Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32322d3232203d3e20323638323937.roa
File:                     34352e3233372e3234382e302f32322d3232203d3e20323638323937.roa (raw, json)
Hash identifier:          K88eHF+1wyDJrguoygst3IB3ghEy4mgLp9yoRMySN1A=
Subject key identifier:   0E:71:BC:5D:1E:D9:A1:69:C7:65:D3:CB:DA:E1:86:27:96:32:00:0D
Certificate issuer:       /CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
Certificate serial:       0760225496947E7F5F1671F2002CBC18D3A3B1E9
Authority key identifier: 90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32322d3232203d3e20323638323937.roa
Signing time:             Tue 05 Dec 2023 15:44:39 +0000
ROA not before:           Tue 05 Dec 2023 15:39:39 +0000
ROA not after:            Tue 03 Dec 2024 15:44:39 +0000
asID:                     268297
IP address blocks:        45.237.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:60:22:54:96:94:7e:7f:5f:16:71:f2:00:2c:bc:18:d3:a3:b1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
        Validity
            Not Before: Dec  5 15:39:39 2023 GMT
            Not After : Dec  3 15:44:39 2024 GMT
        Subject: CN=0E71BC5D1ED9A169C765D3CBDAE186279632000D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:2b:b6:96:04:f9:5f:a6:bf:88:a3:f5:62:
                    44:f6:df:8a:18:57:68:e1:af:ce:53:6c:27:23:6a:
                    34:c4:1f:02:a1:a2:0e:13:ae:85:24:4f:4d:29:3c:
                    24:be:7e:35:d9:7f:e1:13:d6:d8:ab:92:92:d7:82:
                    8c:69:b2:d8:ea:00:da:7b:79:66:4d:c2:60:8f:8e:
                    b2:eb:a0:d8:7e:8f:94:e8:20:3f:cd:2a:6f:e7:b2:
                    81:cd:99:3c:86:2a:a0:69:f2:b5:3a:3d:a9:bb:90:
                    55:4c:05:c7:c4:b7:bc:1f:99:c2:c0:e3:c2:c3:32:
                    ad:87:4c:dd:52:ab:28:da:0d:a5:52:ba:6a:d1:c7:
                    42:91:35:46:a2:e4:4a:28:7e:39:ba:1f:53:ca:b5:
                    67:90:96:82:8c:c8:ab:76:57:d7:10:11:00:67:44:
                    1a:60:0e:ed:ea:d8:ae:8d:c1:6f:0b:31:0d:4a:e2:
                    ea:b0:74:17:55:95:69:8f:5c:95:ca:09:05:58:df:
                    12:a3:88:52:c4:cc:89:f6:db:6f:68:cd:61:42:d7:
                    7d:b3:07:ea:e2:2f:91:e0:b2:f9:0f:0d:8f:3f:6f:
                    08:f5:2b:d3:f9:61:fe:f1:d7:68:37:31:48:e7:1c:
                    28:ce:3a:22:20:bc:e5:5e:a0:17:16:11:15:95:88:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:BC:5D:1E:D9:A1:69:C7:65:D3:CB:DA:E1:86:27:96:32:00:0D
            X509v3 Authority Key Identifier:
                keyid:90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32322d3232203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:3a:29:fe:5b:b3:c6:60:b1:8c:92:8d:ef:b6:87:1d:d9:c1:
         e7:30:7a:6e:f2:b4:87:bd:83:da:f4:11:37:11:3e:e8:82:15:
         d5:ca:88:95:2a:99:16:ad:72:19:dc:3c:87:8f:c4:ab:7e:aa:
         85:06:4c:6e:9d:75:02:a3:43:ad:c8:b1:0c:45:28:bc:3f:9b:
         71:c7:7f:ea:08:af:98:68:cc:33:a4:c6:b8:e3:e3:73:db:de:
         21:49:4c:8f:50:d5:3a:ab:d2:be:16:87:bc:7b:7f:56:1c:19:
         d4:01:2a:bb:e3:9f:9c:35:c1:4f:d2:5e:13:ee:f3:f3:07:25:
         8f:1f:00:9a:4c:da:ec:05:f0:ad:6b:4b:bf:7c:0f:2c:ed:2a:
         11:75:f8:4c:d3:08:ca:e4:df:5d:3e:98:7a:9d:0d:79:e0:d9:
         bc:b4:8c:e1:d0:4b:6e:eb:5b:d6:9e:90:33:2a:97:e9:4a:03:
         25:be:2c:a9:90:fc:21:e4:78:09:88:7d:d0:5d:50:36:a7:55:
         10:a4:c0:af:68:c3:dd:0b:d5:ce:e9:ed:95:5a:18:6a:c0:ce:
         ee:25:e2:0a:63:43:6a:01:17:53:1a:00:71:74:b5:5a:22:1a:
         e4:7c:76:d3:6e:c6:77:e5:de:9f:46:2e:70:7c:87:2e:56:99:
         9a:ad:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org