Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37362e302f32322d3232203d3e20323637323936.roa
File:                     34352e3233332e37362e302f32322d3232203d3e20323637323936.roa (raw, json)
Hash identifier:          LV7tTwet+wisyzRPPQ+MuLk0x/ge8zVJcag/imNrxpE=
Subject key identifier:   3E:8C:02:63:8D:A7:92:D8:E9:8A:CA:2B:36:B7:81:29:F8:0C:61:A3
Certificate issuer:       /CN=F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47
Certificate serial:       52E87F3469677D91B5E3B6EB1EDFF648C50FA5C2
Authority key identifier: F0:D2:D6:58:1E:C2:A7:A4:B1:58:70:9A:A4:0F:4D:6F:A7:86:FF:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37362e302f32322d3232203d3e20323637323936.roa
Signing time:             Thu 29 Jun 2023 15:16:58 +0000
ROA not before:           Thu 29 Jun 2023 15:11:58 +0000
ROA not after:            Thu 27 Jun 2024 15:16:58 +0000
asID:                     267296
IP address blocks:        45.233.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e8:7f:34:69:67:7d:91:b5:e3:b6:eb:1e:df:f6:48:c5:0f:a5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47
        Validity
            Not Before: Jun 29 15:11:58 2023 GMT
            Not After : Jun 27 15:16:58 2024 GMT
        Subject: CN=3E8C02638DA792D8E98ACA2B36B78129F80C61A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:50:d4:c2:4f:b4:64:93:1e:70:d2:25:4e:
                    b6:1b:ac:8e:96:95:2f:0f:d8:bb:c1:09:2b:30:a4:
                    2c:07:f6:95:3a:0b:55:91:43:bd:4c:18:09:aa:95:
                    4c:1c:e4:ca:88:b0:ec:1a:f8:a2:f5:8d:64:25:78:
                    db:8c:68:7f:ee:7b:d6:b0:17:cb:e5:34:ca:f8:ed:
                    73:2b:11:81:82:93:6d:b4:ba:58:b7:b4:42:a2:d8:
                    66:96:26:53:5a:a9:61:1e:1c:4e:d8:2a:78:7c:1c:
                    b9:d7:fd:99:8e:94:42:2d:a5:81:a6:0c:80:2c:5e:
                    7d:5c:6e:d8:68:11:59:70:0d:a0:b1:a0:f1:de:ac:
                    f9:5a:99:2a:4c:ff:0d:98:d8:b1:69:a7:fd:6e:7d:
                    c8:11:e2:18:88:b0:62:79:eb:23:a3:16:cd:14:14:
                    c1:c0:f3:99:75:ed:9f:d3:20:5d:ea:d8:44:b6:ba:
                    56:62:1c:7c:86:43:45:1c:22:ac:86:7b:ed:c2:ae:
                    86:41:79:b8:b1:f4:66:f6:a2:e0:e3:0a:63:32:c9:
                    72:40:0b:13:85:2e:39:2e:88:b4:92:e3:99:15:bd:
                    37:1f:d3:ee:0a:fd:7a:b9:65:e9:76:30:de:ce:c4:
                    53:57:1f:59:a6:9e:7e:c8:09:1e:e9:f2:cb:0c:3d:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8C:02:63:8D:A7:92:D8:E9:8A:CA:2B:36:B7:81:29:F8:0C:61:A3
            X509v3 Authority Key Identifier:
                keyid:F0:D2:D6:58:1E:C2:A7:A4:B1:58:70:9A:A4:0F:4D:6F:A7:86:FF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/34352e3233332e37362e302f32322d3232203d3e20323637323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:7b:1d:cb:ab:05:b5:58:a9:3f:0c:d6:02:92:86:ec:8a:bf:
         3f:cd:b0:4f:50:9e:cd:07:38:d8:e1:d1:63:2c:14:2d:68:75:
         aa:df:9a:15:c1:c5:2d:f3:cd:ea:a8:10:9b:17:d7:a7:08:e1:
         d8:4c:c4:97:a8:7a:b8:e0:85:87:10:47:e1:50:4d:82:42:61:
         04:b1:da:5d:ca:65:37:e0:e9:fd:ef:7f:9a:59:d7:7b:cf:f8:
         96:ca:c6:e2:02:b8:a8:94:fb:51:0f:f9:93:64:e2:0c:94:5c:
         82:d6:0a:3b:c7:98:5c:ea:3f:72:aa:93:70:e8:5b:68:d8:f0:
         f4:f8:2d:0c:4f:99:64:6f:67:57:d9:ce:79:ab:f6:e6:4d:d0:
         d2:96:b1:4e:77:28:83:d3:35:01:b2:0a:8e:aa:95:c7:bb:fe:
         0f:a8:7b:8c:ba:c9:8d:c7:f5:2a:67:0d:c2:2c:92:a7:86:ef:
         49:d5:3a:63:74:af:b9:a2:c3:e3:c8:cd:c7:f4:b0:5f:f4:34:
         32:da:24:2c:a1:76:14:2a:60:fb:ce:c4:32:ca:fd:5f:25:8c:
         f8:60:1e:ac:02:72:bc:b5:8c:bf:8e:43:80:24:9f:5d:0d:5a:
         f0:11:94:af:6c:ea:45:12:9e:9e:37:88:90:02:5f:9d:bc:5a:
         20:f6:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org