Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa
File:                     34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa (raw, json)
Hash identifier:          xehxEYAQcXr1Dus03On6pI3hqBYf12Qjpaj6TZ99Wlg=
Subject key identifier:   A5:14:FD:F4:BB:50:FE:8B:33:21:89:56:5D:08:1D:11:B2:72:34:CA
Certificate issuer:       /CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
Certificate serial:       3209467BF27CC3EFA4EC3CED3B39936175AD94B9
Authority key identifier: 3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa
Signing time:             Thu 21 Sep 2023 11:27:20 +0000
ROA not before:           Thu 21 Sep 2023 11:22:20 +0000
ROA not after:            Thu 19 Sep 2024 11:27:20 +0000
asID:                     268364
IP address blocks:        45.238.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:09:46:7b:f2:7c:c3:ef:a4:ec:3c:ed:3b:39:93:61:75:ad:94:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
        Validity
            Not Before: Sep 21 11:22:20 2023 GMT
            Not After : Sep 19 11:27:20 2024 GMT
        Subject: CN=A514FDF4BB50FE8B332189565D081D11B27234CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:30:f0:8e:da:49:04:1d:56:d6:84:17:fe:
                    79:fd:58:f5:63:60:8d:03:e1:eb:ce:91:a4:16:e1:
                    bb:c2:b6:41:27:cb:18:be:c4:75:62:71:56:fe:3b:
                    88:14:55:78:1a:34:b8:be:e6:aa:20:63:9e:6e:b8:
                    94:b0:df:de:47:6b:06:e9:8a:3f:58:35:6d:1c:5b:
                    ee:46:3e:ab:bc:47:a9:1e:9e:52:4f:84:64:a5:7f:
                    87:50:0d:b5:0c:ef:d0:c0:f2:7f:17:f6:68:d7:62:
                    73:68:2d:79:c9:32:d3:d5:bf:79:6c:92:c5:11:a6:
                    4c:66:19:90:23:14:82:18:00:7d:dc:56:e2:be:d9:
                    94:dd:32:6c:00:f1:70:34:46:b4:aa:eb:7e:4c:31:
                    3f:f1:b5:90:95:7a:43:6c:28:35:54:03:31:ef:25:
                    d2:89:20:e0:f9:6d:06:d7:e0:d0:02:e4:aa:3d:58:
                    8a:a7:63:7c:f4:1d:ff:e9:3b:4b:c1:63:37:ea:80:
                    ff:d6:22:90:3d:55:26:d8:cb:84:40:95:88:3f:16:
                    6e:3e:28:af:86:84:fe:1f:dc:56:62:39:55:e9:58:
                    4c:7e:aa:77:da:25:6a:3b:17:3e:c4:6b:4e:e4:f1:
                    73:95:cd:37:9e:42:10:3b:19:41:82:d5:1b:21:cb:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:14:FD:F4:BB:50:FE:8B:33:21:89:56:5D:08:1D:11:B2:72:34:CA
            X509v3 Authority Key Identifier:
                keyid:3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3d:69:1c:85:72:15:0f:95:83:41:c6:b4:0c:8f:e2:8d:d2:
         20:6f:fe:a4:49:f9:df:ab:41:be:70:fa:b8:91:47:17:d5:99:
         6a:5b:31:10:5b:9c:70:a1:78:49:ba:7d:11:59:5a:d3:98:19:
         c7:0e:c7:77:81:ba:62:1a:4e:a7:48:d3:3b:e2:ba:83:e1:5f:
         fb:06:12:40:b0:24:3c:64:c2:75:ec:80:0e:e1:00:ab:12:2f:
         23:71:e0:75:38:0c:f4:66:59:ed:6f:c8:11:b4:c5:49:5b:e9:
         1f:fa:78:5b:c1:7c:4c:d3:d9:bf:47:92:24:72:e6:2a:36:2b:
         00:cd:32:ff:28:ca:46:47:2d:ba:79:99:4f:f4:2d:67:d5:4c:
         bb:f9:36:c7:57:a5:f6:fe:7b:e7:96:1b:38:0c:eb:18:2f:f8:
         b5:37:44:ce:2f:a5:b5:b8:da:59:75:02:97:7d:37:be:ac:9c:
         ff:db:9c:20:e3:89:26:5c:2b:47:97:43:a0:6b:7a:63:bb:8f:
         5c:9a:3e:b7:6f:e5:77:4e:b7:d4:98:ff:7a:30:cc:2a:6a:0e:
         42:a0:45:9e:16:38:0a:dc:6d:86:ec:f0:38:8a:bd:c5:29:f0:
         e6:52:2f:84:8b:d0:91:25:c7:d5:b2:ad:bb:b2:d7:36:f8:b8:
         e2:bc:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org