Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230322e302f32342d3234203d3e20323638333630.roa
File:                     34352e3233382e3230322e302f32342d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          seMmZea44TgnLUOwLdEzJuDMITzLdnybanGa/YAf87U=
Subject key identifier:   48:99:58:4C:39:24:C3:16:94:A7:62:46:28:A6:DF:09:EE:9B:4B:4B
Certificate issuer:       /CN=7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6
Certificate serial:       678E5ED1834FB2CCAD038CDDEB237D30C6C05804
Authority key identifier: 7A:2B:EE:AA:0E:27:59:59:36:9C:F7:B5:5C:1B:20:5A:D0:C3:CE:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230322e302f32342d3234203d3e20323638333630.roa
Signing time:             Wed 03 Apr 2024 21:57:56 +0000
ROA not before:           Wed 03 Apr 2024 21:52:56 +0000
ROA not after:            Wed 02 Apr 2025 21:57:56 +0000
asID:                     268360
IP address blocks:        45.238.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8e:5e:d1:83:4f:b2:cc:ad:03:8c:dd:eb:23:7d:30:c6:c0:58:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6
        Validity
            Not Before: Apr  3 21:52:56 2024 GMT
            Not After : Apr  2 21:57:56 2025 GMT
        Subject: CN=4899584C3924C31694A7624628A6DF09EE9B4B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:78:a5:48:86:7c:2a:2c:05:b4:7c:2b:73:
                    9e:94:28:33:65:dd:4d:ce:cd:5c:67:cb:db:3d:d5:
                    34:61:9e:6f:a6:31:c5:45:89:ae:5c:60:3d:4a:11:
                    97:dd:2c:8b:96:a9:71:63:ba:97:77:cf:40:03:f6:
                    e0:bc:4c:1c:3d:e5:5c:f8:c3:b6:6a:8b:ae:67:08:
                    b2:d0:2b:19:60:29:62:b5:98:e4:83:30:70:02:48:
                    6b:b9:6c:6f:d5:f1:7e:26:7a:9d:71:69:c4:af:27:
                    e0:a0:58:fb:d1:2d:2c:e5:e2:1e:27:87:8d:b8:17:
                    f3:f1:e0:12:25:1e:e5:e6:0d:6a:7c:f9:a9:6e:37:
                    bb:43:b7:d5:0f:fe:ab:33:b6:5d:8a:67:36:16:93:
                    7f:0f:d1:d7:b3:f4:b9:9e:f5:de:d4:e3:d1:37:1f:
                    9c:68:8c:3a:8c:a1:aa:6f:b9:fc:ac:f9:e6:99:8a:
                    6d:9d:5c:d7:0e:87:f8:82:80:a5:f9:23:d4:fd:a6:
                    a0:aa:de:e6:0b:94:02:2f:87:59:b7:fe:2d:b6:29:
                    ef:26:9f:94:ab:9d:43:4f:f1:e6:92:ba:71:5b:4d:
                    26:6a:a9:3e:ff:1b:e2:86:91:46:ac:80:b9:a4:00:
                    cd:a4:11:03:68:8c:9c:71:8d:e5:3a:0b:0f:be:25:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:99:58:4C:39:24:C3:16:94:A7:62:46:28:A6:DF:09:EE:9B:4B:4B
            X509v3 Authority Key Identifier:
                keyid:7A:2B:EE:AA:0E:27:59:59:36:9C:F7:B5:5C:1B:20:5A:D0:C3:CE:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2BEEAA0E275959369CF7B55C1B205AD0C3CEF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/2/34352e3233382e3230322e302f32342d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:71:62:ac:a7:df:59:e6:6e:90:b8:e1:1d:69:4f:53:e0:
         2d:ec:de:4c:3a:ca:23:f5:a8:7f:16:49:d6:4e:4a:64:11:b1:
         44:c0:75:eb:57:03:c8:74:14:bc:e1:1a:d7:91:76:e6:bb:f2:
         d2:47:40:27:5a:a4:3d:81:5a:c5:b3:13:a6:22:94:c0:bf:fd:
         97:8a:00:c9:78:16:67:33:24:9b:ee:d7:6a:1d:dc:cd:78:41:
         84:0d:06:7e:28:43:41:db:81:ad:f9:b0:d8:6c:5e:4f:b7:ce:
         8a:be:f5:62:3c:ab:ec:dc:4d:9e:5f:a0:91:da:b8:c2:58:79:
         95:24:d4:89:99:4f:60:a6:cd:cb:5e:08:94:09:79:99:9f:02:
         b2:fa:d6:30:91:2c:ed:e2:22:27:5c:99:c1:1e:98:0c:5a:ad:
         d7:dc:2a:08:b5:73:bf:ac:f1:cb:d9:9f:e7:9d:9b:6c:71:b3:
         f5:74:5b:88:c7:ed:b9:37:f0:e8:06:84:49:ce:e7:4e:4f:31:
         91:52:cc:f6:bf:a6:84:62:82:b3:57:a6:52:ee:95:79:b4:77:
         36:ce:33:c1:21:92:89:fb:be:e0:ba:e5:20:a7:d5:b6:64:fb:
         7e:f4:46:62:98:60:dd:c2:31:e0:7d:53:fb:13:db:7e:6b:0d:
         04:6f:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 21:27:32 2024 by rpki-client on console-ams.rpki-client.org