96:3d:7e:40:ab:2d:01:
         a1:c8:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 19:57:05 2024 by rpki-client on console-fra.rpki-client.org