Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          rQMbybavymBXjfyXUP3iy4e0yFmkPmthaSdyW7y63pg=
Subject key identifier:   9F:37:D0:F3:D1:F4:D3:04:0B:2E:56:A1:AB:D1:44:0D:F7:23:C8:A9
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       73296517F5C0A0CB244DA188DCFD639C2B222ACA
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:41 +0000
ROA not before:           Mon 04 Mar 2024 14:51:41 +0000
ROA not after:            Mon 03 Mar 2025 14:56:41 +0000
asID:                     268248
IP address blocks:        45.236.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:29:65:17:f5:c0:a0:cb:24:4d:a1:88:dc:fd:63:9c:2b:22:2a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:41 2024 GMT
            Not After : Mar  3 14:56:41 2025 GMT
        Subject: CN=9F37D0F3D1F4D3040B2E56A1ABD1440DF723C8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:a6:dd:7b:66:62:f9:8f:6b:25:b9:ff:77:
                    19:0c:4e:9e:73:bf:b2:ce:eb:c7:85:6b:f4:ea:3a:
                    4a:29:0f:7e:54:0d:5c:3b:6f:9c:ea:70:09:55:f1:
                    44:7e:4d:30:6b:89:7f:df:72:65:d1:94:4f:ef:78:
                    ca:24:a6:32:f9:a2:de:3b:8a:60:44:46:89:1e:b9:
                    72:9f:c7:08:f5:ff:90:7f:ce:ae:f4:66:30:4a:39:
                    c4:c3:4c:8f:53:af:b9:74:98:ac:cd:11:9d:00:0c:
                    5f:36:71:9b:c2:82:67:d0:4e:f0:86:0a:6d:70:8e:
                    7a:9e:fd:db:d6:a5:fb:9b:9a:86:03:bb:d0:a1:56:
                    be:89:6e:c1:a7:47:b9:05:73:f7:bd:4e:11:6b:9f:
                    5c:d1:59:7f:38:e2:e1:e8:d6:6b:13:1d:ff:ae:3c:
                    fc:0d:f5:f0:ab:6a:c5:31:66:b1:36:4e:f6:d1:5f:
                    83:e3:be:ea:e6:16:8e:05:bb:32:03:43:b4:5c:bd:
                    ef:bb:78:98:17:69:6e:d6:d3:72:37:1a:4f:3e:1e:
                    9f:86:54:87:e9:46:1d:c6:dc:4e:87:e9:d8:86:dd:
                    b1:d8:83:a9:6e:7e:16:4a:19:60:f1:77:ae:4f:c7:
                    9e:81:f3:01:e6:c5:c5:79:44:4c:b4:2f:19:af:8d:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:37:D0:F3:D1:F4:D3:04:0B:2E:56:A1:AB:D1:44:0D:F7:23:C8:A9
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:67:61:2e:c7:17:e4:02:09:5c:4a:2e:a2:3f:c1:0d:81:b9:
         9c:17:78:8e:1f:c7:de:55:02:f8:f2:26:71:95:34:25:2d:26:
         e6:76:1e:a4:c4:54:37:93:a3:e8:42:0d:14:1a:ec:58:df:cd:
         e6:15:e9:77:11:5e:a1:42:64:8d:e9:1f:39:17:14:b7:d2:de:
         2f:4b:93:e6:56:b4:a9:87:e7:df:19:c7:06:39:80:b5:55:96:
         cf:15:0b:f8:10:01:aa:65:98:96:b8:74:1a:d6:d9:49:10:74:
         04:72:2a:60:e1:05:96:1f:c7:b2:e3:dd:17:34:c7:a1:45:60:
         ac:37:3d:4b:89:b4:ee:2f:c5:cd:e3:59:4b:0e:4a:8e:66:6a:
         2a:c4:9d:4c:dd:1d:7c:4f:01:c4:ce:41:02:e5:40:53:fc:43:
         02:af:f7:da:3f:5c:0b:d8:c9:80:b1:82:8e:7f:80:d9:8e:33:
         4e:f8:f1:18:9f:8f:c3:86:62:2b:d7:05:8b:31:23:7a:f3:0b:
         3e:e0:79:55:56:70:41:23:44:83:e1:28:76:14:ee:e3:e9:36:
         6e:8f:f0:bb:c3:e2:3b:03:32:ce:9f:88:05:d2:4a:3a:75:83:
         a6:f8:4c:4a:a0:24:85:93:29:ac:58:88:87:1d:24:1e:8e:16:
         42:28:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org