Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa
File:                     34352e3233382e34382e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          fZ83sDf+00ZUf3awqF8VyaBSh98s2p6GQD1T0SXA3ac=
Subject key identifier:   E1:38:AC:83:82:96:9D:C8:F4:FD:33:1B:89:0F:F5:39:74:F3:4D:DA
Certificate issuer:       /CN=AFFA27A4EF543D92435C4D23302EF84CB77463B8
Certificate serial:       132F0EAD04E14C8FC9F28A84A0D13E4D8C305FB6
Authority key identifier: AF:FA:27:A4:EF:54:3D:92:43:5C:4D:23:30:2E:F8:4C:B7:74:63:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa
Signing time:             Wed 10 Apr 2024 13:25:18 +0000
ROA not before:           Wed 10 Apr 2024 13:20:18 +0000
ROA not after:            Wed 09 Apr 2025 13:25:18 +0000
asID:                     273683
IP address blocks:        45.238.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2f:0e:ad:04:e1:4c:8f:c9:f2:8a:84:a0:d1:3e:4d:8c:30:5f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFA27A4EF543D92435C4D23302EF84CB77463B8
        Validity
            Not Before: Apr 10 13:20:18 2024 GMT
            Not After : Apr  9 13:25:18 2025 GMT
        Subject: CN=E138AC8382969DC8F4FD331B890FF53974F34DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:07:2f:e5:d6:0a:74:d4:35:a1:8e:b6:56:ca:
                    ed:ce:1f:60:aa:ec:fe:c7:9e:8b:94:16:91:3f:e1:
                    18:a6:ca:2d:b8:ce:17:de:8f:a5:bf:0a:a2:52:08:
                    d9:3f:f0:a0:01:ce:15:91:81:6d:17:36:43:6f:04:
                    cc:ff:b5:58:0b:48:ae:46:25:cc:4f:3f:90:4b:37:
                    6e:f6:97:b8:7c:d0:bc:5f:ee:27:d4:72:4b:3a:69:
                    f5:b4:9b:85:bb:60:ac:c4:26:3b:23:c5:b8:88:88:
                    6d:f8:21:39:b5:72:68:19:65:56:e5:30:d6:bf:55:
                    61:df:a2:4f:38:96:9c:e0:c7:32:d5:9c:e0:69:d7:
                    5b:67:5e:30:0e:b8:ec:ef:99:d1:0d:53:f4:1a:13:
                    6d:18:b1:d6:72:91:cf:d1:f6:23:ec:32:eb:6a:98:
                    b4:ae:ca:5d:2d:9f:58:c6:59:e0:fe:8a:41:d7:fd:
                    d6:4e:a4:90:3f:7f:45:9d:76:1b:1c:72:a6:e7:a7:
                    25:e5:59:c7:3c:89:22:5b:e4:e2:c6:7c:79:4f:3c:
                    8c:37:dd:5e:d4:e8:ab:f0:31:5e:e3:df:03:5d:36:
                    53:37:58:0a:ad:c9:a8:94:bc:9d:25:f9:c2:87:fb:
                    be:5b:6a:08:06:f9:1c:8f:1f:1d:3e:1e:ed:7f:e4:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:38:AC:83:82:96:9D:C8:F4:FD:33:1B:89:0F:F5:39:74:F3:4D:DA
            X509v3 Authority Key Identifier:
                keyid:AF:FA:27:A4:EF:54:3D:92:43:5C:4D:23:30:2E:F8:4C:B7:74:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:61:7e:53:a2:40:93:ef:ed:32:af:72:65:7d:ca:2a:30:
         63:8e:09:d9:3a:e5:f9:8e:ab:d3:07:6d:27:ac:03:4e:1f:b7:
         e1:d1:a1:ec:64:8b:e7:ec:9a:97:e2:ad:60:db:cf:70:21:c3:
         4a:5d:0a:e5:43:ba:d7:85:cf:dd:7e:79:7c:40:79:ac:3b:d7:
         c7:ff:f5:f1:35:b0:5c:00:a0:56:81:3b:57:67:7a:c5:e4:6a:
         ed:f7:9d:8f:7d:79:0c:0c:4b:de:95:a9:2d:d8:eb:3f:1e:8d:
         5b:d1:9f:e6:bb:a7:e0:98:8d:c3:e7:61:69:80:c1:8b:2a:8c:
         18:79:fb:c4:85:c2:55:fd:9a:89:4b:b2:ec:4c:88:32:95:f0:
         2c:db:d4:81:f4:16:9d:b3:c5:34:9e:7e:af:a1:32:e8:51:fd:
         5f:35:4b:1e:e1:13:8e:58:9e:d0:c7:0a:9e:3c:d9:9a:81:ab:
         dd:0e:52:f1:44:68:6f:4d:7e:65:61:a3:40:3a:b1:f8:cf:0c:
         d5:55:eb:d0:c2:f3:2f:37:5b:ef:99:f3:bd:69:a2:58:37:d1:
         4b:b2:90:bc:91:3f:c2:92:f1:67:fc:dd:eb:0c:c4:da:09:7f:
         ab:e4:71:e3:72:46:cf:17:04:b2:9c:0e:d1:f0:3f:ef:f4:e4:
         2a:d2:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org