Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          gputh5WnaIt+uEISNKBdOwXlujlhfzEsWZky5cMoZb8=
Subject key identifier:   4C:70:82:9C:4C:A1:84:BB:9E:BB:6E:B4:4B:64:11:E5:03:CC:09:0E
Certificate issuer:       /CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
Certificate serial:       4B459A01423ED039C3A341DDC39BED3568DB2600
Authority key identifier: E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
Signing time:             Wed 08 Mar 2023 17:26:32 +0000
ROA not before:           Wed 08 Mar 2023 17:21:32 +0000
ROA not after:            Wed 06 Mar 2024 17:26:32 +0000
asID:                     268248
IP address blocks:        45.236.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:45:9a:01:42:3e:d0:39:c3:a3:41:dd:c3:9b:ed:35:68:db:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6025D5BEDB51E1D987E48048B962ECA66E59CD0
        Validity
            Not Before: Mar  8 17:21:32 2023 GMT
            Not After : Mar  6 17:26:32 2024 GMT
        Subject: CN=4C70829C4CA184BB9EBB6EB44B6411E503CC090E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:b9:3f:5b:36:88:c7:9b:1e:48:be:c0:51:
                    20:75:20:56:37:88:6b:9c:82:6f:0d:fa:41:54:00:
                    f3:ef:b9:17:a1:99:ad:1b:cd:75:59:fb:b0:2a:0d:
                    c2:0b:df:34:e0:91:05:52:5b:27:dc:10:bf:e5:06:
                    17:d6:0f:4f:d9:52:43:ab:94:f0:f9:89:40:b0:06:
                    23:07:2b:4d:55:92:59:f2:93:24:e8:6b:b4:cc:a9:
                    8c:42:5c:9f:d9:d1:56:c0:e5:f7:74:73:37:cb:bb:
                    f2:b4:50:1c:5f:ba:33:dd:05:88:f9:0a:da:06:c9:
                    4b:32:3b:18:14:4b:a9:60:67:71:6a:02:51:0a:b4:
                    44:d2:b7:57:09:53:34:ba:25:7d:93:38:01:41:e0:
                    0b:9c:df:fe:32:69:e3:07:58:ce:4a:b9:25:78:ad:
                    fb:f3:ff:f3:a4:5f:b2:a8:cd:93:8b:ad:72:af:55:
                    68:c3:11:9f:7f:39:fd:af:6a:f6:4a:29:6e:9b:48:
                    08:93:ce:85:9e:2e:f1:64:24:a5:a0:93:28:c3:67:
                    95:f2:9a:73:22:68:d2:6b:89:e7:76:ec:12:ac:0b:
                    36:86:0c:61:d0:cd:d9:5b:fa:19:4c:42:23:12:3b:
                    fc:4f:e3:e5:85:3e:46:99:91:99:f2:47:9f:0f:6b:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:70:82:9C:4C:A1:84:BB:9E:BB:6E:B4:4B:64:11:E5:03:CC:09:0E
            X509v3 Authority Key Identifier:
                keyid:E6:02:5D:5B:ED:B5:1E:1D:98:7E:48:04:8B:96:2E:CA:66:E5:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6025D5BEDB51E1D987E48048B962ECA66E59CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:c6:f1:a1:08:8c:2b:a3:9b:72:93:fa:ae:fd:bd:1d:8c:
         14:6c:e5:c5:35:76:e9:7c:ff:c1:c5:2a:6e:01:0b:f4:66:9d:
         a9:d7:91:0e:a5:39:ce:32:ee:0d:ad:d8:50:bf:0c:47:d4:88:
         ae:58:e6:71:3e:41:2c:03:85:f9:a5:2f:7d:dc:47:f5:12:3c:
         a9:10:90:f8:31:37:33:70:ef:0e:08:be:e3:84:e8:92:b3:ac:
         dd:1e:fd:7e:dc:70:d7:d9:55:1b:6f:1e:7b:10:3f:23:b3:e3:
         aa:88:84:9e:e8:b7:40:c7:24:f5:8a:d2:07:7f:b7:57:1d:db:
         54:88:94:90:89:98:a5:16:f1:c0:55:43:68:83:9c:94:a3:01:
         d0:e4:e9:b9:cc:80:93:01:e9:37:a8:7e:0e:19:4f:49:15:92:
         e7:d6:34:63:18:c7:69:4f:9b:0b:4d:17:57:ea:a4:17:03:35:
         b2:89:bd:2a:eb:2b:6d:01:7b:4a:b6:ea:c0:6d:a0:57:ab:14:
         ba:44:9a:9e:dd:14:3f:9e:25:12:43:69:c8:a0:02:03:a8:26:
         6f:d0:41:91:b5:07:5a:87:4c:2d:09:df:24:41:e4:e9:84:c8:
         6a:3a:df:12:51:7c:25:c4:cd:fa:9d:5b:5e:d4:09:4d:f5:73:
         52:d2:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org