Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131322e302f32332d3233203d3e20323638333331.roa
File:                     34352e3233382e3131322e302f32332d3233203d3e20323638333331.roa (raw, json)
Hash identifier:          nRZFVsy/dzzsbfzgILZsBdRxw8fb7YdmI5WtyHHSbQE=
Subject key identifier:   6B:A1:A5:37:8A:83:57:2A:0B:F2:3B:42:B7:E9:4E:52:74:6A:F1:83
Certificate issuer:       /CN=FB55391412BDE10B53428AACB9E329201BF68D11
Certificate serial:       43F0F4C832DB19A7272C4A2ACE14FBA31DCDF3C3
Authority key identifier: FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131322e302f32332d3233203d3e20323638333331.roa
Signing time:             Wed 28 Feb 2024 18:43:06 +0000
ROA not before:           Wed 28 Feb 2024 18:38:06 +0000
ROA not after:            Wed 26 Feb 2025 18:43:06 +0000
asID:                     268331
IP address blocks:        45.238.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f0:f4:c8:32:db:19:a7:27:2c:4a:2a:ce:14:fb:a3:1d:cd:f3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB55391412BDE10B53428AACB9E329201BF68D11
        Validity
            Not Before: Feb 28 18:38:06 2024 GMT
            Not After : Feb 26 18:43:06 2025 GMT
        Subject: CN=6BA1A5378A83572A0BF23B42B7E94E52746AF183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:3e:58:5b:e8:2f:08:60:5e:63:ca:88:82:
                    54:fe:8f:69:11:8c:e9:52:e9:be:76:a6:99:c6:aa:
                    ec:32:ea:c3:91:0b:53:43:7e:1c:e1:21:9b:0d:b0:
                    5a:ac:1f:bc:05:3a:15:e7:16:99:83:70:31:c1:66:
                    c5:2d:47:18:09:68:f9:03:8a:9d:fa:4c:18:f1:26:
                    16:6c:3f:c8:5f:1c:5c:7d:90:39:8e:15:4f:a3:97:
                    d9:a7:32:4d:a4:c5:b9:00:85:d7:4d:a2:11:ca:47:
                    e0:79:03:8d:38:90:13:9f:ba:ad:ba:47:02:88:9a:
                    b6:6d:73:c1:6c:04:1c:04:32:ad:d2:35:7e:aa:79:
                    2c:32:56:4c:bf:0c:28:50:b6:c3:5a:53:59:31:45:
                    90:06:3c:a6:b8:73:79:80:0a:94:10:38:d1:32:f7:
                    db:28:b3:63:3b:31:7a:f5:ac:d0:ab:ae:2d:b0:e6:
                    79:2e:1a:03:2d:73:ea:df:ab:19:40:db:0e:c6:b0:
                    3c:06:31:10:81:62:8f:3b:cf:61:32:c9:2e:b6:16:
                    55:5f:fb:4d:f1:11:40:bb:e1:9b:86:7e:99:a9:df:
                    39:50:7e:51:e5:f6:da:9b:1b:f6:e9:80:f0:90:ed:
                    15:92:1f:8c:3b:dc:06:38:34:0f:35:1b:29:00:22:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:A5:37:8A:83:57:2A:0B:F2:3B:42:B7:E9:4E:52:74:6A:F1:83
            X509v3 Authority Key Identifier:
                keyid:FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/FB55391412BDE10B53428AACB9E329201BF68D11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131322e302f32332d3233203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:98:48:11:a8:3e:1b:f2:1e:48:2d:15:dc:ec:53:95:e9:4b:
         b6:0b:6a:57:40:59:cb:dd:6a:26:06:43:0f:96:a8:71:b0:ac:
         7d:c4:e7:1a:73:24:9d:eb:de:3d:de:c0:0f:87:18:dd:a1:ff:
         d8:44:28:fa:51:4a:57:97:68:c1:9b:29:38:51:44:4a:5b:25:
         5a:20:5b:2e:5d:d9:28:1d:af:f2:7e:73:e4:8b:1c:aa:05:03:
         d2:3e:04:ae:8e:c4:27:67:a0:93:57:cd:d7:39:6c:46:de:85:
         fa:88:57:7b:0b:ba:34:dc:50:1c:33:8a:68:6b:4c:8d:bc:52:
         60:8a:1e:04:47:3f:24:e9:5f:c9:b4:01:4b:a8:83:eb:03:dd:
         96:9b:5d:5d:d8:0b:14:31:97:be:36:40:d7:b6:2a:8b:9e:8e:
         57:b4:f2:6b:eb:97:78:79:15:b2:14:b4:d8:e4:b3:1a:ad:66:
         37:9c:d6:17:b8:45:96:b0:49:7d:0b:91:76:e3:95:dc:e2:5e:
         c0:c6:b2:cb:70:8d:1a:97:6f:65:88:65:28:76:89:12:fc:1b:
         cc:6c:d3:de:47:a3:91:b7:ce:1f:9c:f9:fd:5d:d5:2f:d0:67:
         50:56:da:e5:bc:72:08:dd:f7:61:bf:f4:c1:d2:c4:74:52:83:
         10:3b:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org