Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/0/34352e3233382e3130302e302f32322d3234203d3e20323638333335.roa
File:                     34352e3233382e3130302e302f32322d3234203d3e20323638333335.roa (raw, json)
Hash identifier:          qhplTP/14cZKSUayQ0m+qCQe9VbE47X8OH0oTZeCxQU=
Subject key identifier:   4F:3D:9D:06:A8:A5:30:22:02:CA:36:8B:82:81:C6:6B:AC:20:2A:59
Certificate issuer:       /CN=97A40C863FAADF9ABB33CE041D04F1AEC3B88F16
Certificate serial:       0E1C8F8548C9404512813B16D4C9BA88FEEDC894
Authority key identifier: 97:A4:0C:86:3F:AA:DF:9A:BB:33:CE:04:1D:04:F1:AE:C3:B8:8F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A40C863FAADF9ABB33CE041D04F1AEC3B88F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/0/34352e3233382e3130302e302f32322d3234203d3e20323638333335.roa
Signing time:             Mon 29 Jan 2024 13:06:39 +0000
ROA not before:           Mon 29 Jan 2024 13:01:39 +0000
ROA not after:            Mon 27 Jan 2025 13:06:39 +0000
asID:                     268335
IP address blocks:        45.238.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1c:8f:85:48:c9:40:45:12:81:3b:16:d4:c9:ba:88:fe:ed:c8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A40C863FAADF9ABB33CE041D04F1AEC3B88F16
        Validity
            Not Before: Jan 29 13:01:39 2024 GMT
            Not After : Jan 27 13:06:39 2025 GMT
        Subject: CN=4F3D9D06A8A5302202CA368B8281C66BAC202A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:8c:5d:d1:80:7c:89:d8:d6:dc:43:1d:78:
                    2e:19:dc:89:be:1f:1d:37:f6:23:98:bd:af:6a:4b:
                    5e:e6:e6:a4:95:23:31:a4:98:fb:0e:93:79:7e:e5:
                    28:8f:f4:e0:92:ec:4d:85:80:60:18:65:65:b2:97:
                    33:31:af:64:14:45:c4:7c:af:2d:e0:4f:6a:d4:4f:
                    05:ba:f3:f1:1c:2f:12:d6:cf:a0:22:c1:4d:af:2b:
                    6f:ad:30:51:69:f2:28:57:8a:33:e8:f3:d7:bd:bd:
                    f8:82:59:17:ea:12:8f:93:d5:35:08:ea:bc:eb:73:
                    d1:f2:93:52:7f:c7:7f:c4:ef:a2:3b:1e:75:2a:3f:
                    b6:80:61:f4:38:7d:e4:b5:96:f5:60:22:30:a6:9f:
                    a9:c2:55:e9:12:08:5a:12:8f:1d:83:fe:e8:fb:df:
                    bb:8e:3e:0a:c9:41:c2:8d:1f:c2:ed:d4:d1:0c:f3:
                    91:a4:17:10:c4:0c:0c:b2:16:03:3c:47:72:3e:7a:
                    b5:2e:af:1b:68:b9:04:0a:66:9c:5c:d3:f3:91:2e:
                    45:08:4c:32:7e:8d:64:94:35:c6:64:74:af:09:77:
                    92:1a:cf:08:0a:3f:99:1d:c6:74:0e:52:df:fa:84:
                    94:67:ef:f8:ef:ac:3a:dd:c7:53:3c:78:ab:08:8f:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3D:9D:06:A8:A5:30:22:02:CA:36:8B:82:81:C6:6B:AC:20:2A:59
            X509v3 Authority Key Identifier:
                keyid:97:A4:0C:86:3F:AA:DF:9A:BB:33:CE:04:1D:04:F1:AE:C3:B8:8F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/0/97A40C863FAADF9ABB33CE041D04F1AEC3B88F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A40C863FAADF9ABB33CE041D04F1AEC3B88F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/0/34352e3233382e3130302e302f32322d3234203d3e20323638333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:92:a1:b2:c5:13:1f:7a:6b:af:17:b6:e4:38:da:7d:22:90:
         e8:38:60:40:c5:b6:ec:14:3d:a6:16:79:fb:49:d5:7b:bb:23:
         5c:75:ba:82:2d:2c:b0:63:10:d0:07:64:81:9f:05:89:1b:19:
         4f:4e:35:07:10:9f:46:ae:d3:7b:d8:22:8e:bd:d4:20:81:63:
         bf:94:44:5e:c1:e2:ff:61:bf:dc:e8:44:e2:82:98:81:19:e7:
         47:a4:61:94:4e:8d:6e:9c:5c:1d:de:e2:0b:f9:41:e2:62:73:
         0d:ef:33:04:58:73:c8:cd:51:be:84:79:1e:87:d9:3d:fe:b7:
         04:fb:68:cb:65:8e:56:ea:6a:ce:07:e8:3f:44:ab:1d:97:29:
         8f:01:4c:81:11:69:0c:41:db:c3:3d:6b:a6:ef:97:7c:62:c7:
         e7:d3:c5:29:0c:98:82:44:9a:95:83:6e:68:b6:14:2f:5b:59:
         e7:25:78:0f:0b:ac:72:fa:12:60:dc:4c:f1:d4:e5:d4:a1:7f:
         71:e8:56:13:b4:13:88:62:f0:9e:b4:da:0f:ba:2e:3a:bf:b3:
         2a:af:9a:f9:b5:5e:32:fd:24:63:d1:cc:22:52:65:7b:54:08:
         b6:a2:cf:48:5b:96:18:d5:33:f5:12:9c:fe:fc:f2:db:b8:3d:
         79:97:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org