Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32332d3233203d3e20323638303734.roa
File:                     34352e3136372e3133322e302f32332d3233203d3e20323638303734.roa (raw, json)
Hash identifier:          igHlNmHDl9c2ojgxfLDqyBhea6JYHjACqFKIDD0McZA=
Subject key identifier:   4C:0B:7E:C4:F5:CA:72:62:3D:F4:66:B6:1D:39:FE:15:67:64:5B:B5
Certificate issuer:       /CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
Certificate serial:       6A44D2ADDFD1C80621C3F664B50CEBA9C6366C2D
Authority key identifier: 09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32332d3233203d3e20323638303734.roa
Signing time:             Sun 03 Mar 2024 18:00:01 +0000
ROA not before:           Sun 03 Mar 2024 17:55:01 +0000
ROA not after:            Mon 03 Mar 2025 18:00:01 +0000
asID:                     268074
IP address blocks:        45.167.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:44:d2:ad:df:d1:c8:06:21:c3:f6:64:b5:0c:eb:a9:c6:36:6c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
        Validity
            Not Before: Mar  3 17:55:01 2024 GMT
            Not After : Mar  3 18:00:01 2025 GMT
        Subject: CN=3082010A0282010100D2F3CBB63544295099C5CF4B9585AB471F1636EDF7050D16D70F0A821752BFB8461B5DA338737152C0DEDA1A15C84D2F897CCC25B8C1DE315FF7778A5D5D20CB3C666DDB15E08CBF2CD9C6AF759FB5693DF57C6DEE917C367BAB351597DFE85815F424E5C1C46EB91A4B9DFB75AE5DB9177DC5B0C430361804DDE385DD7604468705923AAFFC9CA64A3DAB6BD5D973CA953788F1292883EFA009E583CCAFB8E628DDA779A4B546828F2414E7C160713907539739735430829B7CA2684903DB4948D640587D357B76CEA4C22087FDA7FECAE0BEE4A9FF6E266FD7E9A32EA39FCE101E3D6C6A26F8E9DC298B2BDC8BD78E80FB8B5D6634E2BAAE996B0B182D51230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:cb:b6:35:44:29:50:99:c5:cf:4b:95:85:
                    ab:47:1f:16:36:ed:f7:05:0d:16:d7:0f:0a:82:17:
                    52:bf:b8:46:1b:5d:a3:38:73:71:52:c0:de:da:1a:
                    15:c8:4d:2f:89:7c:cc:25:b8:c1:de:31:5f:f7:77:
                    8a:5d:5d:20:cb:3c:66:6d:db:15:e0:8c:bf:2c:d9:
                    c6:af:75:9f:b5:69:3d:f5:7c:6d:ee:91:7c:36:7b:
                    ab:35:15:97:df:e8:58:15:f4:24:e5:c1:c4:6e:b9:
                    1a:4b:9d:fb:75:ae:5d:b9:17:7d:c5:b0:c4:30:36:
                    18:04:dd:e3:85:dd:76:04:46:87:05:92:3a:af:fc:
                    9c:a6:4a:3d:ab:6b:d5:d9:73:ca:95:37:88:f1:29:
                    28:83:ef:a0:09:e5:83:cc:af:b8:e6:28:dd:a7:79:
                    a4:b5:46:82:8f:24:14:e7:c1:60:71:39:07:53:97:
                    39:73:54:30:82:9b:7c:a2:68:49:03:db:49:48:d6:
                    40:58:7d:35:7b:76:ce:a4:c2:20:87:fd:a7:fe:ca:
                    e0:be:e4:a9:ff:6e:26:6f:d7:e9:a3:2e:a3:9f:ce:
                    10:1e:3d:6c:6a:26:f8:e9:dc:29:8b:2b:dc:8b:d7:
                    8e:80:fb:8b:5d:66:34:e2:ba:ae:99:6b:0b:18:2d:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0B:7E:C4:F5:CA:72:62:3D:F4:66:B6:1D:39:FE:15:67:64:5B:B5
            X509v3 Authority Key Identifier:
                keyid:09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32332d3233203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:6e:47:4f:4b:36:74:c8:46:3c:1b:83:a5:31:f0:5e:59:
         29:55:10:a8:80:a7:bd:e7:fa:0c:34:03:c6:13:e0:a6:22:82:
         03:83:72:dc:31:eb:e6:26:a4:23:af:3b:59:64:74:5f:09:c5:
         f6:00:ab:33:e7:5f:36:60:14:2f:a5:ec:a5:9e:c3:3a:9a:a0:
         9e:74:b1:3c:59:ea:f3:12:59:58:9c:17:4f:94:b5:ca:15:51:
         19:4e:9c:1c:7c:99:41:b1:7d:48:89:df:9f:15:74:9f:bb:10:
         01:bf:4b:44:54:9b:32:93:d5:ef:8d:ad:b9:3e:e8:e0:d2:b7:
         60:90:a9:70:fb:bc:a7:28:bc:5c:1a:44:d7:f8:a3:ab:44:25:
         4f:5f:c0:0b:47:6c:82:56:e1:ae:26:62:b8:41:43:7e:a2:34:
         c6:76:0f:f3:9b:7d:92:83:98:80:83:f4:01:77:49:56:67:42:
         0a:f8:29:e8:df:77:fd:a7:39:64:49:bd:69:6c:0d:bb:4c:14:
         b9:b0:35:22:3a:58:2b:5e:35:3a:0e:29:e8:4c:c0:60:4e:b7:
         f6:72:de:af:ba:1c:3d:1a:7e:a1:a6:80:8b:bb:38:a7:a4:9d:
         f8:53:9c:5e:d9:6c:81:1c:84:b6:e1:19:b6:e3:6b:e3:35:52:
         0b:04:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org