Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/1/34352e3233352e38342e302f32322d3234203d3e20323638313934.roa
File:                     34352e3233352e38342e302f32322d3234203d3e20323638313934.roa (raw, json)
Hash identifier:          oS4HozZDmYc3TADA4fHvI9ds3S2QjgXMOks+ZLCaSts=
Subject key identifier:   6E:A8:23:3A:5A:4A:E6:66:55:77:27:B1:00:26:A9:88:70:18:F8:EB
Certificate issuer:       /CN=94AD6A185F50ED8D655176B64F81F7A1055D7499
Certificate serial:       3C137874B309695A315431DBCA13D0F3E2FC3E64
Authority key identifier: 94:AD:6A:18:5F:50:ED:8D:65:51:76:B6:4F:81:F7:A1:05:5D:74:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94AD6A185F50ED8D655176B64F81F7A1055D7499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/1/34352e3233352e38342e302f32322d3234203d3e20323638313934.roa
Signing time:             Wed 10 Apr 2024 14:13:40 +0000
ROA not before:           Wed 10 Apr 2024 14:08:40 +0000
ROA not after:            Wed 09 Apr 2025 14:13:40 +0000
asID:                     268194
IP address blocks:        45.235.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:13:78:74:b3:09:69:5a:31:54:31:db:ca:13:d0:f3:e2:fc:3e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94AD6A185F50ED8D655176B64F81F7A1055D7499
        Validity
            Not Before: Apr 10 14:08:40 2024 GMT
            Not After : Apr  9 14:13:40 2025 GMT
        Subject: CN=6EA8233A5A4AE666557727B10026A9887018F8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:90:cb:0d:e1:e4:f5:8c:e8:c0:48:88:f5:
                    e2:f4:06:37:6e:a2:2e:60:a0:36:b0:86:e9:69:fe:
                    fe:c3:7f:c3:4e:73:be:fd:9d:29:7c:0a:b2:1d:23:
                    2f:88:9a:4f:d5:2d:8f:46:f4:76:fd:2c:91:16:a2:
                    30:63:4d:37:48:84:ce:b6:c2:e4:31:cb:4f:c6:25:
                    a5:95:6e:0f:c3:d8:96:a4:ec:57:71:5d:0e:63:3c:
                    83:15:83:61:d3:ca:d4:ba:44:4a:da:cb:6d:04:93:
                    ea:77:aa:7d:bb:d9:85:04:bd:75:5f:92:cf:c0:59:
                    6d:f9:cf:17:25:48:3a:62:4d:9f:9a:04:26:b9:91:
                    2e:60:8e:a4:0c:03:10:c8:3c:b4:78:e8:af:65:48:
                    48:d9:4d:f6:b9:ee:28:99:a7:5d:33:78:c1:80:b7:
                    5c:27:b7:98:80:c8:00:38:9a:17:7f:3f:66:ae:7c:
                    b9:fb:65:48:bd:38:81:ce:c6:fe:97:d0:02:1a:8b:
                    5e:11:a7:60:83:17:69:46:c2:ee:52:d5:d3:ce:77:
                    1c:82:df:f2:84:22:e7:7e:2b:1b:f3:fe:02:89:d6:
                    c4:94:11:28:4d:4b:b8:a4:05:97:be:ad:42:10:aa:
                    c7:17:0b:21:f6:ad:2c:40:c1:7a:3e:2a:f1:d1:00:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A8:23:3A:5A:4A:E6:66:55:77:27:B1:00:26:A9:88:70:18:F8:EB
            X509v3 Authority Key Identifier:
                keyid:94:AD:6A:18:5F:50:ED:8D:65:51:76:B6:4F:81:F7:A1:05:5D:74:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/1/94AD6A185F50ED8D655176B64F81F7A1055D7499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94AD6A185F50ED8D655176B64F81F7A1055D7499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/1/34352e3233352e38342e302f32322d3234203d3e20323638313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:71:50:b5:6e:0b:38:bd:b6:8a:06:25:14:57:8b:93:79:9c:
         1a:43:ee:04:e2:78:6b:3a:35:83:d1:21:75:95:c3:ac:5a:0c:
         43:76:18:dc:33:45:27:5a:7d:aa:81:e7:8c:78:36:ec:cc:06:
         93:12:50:21:9c:dd:b2:a6:da:37:bd:40:18:51:1c:03:82:c4:
         eb:75:b2:00:d1:aa:de:ad:71:c7:ff:e9:fd:ef:95:68:be:83:
         3d:d1:37:b0:18:3b:07:71:77:ec:71:7a:42:e1:af:bf:fe:82:
         e5:9b:a6:b7:a4:9b:83:46:5a:6f:92:1e:10:6e:57:86:15:eb:
         87:bd:38:53:8e:47:3e:46:62:9c:f7:52:15:86:19:86:ea:05:
         a3:af:f4:56:5e:68:84:45:2a:58:3c:91:37:68:d7:9d:ce:df:
         b0:f0:c1:9f:be:b1:af:33:53:db:cd:53:f8:3e:43:08:be:91:
         35:21:03:70:a2:8e:c5:a3:8e:4f:2e:3a:55:97:b6:76:24:dc:
         91:ac:54:85:a0:2f:92:73:6e:40:97:bb:30:98:f8:91:09:c0:
         87:d3:2a:44:8a:3c:0f:d9:a3:51:36:e3:dc:b6:7b:65:0e:58:
         6a:35:d1:25:58:04:8b:24:b4:19:31:c5:4d:5e:24:be:0d:f4:
         54:aa:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org