Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132342e302f32322d3232203d3e20323636313334.roa
File:                     34352e362e3132342e302f32322d3232203d3e20323636313334.roa (raw, json)
Hash identifier:          h9o3w2NH+bDVsT+X5u6e/gRsq2bqREz2rfc3ErXJhwM=
Subject key identifier:   E7:79:57:67:CE:84:01:A0:EA:FD:27:C3:73:12:76:74:D1:0F:D1:A3
Certificate issuer:       /CN=4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4
Certificate serial:       43F17C06D2915DB614494C7012A9A5C808540033
Authority key identifier: 4B:E4:B7:D8:44:EB:7B:C0:81:B6:DF:A5:A9:8D:6D:E9:0F:CD:9C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132342e302f32322d3232203d3e20323636313334.roa
Signing time:             Fri 16 Feb 2024 19:57:08 +0000
ROA not before:           Fri 16 Feb 2024 19:52:08 +0000
ROA not after:            Fri 14 Feb 2025 19:57:08 +0000
asID:                     266134
IP address blocks:        45.6.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f1:7c:06:d2:91:5d:b6:14:49:4c:70:12:a9:a5:c8:08:54:00:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4
        Validity
            Not Before: Feb 16 19:52:08 2024 GMT
            Not After : Feb 14 19:57:08 2025 GMT
        Subject: CN=E7795767CE8401A0EAFD27C373127674D10FD1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:db:94:1e:6d:51:cf:43:bd:64:b0:82:7f:
                    35:28:5a:ff:69:af:e3:a0:44:08:8e:a5:ed:16:13:
                    2e:4a:c3:d6:c1:56:35:72:70:58:bf:ed:e0:51:b5:
                    43:87:c5:18:d3:89:9f:fe:d7:5e:9b:a9:70:5e:79:
                    ed:70:e0:42:44:9e:1b:4d:8b:85:a7:c8:59:b1:36:
                    ea:19:e2:05:a1:5b:0d:9b:30:13:ed:14:28:5c:24:
                    1b:d9:25:ec:a0:36:97:f1:ba:a8:14:6f:fb:bf:ae:
                    21:e0:48:47:16:06:de:1e:f5:1d:87:67:51:0f:96:
                    83:8d:f5:67:9b:d5:be:72:b4:34:73:b2:ab:05:d8:
                    7b:43:ae:4f:5f:1d:bf:af:c8:b2:29:fa:55:0e:a7:
                    ea:22:92:57:f9:1b:6f:0d:4f:21:cc:ff:97:73:bb:
                    97:34:a8:c8:f5:87:cf:26:0a:31:3a:18:40:a9:dc:
                    b5:36:fa:cb:74:02:98:bd:06:1a:22:dd:05:d6:15:
                    74:6e:7e:86:84:bd:72:0f:53:2c:8b:47:8b:83:65:
                    c7:cf:f6:98:a2:80:04:30:56:73:ca:b2:b9:da:d9:
                    8b:c8:84:76:64:e8:52:bc:d6:12:9c:17:0b:fa:6e:
                    a4:e6:e5:09:8b:29:d3:39:9b:65:cf:1d:2d:76:ff:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:57:67:CE:84:01:A0:EA:FD:27:C3:73:12:76:74:D1:0F:D1:A3
            X509v3 Authority Key Identifier:
                keyid:4B:E4:B7:D8:44:EB:7B:C0:81:B6:DF:A5:A9:8D:6D:E9:0F:CD:9C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132342e302f32322d3232203d3e20323636313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:39:22:49:d3:6f:a0:3d:2a:57:14:bc:dd:2d:46:e3:af:
         97:da:f4:0f:59:fc:e2:1a:ca:82:57:4e:b6:84:e8:49:26:f1:
         78:27:a5:83:03:08:14:9f:1f:aa:7f:58:3f:92:36:46:cc:9a:
         57:8d:79:f4:39:67:3a:37:52:2c:47:8d:25:f2:e6:bd:e0:a9:
         84:7c:26:27:29:04:c4:a0:1f:ee:c6:49:e8:3f:1b:af:2d:cf:
         fc:e1:50:42:cb:15:ca:86:45:66:35:78:72:1c:fa:dc:83:da:
         44:95:69:6f:75:65:8c:2d:2f:d2:9c:06:1f:d2:a2:a2:c8:a9:
         d4:a5:ab:c7:65:c0:d4:b1:0d:46:a1:5b:2b:dc:45:df:69:b9:
         1f:39:f4:9b:53:00:7e:e4:79:3b:41:4b:4f:af:e3:a3:7d:05:
         f5:a2:6d:ce:d4:42:b6:69:f3:56:22:cf:75:fb:4c:3f:d7:ef:
         ea:fd:06:fa:2c:b6:ea:9f:9f:f7:04:dc:28:02:61:ea:c8:a2:
         74:86:e4:44:7a:9d:2e:ad:15:19:26:e1:4c:09:67:28:0d:a9:
         44:d4:af:81:e0:f2:6a:68:ce:e6:59:b1:9a:7c:74:43:f2:12:
         e9:3d:f4:58:21:26:b7:ba:c6:0b:75:06:bd:03:a0:83:69:e8:
         1f:17:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org