Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234392e302f32342d3236203d3e20323638323937.roa
File:                     34352e3233372e3234392e302f32342d3236203d3e20323638323937.roa (raw, json)
Hash identifier:          vAxh5WSACk2CbIpW+svB6PpVpm1cv7Ba+Fy2+oF38oA=
Subject key identifier:   BC:8B:9B:4C:3F:96:29:6B:08:5A:F6:EF:3C:35:92:8D:97:2D:9C:93
Certificate issuer:       /CN=72BC372F46669AA2811D1520F98C72B60CCC31D4
Certificate serial:       3A2B6ABD47BBF0745ECDECDEAB87B50F315855EA
Authority key identifier: 72:BC:37:2F:46:66:9A:A2:81:1D:15:20:F9:8C:72:B6:0C:CC:31:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234392e302f32342d3236203d3e20323638323937.roa
Signing time:             Mon 11 Mar 2024 12:19:45 +0000
ROA not before:           Mon 11 Mar 2024 12:14:45 +0000
ROA not after:            Mon 10 Mar 2025 12:19:45 +0000
asID:                     268297
IP address blocks:        45.237.249.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2b:6a:bd:47:bb:f0:74:5e:cd:ec:de:ab:87:b5:0f:31:58:55:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72BC372F46669AA2811D1520F98C72B60CCC31D4
        Validity
            Not Before: Mar 11 12:14:45 2024 GMT
            Not After : Mar 10 12:19:45 2025 GMT
        Subject: CN=BC8B9B4C3F96296B085AF6EF3C35928D972D9C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:3e:8e:1d:d1:fd:17:2f:2e:99:e8:71:bd:
                    5e:56:11:74:99:9d:6d:66:93:c7:33:be:d5:85:c5:
                    78:7c:f9:4f:84:b1:62:09:a1:ba:28:e2:0e:97:ed:
                    a5:ed:cc:33:e3:33:4b:ea:a8:8c:51:97:27:0f:56:
                    6c:a3:b0:a3:e2:3b:fd:63:50:0f:95:d1:bb:0d:5e:
                    82:92:d1:ea:d5:94:d7:c4:fc:4b:a8:c1:ff:67:9c:
                    8b:c1:9f:2c:a1:92:13:cc:1d:33:9b:01:87:71:96:
                    d2:4b:3e:fe:53:4f:93:0f:2e:1d:a6:e9:6a:f2:eb:
                    0d:ff:76:9c:3c:f6:97:7f:2c:bb:c0:10:01:7b:2a:
                    45:de:d3:37:64:68:4a:92:4a:a0:da:af:f9:ba:bb:
                    93:b7:be:83:89:a7:97:ea:63:aa:2b:6a:e4:88:1a:
                    15:7a:40:03:94:53:42:e9:d8:4e:49:bb:72:c2:c1:
                    70:7f:dd:9e:47:b8:e3:90:dc:f6:9c:4c:7f:a1:cd:
                    6f:37:68:97:1f:64:82:b5:4e:b6:4a:c7:c9:03:8a:
                    2f:69:cd:67:12:ba:f6:40:92:cc:02:4f:dc:8e:97:
                    19:92:6c:5e:ff:c7:9f:59:66:fd:a5:24:ca:a5:33:
                    64:96:14:84:75:1d:ef:f3:28:bf:63:50:40:65:4c:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8B:9B:4C:3F:96:29:6B:08:5A:F6:EF:3C:35:92:8D:97:2D:9C:93
            X509v3 Authority Key Identifier:
                keyid:72:BC:37:2F:46:66:9A:A2:81:1D:15:20:F9:8C:72:B6:0C:CC:31:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234392e302f32342d3236203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:d7:76:a6:51:c3:a4:04:0a:ca:5d:a6:7c:29:bf:1e:4d:
         98:94:95:b3:7b:a2:4b:89:5c:c0:d5:c6:eb:e4:93:b2:00:58:
         c9:f3:f6:22:1c:ef:c8:f1:e0:c5:9d:45:a4:4c:40:27:f9:14:
         05:c5:bf:ba:f8:0b:15:53:ee:f2:41:e6:2c:40:1d:30:1d:32:
         81:ef:ec:63:49:77:39:b9:c6:24:d0:d2:25:4f:8b:b0:65:b7:
         bd:3f:3d:f1:5d:34:43:a1:d4:f0:43:e8:b5:36:64:30:9b:c7:
         d9:74:a3:82:f3:b5:68:bb:35:05:57:bb:d5:1c:f7:76:f2:30:
         d6:f9:a2:15:57:cc:3d:6a:ab:5b:65:ac:34:33:22:22:ef:65:
         35:cc:58:7b:21:08:b1:e9:89:6e:1d:1e:75:a9:ee:11:c0:aa:
         bf:30:e8:12:bc:ae:c4:ae:7e:f8:1b:95:19:bc:4d:25:fc:0a:
         5d:2b:0d:d0:89:66:70:57:f7:bd:aa:a0:1b:2a:f4:66:a0:bd:
         2e:68:f3:83:7d:e0:dc:d2:58:1e:82:7d:7f:5c:c9:d4:a6:c1:
         4c:75:f2:8d:97:90:ea:2e:1a:69:a2:2a:e6:91:2a:21:d7:01:
         aa:24:dd:e4:9f:9c:5a:1b:c0:4c:00:8c:12:f2:e1:d6:e5:23:
         27:b1:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org