Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232322e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232322e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          ZVG92FARL39PzK37VleIDDtfiYJLSgTpiysY8eiY9Bs=
Subject key identifier:   8C:D1:B8:18:42:E8:E3:71:9E:EB:A9:56:0C:77:02:BB:92:50:8F:54
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       3CD27592470512382BC1C2218CF6D0336F1129AC
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232322e302f32342d3234203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:49 +0000
ROA not before:           Mon 04 Mar 2024 14:51:49 +0000
ROA not after:            Mon 03 Mar 2025 14:56:49 +0000
asID:                     268248
IP address blocks:        45.236.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d2:75:92:47:05:12:38:2b:c1:c2:21:8c:f6:d0:33:6f:11:29:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:49 2024 GMT
            Not After : Mar  3 14:56:49 2025 GMT
        Subject: CN=8CD1B81842E8E3719EEBA9560C7702BB92508F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:41:2e:d9:ec:ca:ed:40:a6:da:ba:d0:98:
                    1c:f3:c2:9f:8c:0c:1a:ac:f6:d2:cb:6f:6e:23:37:
                    cb:67:9d:80:44:02:2f:13:92:01:b5:9c:49:4d:39:
                    ac:7e:88:f9:8a:be:02:2b:4b:75:b6:38:e8:ec:e1:
                    37:2f:54:43:03:2f:64:8d:fe:f7:4e:b9:06:87:cc:
                    af:a4:0f:c1:c7:bf:bd:17:a2:e2:ba:57:2d:60:1b:
                    91:e3:6a:19:d7:4e:53:c6:b7:ed:d0:86:25:a7:72:
                    96:08:e8:a9:80:8b:fa:43:19:30:5c:b9:37:4b:30:
                    ac:27:80:9e:c3:00:2c:68:eb:fc:33:e9:8c:49:4e:
                    d9:55:ef:8c:11:31:81:10:3e:24:2f:9a:73:68:c0:
                    63:15:f5:a5:57:c2:b0:00:3c:7a:70:2d:a5:59:2e:
                    9a:f5:4d:9b:07:bb:6a:19:b7:5c:a0:c0:e8:77:9f:
                    73:db:cb:55:b9:f6:48:72:e1:31:71:3a:58:7e:b9:
                    7e:9c:35:50:7a:6a:6a:ab:a2:89:15:b0:c2:ca:14:
                    4f:55:07:08:1b:e3:41:f6:4d:b6:2f:93:52:f7:af:
                    40:f1:cf:61:f0:4c:67:49:91:a9:b3:72:74:ee:e0:
                    a1:7e:2b:bb:0a:68:0f:86:1b:24:3b:f2:94:93:3f:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D1:B8:18:42:E8:E3:71:9E:EB:A9:56:0C:77:02:BB:92:50:8F:54
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232322e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:6e:58:f8:bd:da:53:54:87:d9:05:39:dd:d1:67:19:6d:
         5e:0c:73:65:b3:fa:f8:7c:0c:c1:cc:15:53:4c:43:ed:44:ce:
         87:9e:b9:e6:4b:51:f2:68:62:82:18:b5:ef:25:54:30:db:6f:
         9c:de:55:7d:58:bf:20:8c:ac:ab:a0:3c:18:a0:f0:92:4e:f3:
         5d:ff:d6:b7:e5:2c:42:14:00:c5:29:0c:c1:19:7e:0e:5e:7f:
         9d:63:7e:8e:46:a4:36:b0:47:36:72:9d:e4:e7:a2:f9:60:00:
         e1:0f:f8:cd:39:3c:7c:10:be:23:04:4c:2b:21:c8:5a:20:6a:
         a0:cb:bc:e9:86:71:c1:56:42:07:b7:ea:58:39:93:b5:a3:d9:
         8d:e7:e9:a0:f0:36:91:d4:a1:56:bb:aa:4f:88:f5:3c:33:fc:
         b1:d9:60:fd:3d:a6:17:87:dd:cb:12:20:85:00:e3:3f:38:9c:
         22:5f:5a:98:84:02:d1:10:6e:35:63:03:e5:c9:13:d7:5c:be:
         e6:b0:66:c1:18:f2:6b:95:d5:3a:67:e8:10:1b:13:ae:45:d9:
         e0:7d:83:60:d6:56:4b:68:b9:3c:3a:1d:a9:a3:e0:32:4c:5e:
         f0:53:70:aa:0f:2c:93:e2:a7:3c:47:29:9e:f0:12:00:f3:d5:
         75:89:3e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org