Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3232203d3e203631363839.roa
File:                     34352e3233382e34382e302f32322d3232203d3e203631363839.roa (raw, json)
Hash identifier:          gz6VSe6P7JWBYdjK5YenaP2bl0+/45yVSHrKlRNdMOg=
Subject key identifier:   E8:DB:30:03:F8:F6:73:43:0C:64:12:6C:4A:D6:90:8C:BC:94:AA:B8
Certificate issuer:       /CN=AFFA27A4EF543D92435C4D23302EF84CB77463B8
Certificate serial:       7B13E13C28372FCE3E2B4E733CD9EA1A1D33D896
Authority key identifier: AF:FA:27:A4:EF:54:3D:92:43:5C:4D:23:30:2E:F8:4C:B7:74:63:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3232203d3e203631363839.roa
Signing time:             Thu 15 Feb 2024 15:05:13 +0000
ROA not before:           Thu 15 Feb 2024 15:00:13 +0000
ROA not after:            Thu 13 Feb 2025 15:05:13 +0000
asID:                     61689
IP address blocks:        45.238.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:13:e1:3c:28:37:2f:ce:3e:2b:4e:73:3c:d9:ea:1a:1d:33:d8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFA27A4EF543D92435C4D23302EF84CB77463B8
        Validity
            Not Before: Feb 15 15:00:13 2024 GMT
            Not After : Feb 13 15:05:13 2025 GMT
        Subject: CN=E8DB3003F8F673430C64126C4AD6908CBC94AAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:00:5e:f4:90:68:d5:78:ca:b3:30:33:79:
                    3b:6d:98:e4:74:16:58:80:3b:a0:f7:03:82:95:09:
                    be:7e:5e:8b:c6:04:f4:0a:1a:59:e4:92:01:c1:69:
                    b0:c6:7f:75:c2:5c:e1:2f:c9:a2:81:83:5b:3c:fa:
                    3a:f0:e2:d6:32:a4:d0:e3:b3:08:fb:9f:89:87:ec:
                    f4:9a:62:ed:4c:ca:5a:70:97:1d:d6:10:e0:76:85:
                    11:e0:d6:fe:21:5f:a2:be:12:a3:e8:47:05:ea:99:
                    88:ce:45:69:75:c8:77:30:7b:7f:30:a2:9d:45:2c:
                    75:93:04:ae:0b:3f:11:64:87:07:a0:29:f2:d8:d7:
                    5b:7a:b8:3f:86:c6:e5:ba:ce:bc:25:13:ee:f7:c0:
                    16:2a:f0:52:c8:7d:31:da:69:46:93:f9:7c:d2:d3:
                    08:ec:54:a0:ad:35:86:3e:2b:23:4d:f1:10:52:e4:
                    e5:77:49:b7:da:c0:96:a0:e6:d3:8a:a5:24:3c:97:
                    fc:1f:ed:a4:6c:48:78:7d:4f:96:dc:ce:2b:e3:c5:
                    8d:e8:de:02:90:cd:35:13:12:ef:11:84:3e:5a:ca:
                    d2:1c:5b:6f:5e:a3:b5:33:1b:25:68:95:91:59:83:
                    51:00:f2:67:25:aa:06:e8:22:76:47:84:b5:1d:64:
                    43:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DB:30:03:F8:F6:73:43:0C:64:12:6C:4A:D6:90:8C:BC:94:AA:B8
            X509v3 Authority Key Identifier:
                keyid:AF:FA:27:A4:EF:54:3D:92:43:5C:4D:23:30:2E:F8:4C:B7:74:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3232203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:3a:6c:b1:f6:70:e2:1e:0c:56:90:b6:77:e2:7a:6f:cb:34:
         3f:c4:44:bd:80:2d:e8:7c:c4:9d:d4:64:d7:0f:97:64:ec:d4:
         9b:62:c1:f6:1d:55:86:9c:58:73:53:28:02:d7:c7:48:6c:47:
         c0:eb:66:f8:03:25:82:cf:79:e0:36:72:0d:48:42:7a:65:aa:
         12:ef:64:b8:7d:c6:62:3d:93:5c:4b:c3:a6:fb:03:09:d6:1f:
         0b:90:59:80:5c:bd:be:f2:05:0d:43:c5:1c:7a:6c:57:a3:a3:
         82:0d:63:87:b8:16:b0:8c:4e:3e:17:86:34:40:90:2d:30:26:
         b2:8c:ff:cf:23:80:00:0f:96:66:42:9c:39:f7:bb:98:ba:e4:
         d4:04:0c:a5:42:5e:b4:14:0e:3a:e1:bd:52:39:0e:6f:43:f5:
         00:94:66:c8:e1:92:fc:6b:25:61:13:17:ea:29:9d:88:20:5d:
         1a:4d:9f:9e:02:cf:b1:70:0e:ce:71:ee:08:0b:17:bb:5f:f6:
         bf:af:da:56:a5:24:3b:12:f3:63:ac:ec:22:ee:4a:03:1e:e5:
         7f:2f:33:d3:43:9c:88:75:a7:98:54:d8:b8:29:a9:01:6f:10:
         df:e5:79:fb:44:8b:16:e9:6e:e5:d1:b8:d8:4a:6e:2c:43:d3:
         61:ae:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org