Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa
File:                     34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa (raw, json)
Hash identifier:          HXdL83XKWltUnStCCuk7DTK4ls+W/GtWvudotpoV5Cs=
Subject key identifier:   F2:A4:61:D9:D4:C9:A6:A2:02:32:5B:9D:9D:FF:61:B3:41:FE:97:27
Certificate issuer:       /CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
Certificate serial:       6A801F80C9F2F0878B3F34515E73B4C3AD36E924
Authority key identifier: 3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa
Signing time:             Tue 06 Dec 2022 02:35:10 +0000
ROA not before:           Tue 06 Dec 2022 02:30:10 +0000
ROA not after:            Tue 05 Dec 2023 02:35:10 +0000
asID:                     268364
IP address blocks:        45.238.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:80:1f:80:c9:f2:f0:87:8b:3f:34:51:5e:73:b4:c3:ad:36:e9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
        Validity
            Not Before: Dec  6 02:30:10 2022 GMT
            Not After : Dec  5 02:35:10 2023 GMT
        Subject: CN=F2A461D9D4C9A6A202325B9D9DFF61B341FE9727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:ca:2a:0a:2b:1f:f6:55:20:62:bf:b0:54:
                    1a:e0:36:84:89:a4:4d:2c:8a:5d:5a:74:4f:75:06:
                    5e:2a:75:22:a1:cc:79:63:98:b8:92:f7:ef:4c:f2:
                    2e:50:1c:7b:57:ee:be:9b:43:3c:00:d1:16:88:ac:
                    e3:a7:b7:95:df:18:8b:41:9f:c7:fe:9b:6c:7c:5b:
                    50:41:e9:a3:44:a6:c9:c8:79:74:d8:7e:bf:71:f7:
                    a7:1e:16:d6:f4:16:87:d2:5a:e0:76:cd:cc:4d:83:
                    37:9c:1e:ec:82:7f:e3:29:92:b5:aa:6e:9f:39:67:
                    0e:31:a6:8d:d5:2c:ad:e7:ca:c7:b5:84:d3:4c:67:
                    ba:15:24:be:c1:0d:1e:f4:e3:2f:ef:16:08:10:d1:
                    72:6b:31:b0:3e:b4:34:3c:a4:6d:c4:89:58:75:19:
                    ff:12:ac:ea:fd:93:d2:03:5f:1f:f4:4d:7b:f3:fb:
                    9e:78:6d:99:ba:21:42:82:db:2d:de:23:12:6a:95:
                    fa:35:58:6b:3a:88:f7:0f:ab:9a:6b:a1:79:b5:c1:
                    fe:33:3e:0d:2a:57:d8:6d:8d:51:80:36:de:dd:37:
                    26:3f:80:0b:76:c3:af:d9:49:26:9a:c4:7d:74:9c:
                    70:4f:8a:34:1c:ad:49:f5:a3:75:a7:34:51:e6:4b:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A4:61:D9:D4:C9:A6:A2:02:32:5B:9D:9D:FF:61:B3:41:FE:97:27
            X509v3 Authority Key Identifier:
                keyid:3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:b5:b5:e9:35:53:7c:58:2f:3d:e1:33:77:84:88:2c:f7:
         86:59:a2:c3:db:a6:2a:82:15:46:ce:1a:7c:60:3d:01:cd:68:
         9d:cb:ab:b0:32:28:e2:99:6f:39:32:07:44:6f:77:19:93:a0:
         7f:af:af:df:03:a7:a9:72:a9:c6:d0:cb:5c:f6:f1:41:b4:aa:
         07:de:a1:34:56:37:03:75:77:ca:3e:d9:b2:e8:e3:97:5c:13:
         0a:5e:a1:53:dd:f8:57:ab:18:51:73:b2:f6:c8:ca:ce:b3:4c:
         84:cc:c8:5a:65:cc:8d:51:f8:38:9f:01:62:83:43:dc:77:95:
         74:28:bd:21:6f:c4:62:cd:6a:df:94:5c:d9:9a:86:c7:57:0e:
         15:e3:a0:9d:f1:ca:5d:29:e2:5b:5b:c8:8e:9f:ea:f4:a5:c2:
         f4:9a:fd:25:50:a1:41:eb:d9:8d:c1:0a:d9:26:bf:85:f7:7d:
         05:44:2b:35:e6:e8:35:cb:b1:ad:2c:66:90:24:40:fa:65:84:
         0b:70:bd:48:fa:c1:a8:87:a1:e5:57:ca:fc:51:ec:60:1e:af:
         08:a9:b2:b7:0b:b0:c4:e0:27:9d:e9:5d:ab:6d:b2:f1:8e:a8:
         3b:6b:da:20:20:c8:c4:0b:23:73:84:bc:f9:4f:a3:d0:8e:30:
         39:10:45:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org