Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa
File:                     34352e3232392e35322e302f32322d3232203d3e20323637313234.roa (raw, json)
Hash identifier:          /PEXotdggbIXI0VM5WyHjc5UfDOgvXFsRxBtIcV0wms=
Subject key identifier:   CF:0A:00:8B:E3:D3:71:4D:74:50:F7:CD:F3:DB:65:3B:C9:92:2B:D6
Certificate issuer:       /CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
Certificate serial:       756DCB3D47AD0403986BDDE9676B28DDDDF92DEC
Authority key identifier: DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa
Signing time:             Fri 08 Mar 2024 14:15:22 +0000
ROA not before:           Fri 08 Mar 2024 14:10:22 +0000
ROA not after:            Fri 07 Mar 2025 14:15:22 +0000
asID:                     267124
IP address blocks:        45.229.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6d:cb:3d:47:ad:04:03:98:6b:dd:e9:67:6b:28:dd:dd:f9:2d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
        Validity
            Not Before: Mar  8 14:10:22 2024 GMT
            Not After : Mar  7 14:15:22 2025 GMT
        Subject: CN=CF0A008BE3D3714D7450F7CDF3DB653BC9922BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:0d:02:ee:6d:29:c4:37:9e:ca:1c:6f:30:
                    a3:05:63:98:0e:81:4e:f0:88:f6:2b:8b:b8:e8:7a:
                    43:1b:d5:8e:14:74:ca:43:c3:19:0d:cc:a9:48:68:
                    2e:14:e3:d1:82:cc:f6:a3:37:e3:f8:48:01:c5:8d:
                    2b:37:ee:3d:4f:69:4f:a8:45:95:20:98:c3:3a:e3:
                    af:86:5d:47:fd:55:77:15:fa:b4:89:14:e0:86:38:
                    65:56:2b:b2:da:6c:a8:b9:35:2c:7b:5d:0f:11:6e:
                    9b:ec:83:3f:cb:6f:4e:1a:08:41:d8:8a:02:58:27:
                    a1:a9:a2:cd:47:7d:8c:72:49:2c:84:82:58:bf:e0:
                    04:8e:66:e8:b3:e3:e9:d1:57:f5:9f:8f:59:ee:09:
                    9b:7c:27:cd:90:19:ae:7a:24:7e:84:8f:1a:34:fa:
                    d8:0f:6d:76:eb:50:ee:1e:b7:50:3f:90:87:1e:fc:
                    cb:2f:dd:06:05:a1:3c:a6:dc:83:46:ac:97:e4:4f:
                    40:53:18:15:32:ac:e9:d6:1d:7c:53:22:6e:81:fb:
                    f7:73:8e:c7:3d:43:c8:b0:c1:07:6e:b9:49:5b:52:
                    f4:d8:c8:36:1e:90:66:24:8c:83:36:89:bf:c8:c2:
                    44:7d:fc:1f:14:2b:35:68:b0:0b:35:37:83:dd:0e:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0A:00:8B:E3:D3:71:4D:74:50:F7:CD:F3:DB:65:3B:C9:92:2B:D6
            X509v3 Authority Key Identifier:
                keyid:DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32322d3232203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:28:58:b7:98:90:a5:de:86:75:da:8f:c1:ed:c5:68:f4:
         05:12:9e:6a:4c:26:a2:9b:e1:f6:ee:d7:b3:3b:6f:b3:f5:4a:
         d6:07:f1:1e:ca:24:e6:a5:57:e9:85:49:ab:88:ac:ea:7b:fb:
         49:51:55:0a:5f:e8:2c:59:b7:9a:6e:3e:33:9d:37:ba:c4:98:
         56:6f:5c:bd:a3:e4:9d:a1:4d:67:c7:7e:d2:aa:d9:0b:b5:0b:
         f8:e5:41:aa:5c:f0:f6:88:02:61:c6:a6:19:64:44:22:2e:be:
         b1:98:57:30:6c:5b:20:ff:e2:f7:a8:3f:42:38:a2:2a:a4:c0:
         82:5d:68:db:3b:4f:79:d3:fc:df:48:9c:0a:03:80:3b:4c:58:
         62:0e:88:92:25:43:b7:13:b7:b1:a8:7b:62:eb:e6:46:69:0c:
         2b:43:96:b6:ac:55:85:0d:d3:25:47:db:16:de:32:db:7e:97:
         bf:47:1e:64:97:84:d9:60:e4:71:b8:ba:79:be:40:78:18:b7:
         f3:b5:60:48:a7:c6:1d:6d:fb:87:b2:5f:6f:08:a3:ff:41:55:
         08:57:c4:fb:c9:ba:18:64:2a:af:c9:59:53:a8:02:02:e2:fb:
         0e:70:14:80:80:1c:27:18:08:b7:97:92:d7:12:6b:d0:c1:79:
         4d:f2:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:53 2024 by rpki-client on console-ams.rpki-client.org