Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa
File:                     34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa (raw, json)
Hash identifier:          5la+f51S9f9p0lOpvHuVzHQV9gVDp88+cQxpSOWJEg0=
Subject key identifier:   C1:25:12:DB:9A:35:9C:F4:C2:78:3B:27:F5:6E:8B:1C:B4:84:F4:C8
Certificate issuer:       /CN=891C68CB622D162913FED257108AE6F48235EE16
Certificate serial:       0FB0113C010BEF50A0FC026CF23419CB8DA47870
Authority key identifier: 89:1C:68:CB:62:2D:16:29:13:FE:D2:57:10:8A:E6:F4:82:35:EE:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891C68CB622D162913FED257108AE6F48235EE16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa
Signing time:             Wed 03 Apr 2024 19:48:45 +0000
ROA not before:           Wed 03 Apr 2024 19:43:45 +0000
ROA not after:            Wed 02 Apr 2025 19:48:45 +0000
asID:                     267347
IP address blocks:        45.233.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b0:11:3c:01:0b:ef:50:a0:fc:02:6c:f2:34:19:cb:8d:a4:78:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891C68CB622D162913FED257108AE6F48235EE16
        Validity
            Not Before: Apr  3 19:43:45 2024 GMT
            Not After : Apr  2 19:48:45 2025 GMT
        Subject: CN=C12512DB9A359CF4C2783B27F56E8B1CB484F4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:3e:70:64:00:0f:76:91:e7:be:7e:fd:51:
                    bb:00:e0:a0:f4:f0:30:60:c9:77:c9:6e:4e:f7:20:
                    6e:16:35:7b:5c:58:e2:06:a5:cf:f8:c6:49:d8:4e:
                    4e:6c:9e:11:cb:81:2d:94:6c:29:fb:c6:40:5d:b8:
                    bc:73:c4:76:b8:02:f9:d1:26:eb:a2:57:f6:d9:42:
                    70:2a:cd:5d:43:0f:ba:28:f3:38:91:df:21:50:83:
                    12:a4:86:18:fa:dd:e0:2c:e4:79:c5:61:44:f0:15:
                    f7:ee:2c:7b:d7:b4:19:2c:0c:f3:bb:ba:51:37:f3:
                    1b:ef:7f:e6:2a:bf:2f:5d:bb:eb:dd:2b:0e:d6:85:
                    db:87:b2:59:2e:66:16:2c:70:66:2f:a3:dd:59:ab:
                    5a:a4:4b:94:b2:8b:db:57:12:a0:6f:58:c2:a5:d4:
                    ca:19:de:f9:86:84:43:ec:ac:86:ea:3e:eb:e8:ae:
                    43:1f:8e:64:fc:cc:17:e6:15:e7:d3:e7:bf:0a:c5:
                    87:20:38:37:bc:b5:53:fb:dc:7f:ff:c5:e3:d8:ee:
                    71:ea:cc:3e:64:73:bd:6a:a6:24:b5:07:61:d3:4b:
                    61:1d:2a:3a:15:f3:cd:cb:5d:28:4c:bd:c6:c1:8a:
                    19:23:08:ce:77:5e:db:8c:bf:0e:79:78:3a:2a:47:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:12:DB:9A:35:9C:F4:C2:78:3B:27:F5:6E:8B:1C:B4:84:F4:C8
            X509v3 Authority Key Identifier:
                keyid:89:1C:68:CB:62:2D:16:29:13:FE:D2:57:10:8A:E6:F4:82:35:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/891C68CB622D162913FED257108AE6F48235EE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891C68CB622D162913FED257108AE6F48235EE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:39:d8:92:3d:40:60:df:fc:12:93:b3:ee:d5:87:af:6d:84:
         84:be:18:8a:3d:e9:a5:4d:6f:c5:d8:f5:a9:99:38:0a:d2:5b:
         7f:2c:3e:d3:7f:0e:2e:3d:7c:ff:f5:27:4d:71:64:fe:58:77:
         da:4c:66:69:83:bf:ae:95:38:12:a8:a0:40:c2:b3:46:5f:e3:
         92:89:3f:0b:b2:f8:41:b7:b8:a9:8e:ca:7a:61:b0:66:44:7c:
         21:df:0a:5b:2c:c9:e7:c9:bf:d4:34:6a:43:97:cf:2c:c8:0e:
         08:a8:dc:1d:a5:47:f4:a3:c6:ca:b7:4d:00:d6:aa:8d:be:4f:
         42:e4:80:d9:0a:da:a0:c6:39:e2:86:e5:e7:ce:67:bc:33:ae:
         ff:ff:64:8e:23:00:14:be:eb:f4:a8:1f:ad:c4:7c:51:f4:3d:
         59:09:60:97:02:6b:d9:d3:94:bf:6c:d6:47:52:de:5f:5d:87:
         0b:d0:13:d1:95:a7:f7:32:ee:fb:9f:a0:f0:e2:7b:56:b3:27:
         2d:9c:ad:42:68:76:1a:f3:c5:c3:01:50:5b:14:d4:d0:38:d3:
         26:1e:7c:5e:b4:cf:9b:82:e9:04:a1:f6:8a:c4:bf:cf:d9:ea:
         1f:2b:7a:df:e4:c6:b7:89:44:77:af:97:cd:bb:db:0f:29:d2:
         71:b4:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org