Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34392e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          7n84MUIf7Eyo8Dfj17NdBatrV3aHYO13jza+VCxp7sA=
Subject key identifier:   28:9C:45:54:D0:03:D9:2A:38:BE:56:AC:52:8D:FE:87:F7:48:B0:55
Certificate issuer:       /CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
Certificate serial:       4B52A45DE5F7E63E65235F4F4DF905784C0AD215
Authority key identifier: BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34392e302f32342d3234203d3e20323638323035.roa
Signing time:             Tue 09 Apr 2024 16:49:52 +0000
ROA not before:           Tue 09 Apr 2024 16:44:52 +0000
ROA not after:            Tue 08 Apr 2025 16:49:52 +0000
asID:                     268205
IP address blocks:        45.236.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:52:a4:5d:e5:f7:e6:3e:65:23:5f:4f:4d:f9:05:78:4c:0a:d2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
        Validity
            Not Before: Apr  9 16:44:52 2024 GMT
            Not After : Apr  8 16:49:52 2025 GMT
        Subject: CN=289C4554D003D92A38BE56AC528DFE87F748B055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:87:11:a7:1d:2c:b5:b0:3a:e0:24:3e:00:
                    be:8d:2f:b3:83:04:b6:fe:6b:4b:04:80:b9:48:c6:
                    34:fe:d8:89:81:91:04:ba:24:61:45:59:18:dc:5e:
                    44:1e:0c:e8:aa:a2:fa:a5:72:b8:99:e6:0e:bd:70:
                    0b:c8:f0:81:d1:a1:da:41:1d:d1:96:74:28:13:d5:
                    5c:d0:9e:1f:ef:0e:cc:20:57:9d:3a:53:b0:4c:7e:
                    49:ca:44:df:16:3b:9e:99:07:98:93:6a:76:c9:c3:
                    19:8a:71:a4:d8:45:6a:3e:4e:4d:04:1f:ad:86:fa:
                    38:a4:92:74:69:b2:41:52:83:54:f5:6a:1e:a7:16:
                    56:70:7b:8a:b6:35:05:35:96:0f:e5:3b:6b:09:7a:
                    91:33:ef:ee:e9:c1:9b:35:03:f1:4f:28:5a:04:bc:
                    82:ff:0c:4a:2a:64:9d:77:f7:f5:6b:6b:f1:74:2f:
                    d0:07:bc:b9:35:65:b9:ab:c1:ca:e7:5a:60:ff:c8:
                    98:3f:62:96:ee:23:e0:5d:92:58:56:2e:f7:4a:e8:
                    9a:8c:7b:fe:43:a7:dc:2b:e6:be:d2:de:67:09:90:
                    df:47:20:0a:5d:51:81:cd:32:2e:d3:57:bb:c4:db:
                    07:ec:cb:0c:d3:82:11:f4:1b:41:8c:15:4e:bd:15:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9C:45:54:D0:03:D9:2A:38:BE:56:AC:52:8D:FE:87:F7:48:B0:55
            X509v3 Authority Key Identifier:
                keyid:BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/BCB1F68DF2709D725FAB621593B41E20C3D376FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34392e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:c7:3b:e5:24:87:be:65:a8:37:43:a4:ac:ea:52:f3:85:
         4e:8c:29:e2:5d:e6:13:a9:27:4e:f1:f0:59:30:be:1c:f4:c2:
         32:9a:71:1a:5e:3b:00:e7:eb:db:16:e5:44:f5:4a:28:9e:37:
         8c:9d:91:38:57:38:98:bf:40:9f:c9:c0:1e:9c:a6:5d:c5:ba:
         42:93:d4:2a:31:27:16:c3:8c:6f:11:d5:cd:0e:9d:f4:de:5c:
         ba:f5:55:ee:7a:b1:68:bd:fc:3d:04:cd:f9:e6:f5:dc:74:6e:
         5b:7a:8f:1a:c0:21:6a:38:ff:07:b1:49:5b:7b:f3:63:1c:fe:
         6e:28:9e:63:43:62:1c:28:d5:78:e6:af:e0:bb:81:ef:9d:0b:
         80:8d:ac:5d:96:f3:c6:fe:0f:94:96:5c:84:ca:f8:fd:74:5e:
         7a:6a:17:2d:ca:07:3b:29:8f:e2:23:9d:9d:38:1e:a3:83:7d:
         e0:c3:fa:b1:8b:58:8e:27:6e:a4:26:59:64:9b:28:da:57:55:
         d4:19:be:e5:ea:f5:80:cc:f6:b3:5e:f3:99:1b:b0:36:77:6d:
         9f:69:fc:4a:b2:40:db:34:eb:50:e4:80:5a:04:fb:56:d2:1a:
         3f:7b:27:e5:d6:e0:b7:78:71:12:b4:66:70:e4:db:3a:1d:66:
         bd:be:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org