Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          W7aaQXMntNZ5e1H2SOPZ1/OzAy9mpeGcghBT0kpD3tY=
Subject key identifier:   34:0A:CB:D1:58:71:2C:FD:33:C2:B1:DF:8D:6E:FB:5A:AB:88:E0:B3
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       63E964E214DC16BEBE7F47F26C79F3BD07081C9E
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:14 +0000
ROA not before:           Thu 04 Apr 2024 07:09:14 +0000
ROA not after:            Thu 03 Apr 2025 07:14:14 +0000
asID:                     268248
IP address blocks:        45.236.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e9:64:e2:14:dc:16:be:be:7f:47:f2:6c:79:f3:bd:07:08:1c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:14 2024 GMT
            Not After : Apr  3 07:14:14 2025 GMT
        Subject: CN=340ACBD158712CFD33C2B1DF8D6EFB5AAB88E0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:c9:4a:e4:8d:7a:c4:69:19:1e:31:c6:ed:
                    16:65:1e:27:69:71:12:af:07:7c:2f:54:64:3d:4f:
                    ca:36:32:15:05:bc:a0:9f:7f:56:a8:3b:e5:e7:95:
                    f5:f0:79:00:34:55:50:a8:04:7c:e7:6d:a7:65:dd:
                    a0:74:3c:43:36:cd:ea:a8:ba:65:13:a8:c5:3a:8e:
                    64:e8:e6:1a:f2:50:da:12:4a:dc:bf:dd:39:7f:16:
                    1d:c6:97:eb:79:dd:3d:4e:d1:a7:37:05:3e:25:3c:
                    e2:cd:5f:a3:d5:6b:97:39:e3:da:35:58:33:59:cd:
                    6c:45:1d:f8:93:77:73:75:f4:fc:e5:0a:c7:bf:4e:
                    24:c5:ad:4d:28:f0:ef:09:ad:a5:29:e5:57:24:95:
                    08:34:4a:cf:b0:7b:6d:17:3e:dd:dc:c5:67:60:24:
                    28:83:42:53:f6:29:83:a6:74:c1:5e:26:ae:fc:a8:
                    46:3a:ae:4e:b3:d7:79:59:d3:3a:6e:3f:e4:f4:4e:
                    00:ea:61:18:23:c7:53:b3:ea:46:89:bd:f7:4f:99:
                    33:25:b8:94:a9:24:98:7e:7d:91:f6:d8:da:80:76:
                    c8:0d:5b:0a:6e:97:11:a9:91:db:a8:a6:0c:ba:23:
                    b6:70:c5:11:47:f8:b4:97:d5:dc:80:e8:48:33:b5:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0A:CB:D1:58:71:2C:FD:33:C2:B1:DF:8D:6E:FB:5A:AB:88:E0:B3
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:0d:f4:18:97:ad:fa:f3:cf:9a:a3:f4:aa:75:6c:eb:69:
         9d:02:bb:36:b2:ab:f1:b7:e4:ab:20:1f:69:f4:de:f3:9d:36:
         22:93:b1:1c:eb:78:66:ee:f2:78:1f:b2:51:bc:d8:2a:9b:e3:
         76:b8:aa:75:62:21:0d:79:cb:3e:61:2e:a4:c0:23:e0:60:31:
         44:8c:e9:2c:27:a8:73:88:87:ee:b4:01:b5:3d:ae:0e:24:8f:
         8e:2c:cd:70:f6:51:cd:98:dd:98:5a:5d:c0:bf:b7:58:6f:1d:
         3d:fe:66:3d:78:6d:a0:e4:8e:bd:34:a9:9b:1d:1a:7a:a8:a1:
         a1:7c:9e:12:e4:42:49:47:43:02:bd:e6:91:ff:6a:99:d7:42:
         77:9c:64:9d:21:6d:37:28:87:05:d9:b8:57:70:99:b3:2a:24:
         9d:87:74:3e:71:6d:72:d8:5f:c8:c6:7b:88:51:0d:5b:9f:af:
         93:46:3d:9d:bc:b1:e9:e6:e4:5b:29:2a:01:04:47:10:79:2d:
         2a:8d:26:d2:3c:b1:fe:17:b9:c9:ad:a7:5e:6d:de:23:19:89:
         48:c6:83:a3:3a:30:70:e9:35:86:4c:73:3f:ae:75:cd:19:c1:
         6a:fc:66:7a:35:bb:23:8c:c4:d4:18:e1:09:c1:01:02:6a:b1:
         3e:7a:69:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org