Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133392e302f32342d3234203d3e20323638333332.roa
File:                     34352e3233382e3133392e302f32342d3234203d3e20323638333332.roa (raw, json)
Hash identifier:          3Po9RIpAyuXTv8oIQ29E9z0AG9Xox61KswPKLPM2hmE=
Subject key identifier:   B4:F6:0C:A5:3B:2F:01:85:27:7A:A6:22:D2:0F:FF:52:8A:74:AD:8A
Certificate issuer:       /CN=7C2B62DDAC7CD557627D3A7FA657743CC2942997
Certificate serial:       0B3E5B464BF1D7E744ABEC8FFA0AAA6C59E5EE69
Authority key identifier: 7C:2B:62:DD:AC:7C:D5:57:62:7D:3A:7F:A6:57:74:3C:C2:94:29:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133392e302f32342d3234203d3e20323638333332.roa
Signing time:             Sat 02 Mar 2024 13:07:35 +0000
ROA not before:           Sat 02 Mar 2024 13:02:35 +0000
ROA not after:            Sat 01 Mar 2025 13:07:35 +0000
asID:                     268332
IP address blocks:        45.238.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3e:5b:46:4b:f1:d7:e7:44:ab:ec:8f:fa:0a:aa:6c:59:e5:ee:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C2B62DDAC7CD557627D3A7FA657743CC2942997
        Validity
            Not Before: Mar  2 13:02:35 2024 GMT
            Not After : Mar  1 13:07:35 2025 GMT
        Subject: CN=B4F60CA53B2F0185277AA622D20FFF528A74AD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:cc:f4:c2:5e:6d:f2:11:4b:84:b7:45:3b:
                    60:fb:bb:2a:f3:08:13:c4:5e:35:8e:d8:fa:9b:fc:
                    19:ca:ae:2a:b0:2d:dd:97:c3:dc:ec:75:cb:84:53:
                    21:27:38:08:38:cc:f7:07:c4:81:eb:57:5f:28:fc:
                    0e:e0:3b:3c:91:21:ed:8f:b3:b2:2c:d2:47:27:44:
                    b8:2d:44:01:f3:8e:a1:43:18:64:e0:3e:f9:cb:4d:
                    db:1f:fe:1c:24:6b:fd:03:89:d2:bb:1a:29:81:24:
                    be:c6:c6:c0:19:db:84:7d:54:6d:c6:b0:d9:9c:83:
                    52:ff:14:18:71:c8:3a:c7:d7:e5:b9:45:ba:6e:8a:
                    b1:de:82:32:97:1f:36:64:17:6d:f2:6d:79:db:e7:
                    fd:54:b8:ca:f1:b5:f9:fc:90:f6:66:02:35:cd:c9:
                    cc:69:93:c8:10:ca:e2:1a:09:15:9f:54:63:e5:5a:
                    3b:85:b5:69:79:6e:c3:bf:ee:d1:d9:1e:f2:23:bc:
                    c6:f1:76:7e:0c:3d:9b:6e:1f:11:b6:c0:a9:b5:b5:
                    73:67:97:44:c4:ef:04:12:03:bc:a4:a2:44:eb:cd:
                    7f:5f:da:f9:36:ee:3c:fd:ae:12:13:a5:6c:8e:a1:
                    74:ce:70:9c:b5:6f:a2:87:4b:e5:09:f6:bb:b4:c8:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:0C:A5:3B:2F:01:85:27:7A:A6:22:D2:0F:FF:52:8A:74:AD:8A
            X509v3 Authority Key Identifier:
                keyid:7C:2B:62:DD:AC:7C:D5:57:62:7D:3A:7F:A6:57:74:3C:C2:94:29:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133392e302f32342d3234203d3e20323638333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:41:33:d2:d0:9c:47:27:1d:bf:34:e8:f3:6c:ca:2a:80:ca:
         6e:7b:f0:3a:c3:79:ce:cc:b1:cf:60:91:74:cf:09:8f:2a:51:
         43:7f:db:95:5e:d4:9a:cc:c1:49:40:cb:ad:75:eb:4d:64:cd:
         30:79:c8:52:4b:11:55:70:ca:7b:54:0a:10:aa:04:4d:bd:b7:
         9b:22:af:bb:64:c1:ac:a7:54:35:c7:e2:49:40:ab:f2:d8:ed:
         a6:58:b1:02:c4:4b:a2:56:43:72:36:2d:f7:ab:90:81:87:89:
         07:de:73:f9:1e:65:5b:47:f1:3f:8b:a7:3f:16:82:a7:9d:b6:
         70:24:30:84:e9:ca:ee:97:7f:23:49:7d:68:5e:b6:de:1a:12:
         9f:2c:74:a3:53:8f:3a:4a:b1:f6:09:3e:84:a6:7a:99:44:7a:
         75:7a:40:e2:16:49:06:9a:ff:90:97:a7:0c:f1:b6:82:57:e3:
         f9:c0:49:a0:20:aa:89:b5:4e:63:a1:2f:a7:cc:99:e4:69:18:
         8e:cd:c9:41:30:5d:04:f0:36:15:e9:63:b2:05:d8:71:07:54:
         33:88:57:34:1a:e7:c9:60:bf:b2:e7:4b:92:6c:7e:3c:30:93:
         90:98:82:bf:cc:53:32:6e:12:27:9c:cb:57:f7:46:5f:7d:03:
         7a:67:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org