Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          SHr3FVzVng+QwjSHIr1gERO5AT/lvZ3Jmxfe0h4kg8E=
Subject key identifier:   ED:94:B0:30:AB:E9:7A:32:AC:80:4F:42:0A:77:FC:DD:EC:28:99:93
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       125D4CE0897E9CB7802A4B78C4A74EA15B54C502
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:15 +0000
ROA not before:           Thu 04 Apr 2024 07:09:15 +0000
ROA not after:            Thu 03 Apr 2025 07:14:15 +0000
asID:                     268248
IP address blocks:        45.236.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5d:4c:e0:89:7e:9c:b7:80:2a:4b:78:c4:a7:4e:a1:5b:54:c5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:15 2024 GMT
            Not After : Apr  3 07:14:15 2025 GMT
        Subject: CN=ED94B030ABE97A32AC804F420A77FCDDEC289993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:14:3a:b5:20:96:bc:09:e4:41:2c:3d:cf:
                    b2:cf:5b:88:c4:37:ab:4c:90:8b:63:f0:0e:80:8c:
                    f0:8a:87:46:a4:a4:7a:27:dc:6a:15:ac:c7:7c:1c:
                    8e:fc:fd:07:1c:ab:0f:84:f0:a7:23:b6:c1:6b:5c:
                    c6:fa:b2:c2:7a:43:33:8d:29:cb:55:5c:e2:2a:f1:
                    dd:eb:bd:bb:c2:83:1c:28:1b:aa:0a:26:ac:a5:ab:
                    16:ab:be:d7:cd:bc:03:da:be:91:a8:64:43:72:63:
                    37:e2:2b:f2:7f:75:1d:67:c7:19:36:76:70:28:9c:
                    01:64:3d:2a:b6:d4:4c:26:9b:c4:27:fd:4e:ae:77:
                    98:c6:48:2a:00:5c:e0:87:fb:1f:24:74:fa:c9:de:
                    d5:5d:66:ee:20:10:02:59:9b:01:37:59:5d:3d:13:
                    53:c0:45:1f:93:79:f7:cc:b7:c2:4e:2d:e0:f1:d9:
                    79:84:52:02:3f:d2:f9:9e:cc:82:19:32:70:34:dc:
                    3d:e5:57:8c:89:56:01:dc:54:64:7a:43:f2:4d:7c:
                    b2:76:fa:01:bb:06:c9:51:33:df:30:fe:b0:6d:49:
                    7a:a2:89:86:a4:cc:85:a8:08:3e:e3:b4:f6:ec:19:
                    b7:9c:ae:1a:a4:0d:bf:75:fa:27:ad:65:da:56:a6:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:94:B0:30:AB:E9:7A:32:AC:80:4F:42:0A:77:FC:DD:EC:28:99:93
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:4d:01:06:21:e0:5c:58:2d:73:fd:39:91:11:19:5b:3a:
         9d:fe:4f:75:69:68:20:ca:8a:96:54:64:9d:9f:10:41:d6:07:
         74:86:73:8f:d2:d5:6d:f3:70:98:21:b6:ac:4b:2f:1d:f3:80:
         70:92:80:dc:4f:09:22:bd:8e:f3:2d:c6:a6:fe:be:20:cd:88:
         9d:f0:2f:71:28:2a:8c:99:87:a0:cb:d4:3c:43:8a:93:19:e4:
         a9:cc:be:c5:8b:13:38:2e:6c:59:dc:20:cb:d4:d2:c5:74:48:
         a9:f1:78:2d:63:e1:96:65:1d:c3:58:f7:04:e2:7f:7a:47:cf:
         85:18:03:26:3e:bd:fb:00:19:aa:ec:64:aa:28:62:7b:b6:e3:
         f4:b0:f3:f8:7b:b7:df:ff:26:88:54:8b:4a:a5:c1:0f:b2:18:
         5e:11:c1:f3:c2:c6:01:31:dc:58:b2:12:a7:c9:ee:4c:9b:06:
         91:7c:c1:97:ed:bb:ef:28:ee:0f:53:4d:a1:75:d8:9b:78:15:
         76:e4:ef:fc:cd:d3:0e:52:11:29:2b:11:3b:d7:64:70:ce:45:
         ee:ea:13:41:51:3e:f7:85:e0:d7:96:d8:1e:b7:23:06:93:bf:
         90:d5:c2:01:f4:04:35:c2:63:c9:b6:63:07:0d:a1:15:b8:d4:
         49:76:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org