Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa (raw, json)
Hash identifier:          FAy3IKqbQ0pNCA8DQjhLIKd68HZQ4rN49MN+UaU2AxA=
Subject key identifier:   C0:55:38:0A:F9:F0:8B:65:DD:B6:3F:80:C0:CF:E7:2F:D0:E1:4F:78
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       3CB20BC53B7A48B17632F84E1A1FF38321409351
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:43 +0000
ROA not before:           Mon 04 Mar 2024 14:51:43 +0000
ROA not after:            Mon 03 Mar 2025 14:56:43 +0000
asID:                     268248
IP address blocks:        45.236.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b2:0b:c5:3b:7a:48:b1:76:32:f8:4e:1a:1f:f3:83:21:40:93:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:43 2024 GMT
            Not After : Mar  3 14:56:43 2025 GMT
        Subject: CN=C055380AF9F08B65DDB63F80C0CFE72FD0E14F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:fc:05:10:79:2e:7a:4b:91:c1:c4:80:b2:
                    cf:7f:b2:4d:47:de:02:67:d7:8f:53:73:79:62:42:
                    bc:2f:78:f9:4c:cb:3c:33:fd:a3:f5:86:77:41:fc:
                    37:72:f7:ad:55:54:d8:fc:6b:8a:69:17:82:0e:94:
                    41:c6:05:f3:d3:ae:9f:ff:c4:38:0d:e4:ec:ef:8c:
                    d7:05:f7:14:c7:be:b5:fc:e5:06:26:cc:94:3d:e7:
                    73:0a:bb:b0:a4:28:96:dd:9e:1e:b5:90:ea:13:af:
                    cf:a3:7b:1b:38:7d:88:4f:41:39:9c:65:7a:c4:6f:
                    35:0e:2c:38:f0:0c:3b:36:d1:af:9b:18:f6:8e:b9:
                    24:d2:2c:1d:1a:1b:e3:de:e6:2c:b0:2d:e6:2e:8e:
                    bd:6f:e7:10:9e:18:d7:b6:2b:3a:6b:24:2b:08:83:
                    08:93:fa:75:35:2a:ce:49:41:d4:db:de:ac:6e:4c:
                    5f:00:53:1a:5d:6c:41:0b:b0:f4:ff:ed:6b:b6:f1:
                    96:bb:c1:43:a9:b5:f2:e3:ed:d3:be:3b:c4:42:80:
                    27:fe:a6:0c:f1:5a:8d:0e:b6:16:e1:61:2f:d2:73:
                    b6:ad:70:92:85:f4:d5:4f:89:c1:71:bf:34:76:f7:
                    e8:aa:68:f1:95:ea:c2:b0:15:b7:3d:a4:a2:47:2c:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:55:38:0A:F9:F0:8B:65:DD:B6:3F:80:C0:CF:E7:2F:D0:E1:4F:78
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32332d3233203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:00:a4:3c:0d:67:7d:18:9a:13:a8:73:71:53:80:b1:cd:60:
         f5:13:29:a3:d2:28:6d:d6:1e:5a:ad:30:37:eb:16:da:52:71:
         f9:93:98:89:ed:5d:3c:e4:45:aa:c5:c3:93:42:05:61:74:43:
         61:38:4b:d2:c2:ad:09:d9:40:5d:49:d6:4f:59:6a:bb:55:bb:
         cc:a0:aa:77:42:26:6b:cf:74:90:d9:da:f6:be:b1:f0:5a:84:
         5c:a7:ac:e7:9f:3e:99:d7:2d:4d:3b:1f:c4:38:8c:cf:af:3d:
         5c:1f:78:9f:22:86:78:9d:47:99:8a:12:e9:b8:3c:ac:3b:32:
         fa:8d:f6:0c:55:dc:04:a3:c6:14:f4:a5:5d:63:e8:03:bb:28:
         cc:5c:0d:c9:0b:ec:7e:86:1f:77:c6:44:31:89:89:d4:56:e9:
         a8:51:15:f2:39:b0:38:09:64:1b:28:dd:fe:b0:62:8d:be:c9:
         ad:6d:48:1a:10:80:06:95:f4:72:94:83:a0:49:0c:c6:bc:ae:
         4b:29:35:ea:10:ab:95:e0:cd:fc:11:73:fe:f3:8c:e0:75:69:
         08:3f:74:16:cb:48:09:e6:c9:62:dd:5c:4f:14:7f:ac:32:7c:
         99:a4:dd:a9:bd:07:ef:8b:84:18:bb:e7:f4:e4:e7:44:fe:09:
         25:03:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org