Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa
File:                     34352e3233382e38342e302f32322d3234203d3e20323638333239.roa (raw, json)
Hash identifier:          CcD6Lk8iV0HL/r2F8hBHSYUR06RTXVGuQOyeIf2FXms=
Subject key identifier:   34:71:30:8D:16:FA:E7:75:92:B0:AB:BE:01:2B:EC:A1:11:F6:E2:C3
Certificate issuer:       /CN=488761C1E9B493D5AD03511976F475CA3FB5705D
Certificate serial:       41B127D6E999FE37FDE991B4CDAB39207650EFFE
Authority key identifier: 48:87:61:C1:E9:B4:93:D5:AD:03:51:19:76:F4:75:CA:3F:B5:70:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488761C1E9B493D5AD03511976F475CA3FB5705D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa
Signing time:             Thu 04 Apr 2024 20:00:54 +0000
ROA not before:           Thu 04 Apr 2024 19:55:54 +0000
ROA not after:            Thu 03 Apr 2025 20:00:54 +0000
asID:                     268329
IP address blocks:        45.238.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b1:27:d6:e9:99:fe:37:fd:e9:91:b4:cd:ab:39:20:76:50:ef:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488761C1E9B493D5AD03511976F475CA3FB5705D
        Validity
            Not Before: Apr  4 19:55:54 2024 GMT
            Not After : Apr  3 20:00:54 2025 GMT
        Subject: CN=3471308D16FAE77592B0ABBE012BECA111F6E2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:8f:e4:a1:4b:8d:74:49:9e:09:ea:4b:2e:
                    38:3c:26:08:32:5c:9c:e5:1f:02:23:07:c8:10:5c:
                    9b:6b:a3:6f:64:6a:e4:cc:dc:f0:1e:32:f7:54:5b:
                    24:b3:18:d6:9a:47:92:d2:0c:d8:6a:34:27:04:fa:
                    35:f3:e4:8e:8f:7b:67:34:42:96:5a:73:43:1e:af:
                    73:d0:03:1e:df:ce:04:79:48:54:01:fe:4f:9b:05:
                    ee:9e:10:3b:df:27:00:65:8b:b2:8b:cc:dd:4c:ab:
                    4d:01:86:00:a2:a5:44:aa:3f:33:50:75:98:3c:a6:
                    6e:d4:72:9b:77:35:cb:8b:85:a1:36:4b:47:e9:c2:
                    d0:78:e8:be:77:6f:95:35:b8:f3:03:b3:e5:6e:b5:
                    01:97:fc:b7:e4:e1:7d:79:f8:ad:f1:70:00:5a:34:
                    ec:84:8d:8f:cf:39:ad:5f:a9:38:b7:fd:56:9e:ff:
                    a9:61:b9:75:52:dc:d5:f8:d7:01:db:85:9f:ef:56:
                    12:d1:ce:66:10:ae:0a:55:f6:d2:33:3d:bd:a6:ea:
                    f9:88:a1:1a:a2:79:7d:f6:58:44:b5:04:bd:10:6e:
                    5c:70:e4:35:93:1c:5e:05:e5:e7:54:92:a4:ba:a1:
                    22:d3:c2:3a:2c:53:4b:60:d3:e0:d1:2d:fc:64:6b:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:71:30:8D:16:FA:E7:75:92:B0:AB:BE:01:2B:EC:A1:11:F6:E2:C3
            X509v3 Authority Key Identifier:
                keyid:48:87:61:C1:E9:B4:93:D5:AD:03:51:19:76:F4:75:CA:3F:B5:70:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/488761C1E9B493D5AD03511976F475CA3FB5705D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488761C1E9B493D5AD03511976F475CA3FB5705D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:a4:f9:b4:da:f3:c8:12:93:fd:7b:3f:c0:1a:c9:2a:e7:
         d1:d0:50:ae:29:06:40:fc:00:f9:22:b2:21:5f:0d:ed:50:30:
         09:74:94:dd:e2:bf:10:05:9e:b1:59:f6:a7:3f:9d:27:9b:f1:
         80:e3:9f:85:83:34:eb:5c:51:55:b3:77:3b:11:f6:21:a4:0a:
         61:f8:46:06:f8:3c:51:d2:d8:a2:33:13:c5:0b:41:0f:05:44:
         34:c2:03:d8:54:96:65:cf:9d:ee:27:c6:a1:05:f4:6d:3a:cd:
         b5:fe:8e:86:a6:62:83:b4:f9:45:25:32:a9:1f:21:84:32:d6:
         f9:91:75:e2:ba:a2:fa:c6:46:8d:0e:66:0f:1e:db:47:67:50:
         d7:83:b8:03:f9:54:27:57:f9:e3:12:b9:7d:63:57:10:01:08:
         4f:ae:db:a9:96:ab:3d:86:8b:eb:ac:65:6a:3d:71:8c:32:ed:
         a4:41:d5:5b:ec:9f:b5:5b:4d:35:4f:30:d9:fa:f1:59:57:2a:
         3e:7d:d6:06:7f:5a:02:78:ab:a8:22:fd:60:35:2a:b3:68:7b:
         b2:74:f0:d4:c8:cd:d2:e3:27:3d:51:cf:3c:01:2c:bd:04:7a:
         a6:ea:68:dd:5f:ce:85:0d:fd:0a:3b:98:3d:5b:64:67:fc:31:
         64:f0:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org