Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131342e302f32342d3234203d3e20323638333331.roa
File:                     34352e3233382e3131342e302f32342d3234203d3e20323638333331.roa (raw, json)
Hash identifier:          /DsodAzDAowC63gFLV8FxlxjowZ6chdx+HEKF9WfQ9Y=
Subject key identifier:   CA:2F:81:B7:1C:0A:9D:CA:12:73:8B:1C:FF:56:2F:BB:F1:8A:7D:62
Certificate issuer:       /CN=A0BEE15BC07A441D9085F648D6434C33B0E7CC70
Certificate serial:       3986C65C04EA3220FD3C71B16FD6D4140BD58C49
Authority key identifier: A0:BE:E1:5B:C0:7A:44:1D:90:85:F6:48:D6:43:4C:33:B0:E7:CC:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BEE15BC07A441D9085F648D6434C33B0E7CC70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131342e302f32342d3234203d3e20323638333331.roa
Signing time:             Tue 26 Jul 2022 14:14:16 +0000
ROA not before:           Tue 26 Jul 2022 14:09:16 +0000
ROA not after:            Tue 25 Jul 2023 14:14:16 +0000
asID:                     268331
IP address blocks:        45.238.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:c6:5c:04:ea:32:20:fd:3c:71:b1:6f:d6:d4:14:0b:d5:8c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BEE15BC07A441D9085F648D6434C33B0E7CC70
        Validity
            Not Before: Jul 26 14:09:16 2022 GMT
            Not After : Jul 25 14:14:16 2023 GMT
        Subject: CN=CA2F81B71C0A9DCA12738B1CFF562FBBF18A7D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:9c:01:23:6f:1c:bc:e3:55:3e:ab:64:e4:
                    e3:11:02:d4:5e:bb:fc:2d:6e:9a:71:da:5d:99:88:
                    c2:5a:fa:6c:39:da:10:d4:b7:88:7b:94:e7:72:ab:
                    c8:33:58:05:9a:96:83:68:4d:4b:39:b3:41:6a:47:
                    15:42:c2:bb:59:a6:79:ee:17:26:6b:c5:94:20:9d:
                    4d:26:09:e5:3d:85:cf:0f:32:04:8f:83:af:d1:dd:
                    5b:1d:bb:a1:67:b7:48:88:8c:3b:07:d1:70:a8:cc:
                    b2:30:05:c0:33:a1:44:88:a6:81:4b:9d:50:bd:2e:
                    2b:fa:a1:c6:d6:76:d6:9e:fe:36:3c:0d:54:58:47:
                    e2:73:b0:89:57:9c:3b:91:a6:aa:d9:f3:bb:4c:63:
                    c6:14:6a:8e:85:47:f7:19:3a:d8:4a:1d:d0:e6:31:
                    b7:47:c2:5c:25:4c:29:aa:a4:92:d6:ff:3c:99:fd:
                    b0:37:c0:c5:23:9c:41:8a:3b:d0:66:6e:1e:f4:76:
                    31:b0:3b:13:0e:37:cb:06:54:8a:f1:eb:a5:af:71:
                    1c:94:0e:c9:29:81:30:8f:10:48:24:ef:9c:2d:02:
                    16:b8:df:a7:35:5b:e7:c7:2c:80:95:52:f9:98:87:
                    66:27:40:39:f2:39:ad:bf:c2:13:e2:19:55:62:f0:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2F:81:B7:1C:0A:9D:CA:12:73:8B:1C:FF:56:2F:BB:F1:8A:7D:62
            X509v3 Authority Key Identifier:
                keyid:A0:BE:E1:5B:C0:7A:44:1D:90:85:F6:48:D6:43:4C:33:B0:E7:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/A0BEE15BC07A441D9085F648D6434C33B0E7CC70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BEE15BC07A441D9085F648D6434C33B0E7CC70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/34352e3233382e3131342e302f32342d3234203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:34:95:e2:c3:ee:7c:76:6e:c0:3d:a0:04:53:fc:b0:2d:c3:
         e4:d4:54:e7:31:ed:c0:4c:8d:98:cf:f0:05:d1:81:1d:87:f5:
         72:f1:8b:45:35:63:a3:b4:e1:9f:7a:4c:dc:e8:b5:20:14:e1:
         6f:33:17:64:01:89:53:07:9a:1b:2b:67:90:86:7a:13:69:00:
         80:4c:19:48:34:a5:fe:5b:a7:1c:05:b3:cf:20:f0:58:c8:10:
         11:69:5d:c6:d2:e5:0d:d6:9d:f9:2c:fb:55:5b:83:ed:00:59:
         7e:7a:95:18:dc:98:29:a3:2f:a6:3b:3a:36:25:7a:3f:f4:7d:
         0d:a7:e6:72:e1:a5:d9:2a:ce:89:38:da:a1:db:28:ce:60:38:
         46:ff:ab:73:b4:8b:ad:58:a9:ae:ba:08:a1:01:c1:87:e2:95:
         80:f4:f3:0c:f4:1c:46:13:06:cf:2d:44:f9:fe:19:fd:3d:5e:
         4a:5f:86:0e:e7:6d:15:cb:7d:28:bd:fb:e8:d0:96:c8:0c:e2:
         55:e2:1b:27:11:be:71:cf:3b:bd:91:05:99:8a:a9:ca:aa:74:
         a7:67:ed:a9:ab:e7:c2:04:10:95:52:54:c8:56:85:7f:33:21:
         5f:d8:7b:25:1f:74:1a:09:87:ee:00:85:03:cc:00:96:3a:56:
         4f:b1:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org