Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          vbDXUL+W8pe9ZuKabvwK8RSOS8ryRM+TD+pWGvwvrt0=
Subject key identifier:   E5:F3:87:FF:C1:ED:D9:8E:09:79:F3:5D:EF:84:5D:53:5D:8E:A2:CA
Certificate issuer:       /CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
Certificate serial:       0757E954CEA73C0EC3297B669F400E608295ED89
Authority key identifier: BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
Signing time:             Tue 09 Apr 2024 16:49:49 +0000
ROA not before:           Tue 09 Apr 2024 16:44:49 +0000
ROA not after:            Tue 08 Apr 2025 16:49:49 +0000
asID:                     268205
IP address blocks:        45.236.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:57:e9:54:ce:a7:3c:0e:c3:29:7b:66:9f:40:0e:60:82:95:ed:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
        Validity
            Not Before: Apr  9 16:44:49 2024 GMT
            Not After : Apr  8 16:49:49 2025 GMT
        Subject: CN=E5F387FFC1EDD98E0979F35DEF845D535D8EA2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:0d:cd:61:d6:8e:db:54:9d:73:31:a2:61:
                    dc:03:fd:9d:e3:cd:b0:d7:b9:5a:4d:68:0f:3f:b6:
                    58:39:21:80:8d:a9:6c:69:33:cf:db:9b:23:55:11:
                    f7:8b:73:d0:45:40:2b:c4:1e:80:f1:4e:6b:cc:85:
                    f7:01:1f:9c:66:36:32:e8:47:0b:cc:6a:96:9d:9f:
                    36:63:72:78:e4:3b:0a:00:49:8f:da:b9:af:2d:72:
                    88:31:56:d4:c3:16:6f:41:dd:ff:d8:da:10:1d:63:
                    f2:72:9b:ee:a1:66:53:c3:d8:08:e5:8b:71:60:2f:
                    1f:39:14:3d:d2:dc:fa:3c:89:05:56:6d:de:cd:f3:
                    b3:77:48:53:12:31:29:67:c2:f9:1d:eb:65:2e:9f:
                    fd:1d:0d:ad:cb:e9:4b:23:d5:99:76:49:ac:13:a1:
                    85:14:38:e4:fa:ca:c7:83:f5:0d:ab:e6:be:f9:e8:
                    93:3b:2d:88:ce:a0:b6:05:10:e6:ba:be:6e:e3:42:
                    4c:91:b7:4f:88:2c:b4:fa:80:86:b3:1d:95:bd:27:
                    8c:a9:5d:ae:52:06:f7:c2:77:ca:bf:ac:f7:b5:ea:
                    a4:ab:ff:38:0b:15:5d:41:0a:a2:d5:a8:97:fc:f1:
                    4e:a9:ed:7d:cd:ee:e1:a9:97:bf:32:c1:97:49:3f:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F3:87:FF:C1:ED:D9:8E:09:79:F3:5D:EF:84:5D:53:5D:8E:A2:CA
            X509v3 Authority Key Identifier:
                keyid:BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/BCB1F68DF2709D725FAB621593B41E20C3D376FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:fc:73:2d:e4:3c:04:90:0d:79:e1:63:26:64:60:31:2c:
         ef:2f:6b:77:31:69:c3:b9:da:6b:3e:f3:d4:75:2a:a0:c5:9b:
         41:d0:f3:18:fc:cb:3f:00:fc:5c:c5:7e:f2:a1:75:87:ec:72:
         9f:e3:e6:2f:11:71:42:94:2f:87:df:14:f9:4e:5d:1b:fb:51:
         22:4f:2d:2f:8e:2a:3f:6b:45:17:78:7e:58:4a:f9:23:1f:27:
         bb:92:f8:67:75:40:ac:b3:b9:05:20:23:37:00:57:7f:ed:2d:
         a2:e3:00:d1:94:a6:19:86:da:0a:d9:b6:cd:bb:6e:1a:39:79:
         a5:a6:b3:8c:7d:d8:24:6d:1d:78:88:a4:2a:ac:3d:2b:1e:16:
         88:a4:5f:a8:97:d2:27:a7:c7:6f:79:25:88:1c:6e:c0:67:4d:
         44:9e:4b:ca:47:c9:a1:c1:b6:3a:00:e9:55:8e:a4:46:dc:63:
         30:cf:3c:2d:d2:3f:bc:20:99:e4:33:30:01:08:05:46:36:2f:
         91:ea:13:f5:39:f8:d4:92:04:9d:89:5a:ec:3a:3e:f1:d9:0c:
         90:51:5d:ff:3c:9b:6f:54:62:23:ef:32:db:60:fa:8f:a1:e7:
         23:53:4e:d3:e2:7b:7b:b8:31:3d:32:28:d8:69:ef:42:73:fa:
         d4:82:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org