Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa
File:                     34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          ti5vIkZxmLnL/wHgS/pb5Qqv5Af1G5m4cy+7XfPqvyA=
Subject key identifier:   60:39:C7:81:B2:87:3F:43:52:03:64:A2:21:B4:08:AA:A0:70:DF:FD
Certificate issuer:       /CN=7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6
Certificate serial:       7E27A7B7BCAD8E4BC052A45F3AA1929506D4FD87
Authority key identifier: 7A:2B:EE:AA:0E:27:59:59:36:9C:F7:B5:5C:1B:20:5A:D0:C3:CE:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa
Signing time:             Wed 03 Apr 2024 21:57:56 +0000
ROA not before:           Wed 03 Apr 2024 21:52:56 +0000
ROA not after:            Wed 02 Apr 2025 21:57:56 +0000
asID:                     268360
IP address blocks:        45.238.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:a7:b7:bc:ad:8e:4b:c0:52:a4:5f:3a:a1:92:95:06:d4:fd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6
        Validity
            Not Before: Apr  3 21:52:56 2024 GMT
            Not After : Apr  2 21:57:56 2025 GMT
        Subject: CN=6039C781B2873F43520364A221B408AAA070DFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:91:3f:7d:84:dd:2c:60:1b:28:a1:21:bb:
                    dc:f3:d8:2a:99:fd:c0:2d:c7:16:ec:84:a6:3e:fb:
                    38:06:bc:ac:d2:f6:6a:07:b8:32:a3:8a:bc:0d:56:
                    cc:d1:22:52:34:3a:2f:5e:30:2f:8a:4d:f6:6f:36:
                    c6:58:2d:a0:77:9c:2c:d3:81:e9:22:dd:63:b5:1b:
                    9d:80:00:cf:c5:27:da:1c:18:ba:5a:91:5d:a4:ed:
                    46:b8:33:07:66:a5:6f:56:fd:e5:af:b1:45:63:a1:
                    94:ba:cf:72:bc:00:be:f1:3e:5d:17:2b:db:a7:b0:
                    c0:5b:11:1f:c5:4b:a1:5a:f9:c3:9a:9e:fe:63:f6:
                    89:ca:52:1b:64:98:6c:d1:ef:04:2c:51:f3:41:0c:
                    e2:ed:13:30:c3:5c:03:1d:15:7a:93:3a:23:d6:06:
                    b5:b4:74:fb:fe:8d:86:c2:f1:1c:bb:e6:6a:06:61:
                    81:b7:3c:b3:9d:04:7a:a5:89:17:d4:b4:4a:d4:41:
                    42:49:d8:f6:d3:3f:27:24:51:ec:82:ca:b2:16:81:
                    1b:14:d6:5e:bd:fc:4e:3c:4f:1e:50:49:06:d3:31:
                    c2:2c:40:30:bb:2b:ff:d4:39:55:ad:02:0a:8e:06:
                    b5:a5:22:d7:d0:7a:ef:f2:ca:19:d5:fa:28:8a:77:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:C7:81:B2:87:3F:43:52:03:64:A2:21:B4:08:AA:A0:70:DF:FD
            X509v3 Authority Key Identifier:
                keyid:7A:2B:EE:AA:0E:27:59:59:36:9C:F7:B5:5C:1B:20:5A:D0:C3:CE:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:0b:6e:9c:23:82:9a:50:f3:6f:cb:e2:0e:50:83:66:e2:81:
         98:50:22:86:a0:73:67:3f:82:20:19:35:c7:06:fd:62:11:8b:
         a1:9c:e4:86:07:f2:22:2f:92:69:b2:40:15:c1:59:1b:ce:5d:
         7e:84:06:d2:87:eb:bc:2e:02:ee:df:79:63:d0:d6:e6:05:6a:
         5a:e1:e8:af:2a:88:f4:dc:b9:9d:2e:43:d7:88:91:4a:70:b7:
         6e:f8:73:f0:41:3b:59:5f:33:7a:5a:79:5e:d3:54:99:ea:3f:
         42:14:44:95:42:b7:56:54:41:0c:49:0e:39:6a:7f:b6:01:51:
         1b:e7:b8:97:4f:85:8c:6a:87:dc:75:f8:f6:c7:0d:94:6c:6f:
         4b:9a:47:34:2a:32:9f:9a:64:0a:73:16:29:8e:32:65:ad:29:
         ed:a1:31:d0:7d:c2:f7:f0:18:ee:52:8a:6a:4c:70:4e:20:41:
         3a:f0:9a:6f:0c:fb:fd:b7:51:fb:80:dc:fc:1f:e5:68:fa:2d:
         b7:4b:46:36:93:94:87:8c:50:e3:88:66:13:dd:13:83:6a:d4:
         d8:0d:4a:78:8b:ab:15:df:cc:d8:44:39:17:7a:7b:ad:25:3c:
         3d:f2:63:f7:59:c6:ec:95:da:ca:81:a5:0c:fe:74:15:7a:a8:
         90:6c:e9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 21:27:32 2024 by rpki-client on console-ams.rpki-client.org