Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32322d3232203d3e20323636393238.roa
File:                     34352e3232352e33322e302f32322d3232203d3e20323636393238.roa (raw, json)
Hash identifier:          0bcqIh4095UDNvy8TKxvZJLHlSAPP0PYI3uIU8TDRb8=
Subject key identifier:   8A:96:81:96:9D:1D:51:5F:2C:9A:8E:FF:7E:AE:41:AB:02:AD:31:14
Certificate issuer:       /CN=3CA7B50C9761C3D5278E34F848A83124161D5747
Certificate serial:       15FD099BA1B38DCF6B6E20CBB690BB70761A07F0
Authority key identifier: 3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32322d3232203d3e20323636393238.roa
Signing time:             Mon 10 Oct 2022 16:00:04 +0000
ROA not before:           Mon 10 Oct 2022 15:55:04 +0000
ROA not after:            Mon 09 Oct 2023 16:00:04 +0000
asID:                     266928
IP address blocks:        45.225.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fd:09:9b:a1:b3:8d:cf:6b:6e:20:cb:b6:90:bb:70:76:1a:07:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA7B50C9761C3D5278E34F848A83124161D5747
        Validity
            Not Before: Oct 10 15:55:04 2022 GMT
            Not After : Oct  9 16:00:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:d4:5b:aa:00:e6:21:59:59:01:0f:bf:4f:
                    b1:69:14:76:b7:4f:8c:37:36:f2:94:14:37:dc:da:
                    79:b6:cd:d9:12:7d:43:a9:58:26:de:9f:9b:17:c5:
                    4e:da:1e:a8:aa:94:36:a9:4e:30:04:1c:ce:f7:85:
                    cd:ba:f6:1b:79:f6:98:da:88:1d:79:4b:e6:42:12:
                    c7:f6:43:b7:59:8c:a8:90:92:ef:ad:57:70:7f:73:
                    11:ee:22:17:95:d1:81:47:b9:b6:e4:28:ca:75:9b:
                    4d:1c:06:ae:ef:0f:44:ff:1c:84:c8:fc:7e:e3:90:
                    20:b0:3c:20:c7:84:dc:79:f8:a2:af:d4:74:85:00:
                    9c:1c:39:60:f9:68:7f:1d:e6:c6:4e:5a:3b:47:d7:
                    5a:f3:f7:7f:13:00:65:c3:ee:a9:df:64:cf:58:b9:
                    b6:9b:51:e0:b1:cd:c1:14:de:a4:37:0a:d6:4f:48:
                    3c:73:2b:33:60:aa:58:66:07:be:12:32:0d:b9:82:
                    85:83:0b:85:1b:33:5f:8f:69:33:8c:30:0e:fb:12:
                    57:2c:06:bd:68:cb:e1:0e:eb:01:fa:71:57:2a:16:
                    04:e8:f3:a1:4c:02:4f:55:a8:3e:49:b3:51:6b:1e:
                    16:00:de:48:8e:99:f5:df:4d:b7:c9:e1:57:c0:20:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:96:81:96:9D:1D:51:5F:2C:9A:8E:FF:7E:AE:41:AB:02:AD:31:14
            X509v3 Authority Key Identifier:
                keyid:3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/3CA7B50C9761C3D5278E34F848A83124161D5747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32322d3232203d3e20323636393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:20:0a:d4:15:00:d8:29:9e:d1:45:9c:dc:ab:af:d6:e3:68:
         f6:fd:95:79:93:a2:03:1e:60:ab:38:6a:68:51:c3:3d:0f:67:
         e5:cf:fc:92:61:0d:c0:13:0a:21:a2:a4:ff:f0:69:5a:f1:77:
         ce:7f:e8:b5:04:8d:4a:78:54:5f:58:44:58:1f:d9:40:e4:5b:
         e4:b9:54:c9:67:1f:27:29:3b:29:93:68:59:78:39:1c:c1:bc:
         84:62:b0:1e:bd:bb:5f:37:f5:2c:8b:73:a6:f7:da:fd:bd:59:
         e9:1a:c5:9d:e5:2b:86:75:6f:0a:d6:71:5a:c6:96:d0:cb:14:
         a5:24:b4:6e:5e:06:75:11:74:c2:ab:3a:e8:20:88:a4:6f:c0:
         3d:31:0a:35:79:c1:0a:3b:4f:4a:af:f2:df:46:3d:4a:72:b0:
         3b:14:c2:75:06:01:25:48:c4:ff:db:a9:f1:c8:51:f8:7b:8b:
         e9:59:43:05:94:78:c1:f3:88:78:f9:89:be:08:70:30:53:21:
         18:cd:4f:57:bb:09:70:1e:fa:d0:ca:d0:25:ad:ae:a0:f4:f1:
         fb:ee:c2:86:78:06:56:b6:c6:84:63:48:e2:27:0b:d2:aa:d7:
         b5:c7:57:3f:6d:7d:3d:c9:f3:f4:c3:12:06:69:34:d2:66:61:
         ec:16:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org