Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa
File:                     34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa (raw, json)
Hash identifier:          my+cWNbqlJCM/E/bbOM+vUC9JuNLbs8X+dpSqQje4Iw=
Subject key identifier:   68:63:B0:CB:93:34:ED:CC:48:6C:59:C1:FE:BA:AE:4D:0C:8B:54:DD
Certificate issuer:       /CN=F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859
Certificate serial:       612CA40721E8A76634C58E0AB941CC8E334A797F
Authority key identifier: F5:14:DA:40:EC:B6:D5:EA:10:58:D6:19:CF:C2:BC:18:CE:0B:98:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa
Signing time:             Fri 15 Mar 2024 13:37:26 +0000
ROA not before:           Fri 15 Mar 2024 13:32:26 +0000
ROA not after:            Fri 14 Mar 2025 13:37:26 +0000
asID:                     267083
IP address blocks:        45.228.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2c:a4:07:21:e8:a7:66:34:c5:8e:0a:b9:41:cc:8e:33:4a:79:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859
        Validity
            Not Before: Mar 15 13:32:26 2024 GMT
            Not After : Mar 14 13:37:26 2025 GMT
        Subject: CN=6863B0CB9334EDCC486C59C1FEBAAE4D0C8B54DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:82:25:f7:27:36:59:ac:e8:19:91:6b:2d:
                    41:e7:de:af:8d:24:62:5b:85:59:ef:07:02:c0:c1:
                    34:b9:41:9c:2a:ff:84:bc:c8:38:e7:b4:a1:b3:36:
                    e1:45:e0:ed:05:fb:f1:f5:cb:4e:c9:c3:d3:4e:21:
                    8d:7b:c7:92:90:0b:1d:c1:b1:27:50:ea:bc:19:91:
                    ce:4f:1c:70:8e:db:f6:cd:a6:ec:0e:57:e0:55:3e:
                    c9:fd:28:ca:5e:9d:60:18:fd:09:8e:aa:37:04:e7:
                    8b:85:c4:4b:36:e5:7e:a6:b5:6e:1c:f1:12:e3:1e:
                    6b:21:e3:a5:51:17:46:a1:35:0c:b3:0d:9e:1a:0e:
                    3a:97:d2:ac:23:49:fd:ea:37:41:8d:18:57:eb:0b:
                    e1:05:7e:e1:22:be:b4:42:53:f6:cd:23:a9:ab:12:
                    12:53:ed:26:f1:e5:66:f9:61:ea:4c:78:41:35:88:
                    2f:aa:30:c0:89:f4:c5:90:98:2f:33:aa:bc:46:c8:
                    ec:63:d7:17:7b:16:e3:82:ef:24:75:e7:20:4f:dd:
                    c2:51:a5:ff:20:a6:b7:aa:d4:e2:d5:0e:fd:00:84:
                    f6:ba:c6:b3:96:d9:2e:b7:e9:10:b9:61:a1:0c:0b:
                    28:2b:35:51:03:17:c7:3c:03:8a:a2:23:99:ec:c1:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:63:B0:CB:93:34:ED:CC:48:6C:59:C1:FE:BA:AE:4D:0C:8B:54:DD
            X509v3 Authority Key Identifier:
                keyid:F5:14:DA:40:EC:B6:D5:EA:10:58:D6:19:CF:C2:BC:18:CE:0B:98:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:31:2f:1c:b3:60:07:37:9b:40:7e:d2:5b:4c:cc:6d:50:c8:
         84:32:eb:c1:fb:41:4a:19:47:b5:58:44:ea:1e:0d:12:35:76:
         7a:8d:87:b1:cb:78:d6:7e:78:a2:c4:01:2e:1b:6e:3e:1d:68:
         3a:c1:76:32:51:a2:f2:84:8a:48:b6:21:17:b3:72:23:e4:30:
         c1:57:30:9e:ac:c4:01:86:b9:3c:e3:d9:96:ee:4f:25:25:8b:
         99:96:1e:99:1b:4c:c4:1f:d7:a4:51:f1:3a:ec:72:32:df:2a:
         8f:89:34:96:d5:ad:b5:3b:ce:c9:c8:37:e9:f6:97:a6:3e:cd:
         dd:71:9f:f6:33:b4:13:c8:1c:00:b5:38:a0:87:a5:ef:3b:3c:
         ca:66:86:00:e2:66:da:a5:90:d2:b0:13:aa:b4:58:2a:d9:ea:
         81:65:c1:a5:a5:a2:16:43:e6:33:6d:1c:98:fd:a6:c0:fc:5f:
         72:4d:1b:1c:5d:cc:b2:92:a9:aa:4d:b9:3d:62:d2:42:29:03:
         af:5e:3b:03:d1:2b:ac:89:b1:5b:58:6c:3d:c5:c1:cc:65:65:
         ef:bc:3f:e1:71:9c:35:8a:98:0b:d6:d8:a1:19:b1:92:63:fc:
         ef:71:09:26:a9:3c:ef:50:c6:e9:97:df:34:a7:c0:b4:0f:f7:
         05:2c:64:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org