Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          6+h4KJD4LhaaTQUYaNeFpXyvMGG6uhj6/BHJcVYR6Dk=
Subject key identifier:   48:DD:2D:BD:17:C8:7F:E6:F7:17:0A:4B:31:1D:DF:5E:5F:47:5C:E0
Certificate issuer:       /CN=87E8DF4710FEF04D1C2699017140679C2B530E90
Certificate serial:       4BE07D1C695FCC05BF9B644498E466B0E8F272B0
Authority key identifier: 87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa
Signing time:             Mon 04 Mar 2024 14:56:51 +0000
ROA not before:           Mon 04 Mar 2024 14:51:51 +0000
ROA not after:            Mon 03 Mar 2025 14:56:51 +0000
asID:                     268248
IP address blocks:        45.236.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e0:7d:1c:69:5f:cc:05:bf:9b:64:44:98:e4:66:b0:e8:f2:72:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E8DF4710FEF04D1C2699017140679C2B530E90
        Validity
            Not Before: Mar  4 14:51:51 2024 GMT
            Not After : Mar  3 14:56:51 2025 GMT
        Subject: CN=48DD2DBD17C87FE6F7170A4B311DDF5E5F475CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:61:4a:dd:56:07:3d:82:6e:8b:df:e3:a0:
                    bc:c9:c4:57:7a:11:f9:4e:4a:18:af:3e:fe:92:20:
                    a1:b5:5c:5f:75:d8:be:71:10:45:d9:e4:04:ff:8e:
                    3d:0c:c6:93:0d:7e:9b:88:23:09:c3:35:68:52:e4:
                    c8:53:9b:bf:41:99:21:fe:0d:4f:a0:3f:6a:47:89:
                    46:d6:21:bd:50:19:d3:45:35:45:a2:e2:8d:7f:a9:
                    d7:1d:d6:cc:78:82:0b:d9:41:91:86:b8:ca:55:ed:
                    04:34:8a:94:38:5f:24:f3:4b:42:a4:56:d9:ae:7d:
                    41:df:7f:9c:fb:a2:ef:b4:e3:8c:5e:da:21:ec:30:
                    b6:f4:13:48:74:d2:b3:4e:33:69:fe:13:c8:f4:a3:
                    fb:d6:d1:f9:40:65:ee:19:72:59:26:b5:35:ea:eb:
                    a3:ea:2c:d3:51:3a:b0:56:b4:95:15:50:8b:ef:7e:
                    a8:ea:07:3c:90:2c:b2:e2:ba:f9:6b:58:e1:90:8a:
                    a3:03:07:4c:12:e6:c3:8d:88:71:8f:d4:91:a5:64:
                    d0:d3:77:77:62:b7:fb:99:66:dd:72:36:e0:55:17:
                    17:fe:6b:7d:f9:01:b9:17:75:59:11:18:8f:f7:da:
                    9e:12:ed:8b:c7:79:87:f4:49:f5:9e:77:ca:27:7d:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:2D:BD:17:C8:7F:E6:F7:17:0A:4B:31:1D:DF:5E:5F:47:5C:E0
            X509v3 Authority Key Identifier:
                keyid:87:E8:DF:47:10:FE:F0:4D:1C:26:99:01:71:40:67:9C:2B:53:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/87E8DF4710FEF04D1C2699017140679C2B530E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87E8DF4710FEF04D1C2699017140679C2B530E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/1/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:15:19:1e:c1:8f:8f:16:19:39:d5:f1:b6:77:91:cd:54:
         bc:6c:f0:60:c7:66:74:a7:42:6f:e4:66:a0:d1:c8:98:40:e2:
         0d:0e:36:87:6f:ff:7f:c7:5c:7e:8f:80:0a:87:73:76:bc:fa:
         85:bb:b5:86:16:ef:8a:0c:f8:8f:51:45:65:d5:35:b5:22:19:
         f1:43:ad:69:58:f9:b1:7d:2e:d5:8f:87:03:bb:e7:b6:94:5e:
         c3:32:7e:89:32:8f:8e:ec:ab:13:2f:ae:2b:6f:f9:97:3e:9a:
         22:7b:6b:a2:38:75:c1:e3:81:39:65:cf:b7:d8:e5:49:13:82:
         0a:15:8e:41:31:5b:87:62:01:81:b8:41:2a:fe:74:f5:af:9c:
         47:54:c6:49:6e:91:00:89:62:a9:e0:22:9e:13:a4:e9:2f:0b:
         e9:f1:a2:c9:e6:d5:cf:fc:9a:b3:e1:4c:16:c5:bb:6e:32:d4:
         ed:17:c8:5d:aa:87:b4:97:b3:03:77:12:9a:70:b9:b4:29:1a:
         52:13:3e:9b:7e:f9:19:e5:bb:e8:58:04:06:fe:86:31:35:72:
         0d:e0:70:54:b1:7b:24:6e:e2:ce:c1:ea:5c:30:d9:bb:b6:3d:
         ce:23:b4:94:f5:ff:b8:1a:ea:ec:52:7b:35:3a:34:88:19:53:
         4e:d6:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org