Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa (raw, json)
Hash identifier:          zrOp7YpWUXsmtNUMLdRGlV+6vpVG+zdSfxauqBam/7U=
Subject key identifier:   B6:88:A7:2B:C8:94:97:AF:D5:43:0E:5B:CC:06:BE:14:EA:26:31:4F
Certificate issuer:       /CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
Certificate serial:       034213B5571E7AE03E219225707284C5B5491E4C
Authority key identifier: E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa
Signing time:             Wed 08 Mar 2023 17:26:06 +0000
ROA not before:           Wed 08 Mar 2023 17:21:06 +0000
ROA not after:            Wed 06 Mar 2024 17:26:06 +0000
asID:                     268248
IP address blocks:        45.236.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:42:13:b5:57:1e:7a:e0:3e:21:92:25:70:72:84:c5:b5:49:1e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
        Validity
            Not Before: Mar  8 17:21:06 2023 GMT
            Not After : Mar  6 17:26:06 2024 GMT
        Subject: CN=B688A72BC89497AFD5430E5BCC06BE14EA26314F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:c3:0b:0b:81:f6:99:c3:0a:77:00:40:7c:
                    cd:7f:55:29:56:18:5a:5c:8f:ad:51:17:1f:82:39:
                    2f:2c:9b:4e:dd:52:ed:77:4f:c1:1a:3e:c3:78:8c:
                    4f:1c:4d:d7:d3:12:50:a6:78:e3:59:9d:51:4c:cf:
                    29:dd:45:61:55:9a:c7:fe:a4:f0:92:22:fa:91:40:
                    b3:21:64:3d:f2:97:6f:24:cb:ce:d1:4e:b6:85:32:
                    24:ab:01:a6:ec:ac:ac:b3:f1:93:45:2d:fa:eb:9b:
                    47:da:cc:cb:ab:ed:54:c1:ac:c7:6e:bd:af:8e:8d:
                    f8:5d:26:90:62:e8:79:02:58:88:d1:36:1e:28:ce:
                    75:52:7e:80:7f:aa:b2:6f:5c:a9:e4:00:44:27:60:
                    9b:79:59:b1:76:e3:87:a5:61:44:ff:aa:ac:59:48:
                    d0:02:24:99:09:5b:34:2a:7e:29:a4:2a:09:7b:cb:
                    3e:f6:90:47:f3:8b:31:48:d6:3d:39:95:4b:8e:c4:
                    dd:64:b7:01:09:5b:0f:f6:99:4d:22:0a:c9:1d:da:
                    00:25:9c:a1:52:ef:41:3f:eb:1b:f0:d4:52:41:e3:
                    d6:27:e8:41:db:45:6c:e8:df:9b:71:48:f5:9f:68:
                    a8:34:45:f3:c6:08:9f:50:ac:d2:14:02:00:2a:5a:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:88:A7:2B:C8:94:97:AF:D5:43:0E:5B:CC:06:BE:14:EA:26:31:4F
            X509v3 Authority Key Identifier:
                keyid:E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:7c:c1:ff:ab:ce:14:4f:d2:6d:68:3c:13:72:4f:b9:f4:e9:
         81:c5:d8:67:b1:4d:2c:70:ad:5c:3e:5c:5d:3f:f2:7d:36:b9:
         48:3d:88:f9:47:e4:9c:3f:1b:d9:ad:28:8e:00:94:c0:49:86:
         01:c1:8c:4b:22:d8:18:54:1a:e8:92:4f:8e:3e:1c:29:76:95:
         70:a9:09:b9:e7:7c:d1:f4:cd:af:89:4b:13:b7:59:d8:c9:f8:
         41:ae:fe:d9:46:70:01:ac:33:7c:c1:4f:d6:0d:4d:2a:e5:2c:
         b1:b1:13:d6:11:6f:40:ab:1e:ae:ba:d6:56:92:5f:be:0f:dc:
         cf:61:83:83:17:5b:07:45:6a:95:df:fe:2e:37:96:f8:da:e8:
         17:bb:8a:c7:86:2e:34:98:b0:35:af:49:9c:cb:64:bd:25:4e:
         02:82:96:74:db:dd:12:2d:8a:ed:da:e6:4e:d3:53:df:0a:c4:
         c6:66:50:79:ec:a8:75:50:58:ad:25:88:b0:c4:5a:1b:a7:3a:
         71:9e:4d:33:70:1c:37:86:97:ae:55:b4:ac:68:6a:e7:7b:01:
         c0:ec:2a:e7:8f:fb:ad:50:ab:48:08:2f:64:a7:ab:23:b2:90:
         04:f3:5c:a0:61:e4:57:9c:66:3f:7d:43:b3:4c:eb:4d:78:cc:
         c5:06:c5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org