Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32342d3234203d3e20323639313934.roa
File:                     34352e3233382e3233362e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          qxwsyrmA+Tmooo9/WWvzd7iAMvSKy8pdZ84fFD+Zfk0=
Subject key identifier:   2D:37:15:0B:0D:65:45:0D:2C:83:28:93:A0:BD:23:A2:FC:AB:6C:9D
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       77EF54334F65128F3833AED76B30854B2AC8DBCF
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:41 +0000
ROA not before:           Sat 29 Jul 2023 16:21:41 +0000
ROA not after:            Sat 27 Jul 2024 16:26:41 +0000
asID:                     269194
IP address blocks:        45.238.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ef:54:33:4f:65:12:8f:38:33:ae:d7:6b:30:85:4b:2a:c8:db:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:41 2023 GMT
            Not After : Jul 27 16:26:41 2024 GMT
        Subject: CN=2D37150B0D65450D2C832893A0BD23A2FCAB6C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:2e:d4:39:54:66:bb:bd:b2:ae:db:6d:4f:
                    d1:9b:2c:5b:b4:ed:9c:92:34:91:cc:7f:96:4e:67:
                    96:1c:a1:a7:5c:1f:28:64:af:fb:fc:f2:6f:e5:b4:
                    66:06:54:17:f0:46:f6:55:68:c3:2a:87:dd:77:ae:
                    97:ad:51:a6:69:da:6c:5d:8d:76:b3:2f:bf:01:b0:
                    75:d0:a4:91:5e:76:f7:83:6f:44:54:99:50:79:1f:
                    31:90:73:0a:5d:d6:94:80:c7:79:78:aa:7d:79:b6:
                    76:17:d0:03:96:84:6e:01:1a:9a:6d:e6:54:0e:f5:
                    7f:fe:dc:59:7e:13:ff:e4:26:19:80:c6:b4:55:14:
                    5f:67:93:8a:b9:08:be:83:33:ad:6c:3e:23:b8:63:
                    95:e3:4e:87:81:bf:55:45:6c:84:02:77:e2:a3:ca:
                    fd:75:1e:b9:c0:5f:9c:3d:63:22:f4:70:02:d2:ab:
                    59:a1:ab:58:9c:22:2e:e6:e7:7f:4f:eb:61:10:23:
                    5c:a8:c3:e2:4d:f7:24:80:10:95:cb:a3:d8:88:03:
                    af:ba:58:69:d8:8a:0c:02:e5:1e:63:5e:a1:91:c3:
                    ef:32:aa:e4:52:ed:1f:59:6c:30:e1:32:02:7c:bb:
                    0b:37:1d:be:76:6c:9b:a2:e9:7f:d4:8f:d6:a5:d6:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:37:15:0B:0D:65:45:0D:2C:83:28:93:A0:BD:23:A2:FC:AB:6C:9D
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:53:99:31:10:33:a7:0c:47:51:b5:ab:42:a6:b6:d3:cc:d9:
         a3:8c:0d:8f:f2:1b:a8:ca:8f:90:c6:d4:a8:79:5d:7b:07:da:
         a1:26:9b:9c:03:8a:22:05:df:23:76:86:58:ac:10:06:19:a6:
         c5:85:e5:a9:aa:dd:cf:12:f5:e1:38:64:c1:be:fd:6f:9a:f3:
         e5:cb:f2:f9:ed:1a:e5:b4:50:13:ef:cc:21:fa:38:b9:e7:22:
         42:ec:0a:54:25:2f:7b:5e:48:07:55:97:50:4f:b1:bd:c9:1a:
         10:27:3f:ff:cb:ff:b5:7f:1e:27:90:73:1d:d0:1c:fc:39:7e:
         73:65:b2:54:69:0a:35:b4:5a:aa:a4:03:ef:0e:9d:a4:92:9b:
         69:24:31:9c:4f:07:28:f8:91:f2:58:01:3e:46:fa:ba:a8:e0:
         aa:c4:1b:48:84:21:67:51:fe:26:8b:d1:82:85:f7:6a:3d:90:
         cd:a4:f1:8f:ce:f9:71:11:0d:34:63:43:1e:d1:93:49:42:f0:
         ad:21:be:22:f3:35:e2:45:16:83:03:02:de:5f:97:df:2f:5d:
         3c:2a:3b:72:48:0c:39:42:4a:f7:fe:ca:83:90:71:b9:01:0d:
         53:d1:b9:66:2f:e7:a8:0c:ba:7f:7c:3c:07:56:37:e4:ba:51:
         fc:3e:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org