Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa
File:                     34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa (raw, json)
Hash identifier:          zAlrKN057hfxmQ85ockYWnSW5bu3tT20Tp9AkxR1E4A=
Subject key identifier:   1B:98:69:7F:B0:9D:98:D5:3D:E2:9D:D2:6F:0E:57:5C:5A:3A:70:CE
Certificate issuer:       /CN=BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5
Certificate serial:       3E1F7A09F83D1806309177C563B32CF61C7E564D
Authority key identifier: BF:7E:A7:36:40:E6:02:9F:6A:17:BE:AA:62:D4:4D:3E:AB:DA:4A:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa
Signing time:             Thu 15 Feb 2024 23:37:45 +0000
ROA not before:           Thu 15 Feb 2024 23:32:45 +0000
ROA not after:            Thu 13 Feb 2025 23:37:45 +0000
asID:                     267246
IP address blocks:        45.230.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1f:7a:09:f8:3d:18:06:30:91:77:c5:63:b3:2c:f6:1c:7e:56:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5
        Validity
            Not Before: Feb 15 23:32:45 2024 GMT
            Not After : Feb 13 23:37:45 2025 GMT
        Subject: CN=1B98697FB09D98D53DE29DD26F0E575C5A3A70CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:27:11:12:73:68:af:94:b8:85:3d:17:b2:
                    8f:2d:ae:f0:cf:91:e4:19:02:e3:99:db:2a:57:75:
                    f4:00:a1:b8:51:e9:06:17:84:dc:8a:13:97:2a:ce:
                    28:4b:75:9b:af:16:6b:b3:be:02:62:19:be:55:f2:
                    e7:8f:35:4f:b4:23:ef:75:f2:09:f0:71:28:c5:0d:
                    a6:e6:c7:1f:51:c1:5a:fc:4f:c5:1a:43:e7:ca:d4:
                    a7:fb:af:b9:9e:fe:00:33:9d:f9:5c:ed:1a:b4:41:
                    2b:0c:8c:35:88:9b:c0:99:72:dc:cd:76:00:b9:9c:
                    28:af:44:b4:68:c5:b0:0d:a9:24:21:36:1a:b0:64:
                    10:74:80:97:24:d2:87:e3:40:21:39:42:6a:2e:8c:
                    50:98:ad:f4:ad:b3:93:0c:9a:18:c1:42:a2:0d:a5:
                    0f:6b:b6:a0:e5:ed:80:26:be:b0:15:d8:b4:08:f4:
                    76:56:5a:8d:ca:63:a7:82:c5:a3:36:72:59:0f:3e:
                    7e:e6:65:92:fe:4f:f3:f5:af:4e:13:a4:51:6f:f8:
                    29:b5:80:72:ad:a4:07:2f:a5:bb:0f:27:48:23:66:
                    8b:77:20:b7:5b:c0:f3:dd:28:8c:6d:5b:d1:99:ad:
                    60:c7:e4:17:05:46:c8:29:78:fc:03:ed:3d:ee:56:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:98:69:7F:B0:9D:98:D5:3D:E2:9D:D2:6F:0E:57:5C:5A:3A:70:CE
            X509v3 Authority Key Identifier:
                keyid:BF:7E:A7:36:40:E6:02:9F:6A:17:BE:AA:62:D4:4D:3E:AB:DA:4A:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:58:da:0d:2e:28:a7:16:ad:ad:4c:8a:2a:07:f8:2e:58:16:
         eb:35:59:00:b0:d6:cb:d0:5c:a3:92:72:3a:bb:2b:08:eb:be:
         82:7b:94:1e:18:c0:8c:2a:0f:af:34:77:1d:1f:84:c0:ce:da:
         08:91:b5:a7:2d:5c:74:39:1b:0c:0c:0d:d2:98:29:6b:47:af:
         1c:26:a4:8e:42:ff:d6:c4:c7:22:21:aa:7e:2b:f0:e7:ef:4e:
         ee:97:8b:f1:ba:3e:2f:40:dd:ac:df:8c:c9:97:a0:0a:c5:04:
         1e:1d:67:e5:51:e1:d6:8e:44:0f:6c:b4:11:48:b9:63:d6:fd:
         a7:4f:cd:e4:c3:8f:c9:ca:a1:be:c2:b7:5e:af:e7:32:08:12:
         50:a5:7d:21:b1:76:f0:e7:7f:53:44:8d:c3:61:64:a1:c1:a9:
         23:b9:00:90:a8:4c:de:5c:dc:52:e2:9e:30:81:dd:da:7c:d0:
         3d:8b:9e:bc:1d:3e:c9:ff:58:2b:7c:47:c6:d6:30:90:55:7e:
         e5:c2:37:39:f8:f3:3e:da:d6:d4:f7:72:08:f0:77:4e:80:57:
         6f:a5:56:2f:0d:08:42:5a:19:64:2f:87:8e:54:d0:8c:02:e1:
         12:b6:0f:66:64:ca:fb:dc:aa:0c:a4:3d:0d:a9:b1:5e:8f:21:
         15:f4:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org