Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133362e302f32342d3234203d3e20323638333332.roa
File:                     34352e3233382e3133362e302f32342d3234203d3e20323638333332.roa (raw, json)
Hash identifier:          cD+QL+8ByMW/kXhKhdnpxz4ge5kTzj696AUnfOaZE3Q=
Subject key identifier:   DA:F6:34:C7:82:01:9D:50:0B:1B:47:B3:95:F8:3E:06:19:6F:A1:D9
Certificate issuer:       /CN=7C2B62DDAC7CD557627D3A7FA657743CC2942997
Certificate serial:       441160C02B602996C8DDFC02ABE25AB0A97C3376
Authority key identifier: 7C:2B:62:DD:AC:7C:D5:57:62:7D:3A:7F:A6:57:74:3C:C2:94:29:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133362e302f32342d3234203d3e20323638333332.roa
Signing time:             Sat 02 Mar 2024 13:07:17 +0000
ROA not before:           Sat 02 Mar 2024 13:02:17 +0000
ROA not after:            Sat 01 Mar 2025 13:07:17 +0000
asID:                     268332
IP address blocks:        45.238.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:11:60:c0:2b:60:29:96:c8:dd:fc:02:ab:e2:5a:b0:a9:7c:33:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C2B62DDAC7CD557627D3A7FA657743CC2942997
        Validity
            Not Before: Mar  2 13:02:17 2024 GMT
            Not After : Mar  1 13:07:17 2025 GMT
        Subject: CN=DAF634C782019D500B1B47B395F83E06196FA1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:d4:46:bc:9a:57:b4:01:1e:f9:98:58:91:
                    9e:46:a4:68:59:78:bb:b8:bd:08:5b:29:a8:ec:b6:
                    32:b6:f0:74:ff:2b:15:aa:9f:0f:f5:79:8e:ab:33:
                    f5:c8:95:37:75:c9:d2:ed:b4:07:f7:83:b3:c6:2a:
                    a9:57:d7:73:03:ac:fc:7f:55:da:f2:8a:39:15:18:
                    12:2f:f4:a3:66:d6:6c:43:c8:fe:27:9f:3d:06:1d:
                    5d:12:0e:db:2d:aa:0f:b6:c6:3b:f5:08:46:44:64:
                    fa:63:da:53:e2:f5:9d:11:62:e2:50:8a:fd:ea:1c:
                    97:e6:97:31:a8:c2:34:35:1f:5f:ec:a3:35:a4:c7:
                    91:4c:8f:4c:93:4e:1f:70:8e:0b:52:ce:ee:0d:e2:
                    83:f3:2f:b7:20:a4:a4:bc:8a:42:61:74:26:77:73:
                    a5:e3:66:f2:49:33:a5:a3:28:2e:05:26:6f:d0:d7:
                    ce:68:92:37:cd:fa:d5:b2:50:65:5a:73:d1:d8:84:
                    9e:7f:0b:f1:26:33:8c:7d:3d:2f:05:fa:88:1f:99:
                    ec:8c:b4:fc:35:7d:f7:7d:04:a6:f0:5c:f2:da:46:
                    76:ed:d7:a3:a9:23:fc:f8:52:86:c4:3f:d6:f5:a9:
                    ce:84:1a:c9:6e:34:71:69:b5:76:64:22:ce:ec:26:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:34:C7:82:01:9D:50:0B:1B:47:B3:95:F8:3E:06:19:6F:A1:D9
            X509v3 Authority Key Identifier:
                keyid:7C:2B:62:DD:AC:7C:D5:57:62:7D:3A:7F:A6:57:74:3C:C2:94:29:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133362e302f32342d3234203d3e20323638333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:b4:7b:e6:77:3a:9b:16:a6:de:eb:92:ad:cd:fe:3f:99:
         f5:ee:af:e3:f8:66:4d:5b:b7:02:8e:7d:4f:51:58:74:ed:53:
         99:8a:94:77:a8:cc:28:e1:9d:cc:7a:80:bf:db:f6:a0:3b:92:
         43:4d:de:02:5c:8d:3e:6d:07:61:84:82:6d:92:29:f6:87:88:
         4b:d5:bd:17:07:ef:22:43:ca:c3:d3:be:90:47:f3:3c:42:d9:
         91:6f:21:d6:e8:b9:18:9f:fc:68:eb:6a:7c:19:62:a1:c4:b3:
         37:26:6e:7c:e3:ed:98:b6:af:c1:8d:e6:57:49:ab:55:aa:de:
         e0:a7:ca:9a:ef:86:b7:cc:f8:01:77:36:e7:fd:ae:7e:01:33:
         1c:63:c5:0d:16:80:3d:fb:ef:b9:85:1e:c4:0c:e8:14:22:8c:
         04:67:8c:27:a7:a2:b7:65:01:2f:c9:85:4f:4b:5b:2c:a4:80:
         1a:58:f3:99:5e:22:23:e7:b2:1d:0e:e0:64:4e:d6:87:2c:0e:
         ce:ae:18:62:db:93:8e:68:91:f6:13:2d:45:a8:6d:bb:41:99:
         3c:e2:16:f3:11:1c:6a:ae:28:ea:c3:38:13:94:64:36:43:f1:
         88:0c:cc:1e:d4:3e:d2:cf:0b:b8:78:61:d4:58:98:bb:42:67:
         a2:a0:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org