Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232322e302f32332d3233203d3e20323638323438.roa
File:                     34352e3233362e3232322e302f32332d3233203d3e20323638323438.roa (raw, json)
Hash identifier:          IZtk7hGWLL12gLrhSlk83nf676Rwbbn8JWhFQfszrvU=
Subject key identifier:   BD:B2:48:8D:76:33:90:F4:0B:AE:4F:1A:1B:D4:46:FD:77:4B:C1:42
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       1EF39AB282B9E0AFC487FBBC0AB064FFDD48F6E8
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232322e302f32332d3233203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:13 +0000
ROA not before:           Thu 04 Apr 2024 07:09:13 +0000
ROA not after:            Thu 03 Apr 2025 07:14:13 +0000
asID:                     268248
IP address blocks:        45.236.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f3:9a:b2:82:b9:e0:af:c4:87:fb:bc:0a:b0:64:ff:dd:48:f6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:13 2024 GMT
            Not After : Apr  3 07:14:13 2025 GMT
        Subject: CN=BDB2488D763390F40BAE4F1A1BD446FD774BC142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:c6:00:a8:29:0c:94:11:41:e7:03:da:3a:
                    af:57:29:8b:76:b6:3f:db:1f:ff:08:89:0a:c7:42:
                    c3:1e:91:ad:06:ce:9c:31:96:77:1a:21:ee:0a:0f:
                    f8:fd:e2:23:ac:75:17:1f:a7:a6:fa:47:83:c8:97:
                    7b:4f:d4:3d:25:45:7a:6a:1e:c7:92:13:1a:2e:d9:
                    07:99:90:87:57:53:0d:c4:bd:a5:c0:7e:ff:29:bc:
                    19:4c:13:fc:95:d4:b5:4f:d9:d7:d1:d3:a0:16:09:
                    b4:5a:f0:f7:2d:c7:67:f5:91:a1:91:20:30:e3:5b:
                    85:04:31:51:27:6b:2e:fb:60:12:d1:ec:d6:c1:4a:
                    01:03:1f:19:94:15:72:50:a8:6e:03:a4:a8:d2:c5:
                    92:f3:43:9a:07:bc:ac:35:94:f1:76:42:36:1c:3c:
                    f3:ba:65:ae:51:ee:21:aa:60:4c:42:c0:d0:f8:a3:
                    64:e8:30:41:ba:1b:19:27:d4:2d:96:16:50:f9:50:
                    f6:66:41:96:83:1c:6f:18:b4:f4:37:33:31:a4:5b:
                    35:11:5a:ac:4e:a6:1d:1b:ea:7a:83:40:bb:42:f3:
                    80:5d:4b:28:0b:4a:47:a3:29:04:13:2a:f1:19:01:
                    b4:41:1d:58:7a:9f:de:80:3f:17:53:c3:ff:3a:84:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B2:48:8D:76:33:90:F4:0B:AE:4F:1A:1B:D4:46:FD:77:4B:C1:42
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/34352e3233362e3232322e302f32332d3233203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:47:bc:2f:e7:39:54:fc:08:34:4c:ec:26:e8:a3:0c:77:
         b4:4d:71:cb:c7:70:bd:dd:70:18:b2:2c:3f:89:74:85:04:ac:
         08:10:06:58:59:8d:2b:d2:2b:b1:13:1f:fa:e8:01:fc:ec:5d:
         79:a7:18:8b:d5:2e:f8:10:3c:70:f3:5d:2b:4b:bd:d9:a9:2a:
         91:56:cc:82:a2:c0:c0:b7:7a:5e:cc:a6:82:9c:23:e3:dd:28:
         ba:2e:aa:17:76:74:40:b4:ca:78:42:50:ff:36:1d:8d:61:a9:
         53:1e:ad:c5:ce:1f:04:67:b7:72:c2:8d:8e:44:8d:37:6e:5e:
         8e:1e:cb:af:3f:77:40:f9:f9:2a:da:84:3d:df:d0:d2:88:88:
         30:b6:b4:34:e8:68:32:3a:63:9c:36:08:75:98:52:5d:a4:84:
         5a:2a:6f:dd:f9:95:c6:d8:6f:8e:0e:2a:dc:b0:35:4b:58:5d:
         31:0b:a0:3f:74:0e:53:0a:ee:bf:bd:85:1c:de:3f:10:e9:72:
         f9:28:a4:cd:a8:42:1b:43:c1:dd:05:03:38:9e:ec:84:4f:12:
         8c:4e:20:4a:d3:2f:2b:45:99:ea:61:eb:73:2b:a2:33:e1:a2:
         d7:4c:f6:d2:04:21:78:21:5b:1a:36:36:07:c7:cd:a4:84:0e:
         27:52:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org