Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232382e302f32342d3234203d3e20323638333432.roa
File:                     34352e3233382e3232382e302f32342d3234203d3e20323638333432.roa (raw, json)
Hash identifier:          o5OC8vT+0MVje9cN5vTJdgz+6e61FrjgIYEikiCTLQk=
Subject key identifier:   A9:EB:C2:46:19:D4:F8:15:D8:4B:90:68:23:18:EC:6F:1F:66:5D:12
Certificate issuer:       /CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
Certificate serial:       57A849ED6E2AD559AA83C97A65303703ED68B73F
Authority key identifier: 3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232382e302f32342d3234203d3e20323638333432.roa
Signing time:             Mon 04 Apr 2022 23:55:38 +0000
ROA not before:           Mon 04 Apr 2022 23:50:38 +0000
ROA not after:            Mon 03 Apr 2023 23:55:38 +0000
asID:                     268342
IP address blocks:        45.238.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a8:49:ed:6e:2a:d5:59:aa:83:c9:7a:65:30:37:03:ed:68:b7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
        Validity
            Not Before: Apr  4 23:50:38 2022 GMT
            Not After : Apr  3 23:55:38 2023 GMT
        Subject: CN=A9EBC24619D4F815D84B90682318EC6F1F665D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:0b:d1:01:c5:3c:86:1d:76:64:2a:79:bf:
                    a8:24:6d:b7:db:3e:7b:42:68:4d:f0:47:f1:5e:25:
                    2e:a9:70:ac:e0:02:43:d8:94:4f:0b:d5:d7:95:74:
                    65:71:0d:9d:d2:b4:da:bf:b6:83:f8:39:d6:a6:e7:
                    d3:96:fd:58:65:f7:4e:fd:76:d4:62:8f:69:9c:0e:
                    6a:3e:de:8a:4d:b3:45:6f:02:87:c7:51:a5:fe:2f:
                    9d:fb:d0:75:6a:0a:aa:cf:0a:f4:49:9c:5b:64:1a:
                    d0:84:9c:7a:6a:3c:96:10:fc:26:e2:b4:56:40:a2:
                    83:2a:29:d3:3a:fd:e7:29:9b:d7:9f:ff:41:e2:7c:
                    56:cc:5e:f9:c3:a3:72:83:e3:47:f8:cb:2e:76:ef:
                    db:6b:71:15:3e:67:9c:0f:ae:3f:24:3b:c0:15:96:
                    7a:0b:ce:4c:a0:3c:21:08:96:fc:67:a1:2d:dc:a5:
                    21:01:8d:da:a5:37:a9:9e:65:f1:08:42:d0:87:fe:
                    04:73:84:8c:a0:0b:fb:84:d7:40:80:bb:0e:5c:84:
                    35:29:19:34:dc:d0:ec:19:23:ab:5d:41:b8:93:69:
                    9b:58:be:95:5b:a1:c6:10:08:38:23:bd:22:b4:17:
                    4c:45:56:b3:bb:c7:64:97:9d:96:1d:0d:b9:3d:32:
                    06:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EB:C2:46:19:D4:F8:15:D8:4B:90:68:23:18:EC:6F:1F:66:5D:12
            X509v3 Authority Key Identifier:
                keyid:3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232382e302f32342d3234203d3e20323638333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:42:7a:c2:0f:6c:0e:70:6e:e2:31:d2:b7:0f:b6:f4:69:39:
         eb:aa:ef:3e:28:3c:e3:9d:69:48:8f:22:43:25:ce:bf:5c:51:
         d3:48:10:73:4c:f5:b3:92:32:2c:ba:f2:e9:5a:05:1b:15:4a:
         94:ec:8e:84:56:f5:71:23:f6:98:86:c9:22:57:fb:5a:ef:a5:
         ba:4e:ff:0b:02:d8:f9:32:9e:a1:96:2d:e1:06:b7:75:e7:7d:
         ad:37:f2:01:45:e3:94:c1:8f:f9:71:c1:88:0c:55:22:f5:86:
         4d:db:30:a5:ea:8c:d8:8f:1a:ef:c1:07:2b:f6:15:dd:09:2a:
         3d:d0:e8:58:d4:ab:95:20:e5:ea:bc:cf:44:43:e3:ab:15:30:
         74:9e:e9:e7:e6:3f:e0:a6:6d:af:dd:dd:58:14:9c:d3:dd:15:
         45:3c:9e:c7:9f:bf:cf:d1:80:94:71:8c:d5:40:9e:27:0e:45:
         03:40:0b:e2:5e:0e:68:2c:9f:8e:6c:43:31:de:95:4d:de:db:
         5e:9f:c5:77:70:36:b4:e3:5a:d8:b9:0a:a9:7c:5e:79:34:4d:
         45:f6:0f:72:2d:b8:d9:3a:de:1b:cb:81:cd:38:4c:4c:3d:3f:
         a0:ef:2a:a9:b5:9c:38:8c:11:a0:c0:93:67:8e:80:4c:ef:ab:
         c9:28:7f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org