Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3234203d3e20323638323435.roa
File:                     34352e3233362e3230342e302f32322d3234203d3e20323638323435.roa (raw, json)
Hash identifier:          QhuvtwGPAXDHtD4djvPXkO+GuJiSdk1dyqtxYiItFwA=
Subject key identifier:   F4:05:36:23:09:FA:77:F0:42:22:F7:F8:42:3B:6B:5B:36:79:21:24
Certificate issuer:       /CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
Certificate serial:       3DCBD16DB1546E8C7424895A7D91C2D6937DE1BD
Authority key identifier: 97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3234203d3e20323638323435.roa
Signing time:             Tue 27 Dec 2022 19:42:26 +0000
ROA not before:           Tue 27 Dec 2022 19:37:26 +0000
ROA not after:            Tue 26 Dec 2023 19:42:26 +0000
asID:                     268245
IP address blocks:        45.236.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cb:d1:6d:b1:54:6e:8c:74:24:89:5a:7d:91:c2:d6:93:7d:e1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
        Validity
            Not Before: Dec 27 19:37:26 2022 GMT
            Not After : Dec 26 19:42:26 2023 GMT
        Subject: CN=F405362309FA77F04222F7F8423B6B5B36792124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:7e:1a:c2:38:a5:1f:95:f5:16:a1:20:6f:
                    15:a9:0a:72:23:f0:dc:fc:a3:58:3d:80:4f:cf:b8:
                    f8:24:ab:63:08:91:6f:ca:72:b9:22:6a:7d:bb:73:
                    6a:3b:8a:45:c9:d7:c7:6f:45:d0:4b:77:ff:60:a9:
                    a9:8c:1a:e0:d2:34:e4:f5:26:cd:62:84:0f:41:7a:
                    16:b6:6d:a3:be:b5:63:82:c1:37:2e:82:50:1a:e7:
                    60:ed:a8:05:1b:ea:34:19:c3:b4:26:b3:0c:92:14:
                    c9:1f:d6:33:e8:8a:73:d3:91:ae:9c:41:dc:8c:8b:
                    9d:3c:51:24:34:1f:b2:24:1f:3e:76:5f:ee:29:e3:
                    ab:03:6b:6f:ee:7b:d4:e6:41:7b:88:cc:48:41:95:
                    c1:79:72:0d:a6:8e:6d:10:ac:dd:62:72:9e:29:ec:
                    94:f4:95:d6:10:46:5e:d3:44:62:e6:6a:07:ef:31:
                    98:86:a7:58:ac:c0:e2:a5:e5:b0:c5:af:3e:58:f0:
                    39:62:b1:d7:3a:08:23:45:78:96:d2:56:a7:71:76:
                    f7:c1:bb:ee:09:c0:08:9e:bd:b2:db:ce:55:d7:28:
                    88:ff:e7:81:cb:fc:c7:a5:a2:57:de:f6:53:5f:02:
                    e4:ad:59:c2:ad:df:57:f2:9b:b9:9f:f3:7b:37:13:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:05:36:23:09:FA:77:F0:42:22:F7:F8:42:3B:6B:5B:36:79:21:24
            X509v3 Authority Key Identifier:
                keyid:97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3234203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:e1:03:3f:65:d9:5c:43:0a:2f:1a:9d:33:94:af:2d:d1:c0:
         87:05:91:f3:25:77:29:67:37:1a:b0:e3:c7:26:72:57:3c:5d:
         b0:f2:eb:0f:2e:c6:73:fc:e1:b2:d4:e1:35:4d:6d:08:95:61:
         fc:3d:46:e4:f4:af:ea:b4:82:1b:a1:ca:77:19:83:2e:de:1d:
         98:43:f6:c4:ca:1f:13:a9:27:a5:ff:54:81:c1:d4:92:a5:b2:
         12:83:d8:28:c0:59:84:5e:49:bf:66:7f:bd:84:ce:f5:17:39:
         34:d5:7b:7c:3c:20:fd:23:0a:09:5a:88:db:79:3f:42:e5:05:
         85:e1:51:57:48:04:18:ea:68:7c:01:8c:d9:e0:e5:c6:1a:05:
         5a:95:e9:79:07:8d:3d:03:d9:7f:5d:09:f8:d4:46:82:01:df:
         1d:59:78:a0:98:33:8c:a0:2a:1d:c0:3b:3e:26:92:b0:42:36:
         f2:ae:a1:36:f7:2b:4a:47:d2:eb:95:b7:b1:f8:13:62:d8:3a:
         39:4d:08:24:48:ce:12:7a:6e:12:d5:31:c6:68:3f:fb:43:10:
         fa:14:5c:c8:ef:80:3c:0b:0f:60:d9:20:9d:c8:26:e9:41:a3:
         b3:b2:f9:1f:51:6f:22:e2:3e:61:9d:b6:cb:01:f9:42:02:95:
         57:74:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org