Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32342d3234203d3e20323638303734.roa
File:                     34352e3136372e3133322e302f32342d3234203d3e20323638303734.roa (raw, json)
Hash identifier:          psi9IHIGpGPXqf2mUgmL0yr/QU6yoL+BkvRDgx2taK4=
Subject key identifier:   E3:D7:56:95:C1:6C:CB:D4:75:73:9C:97:66:8E:44:5D:14:EE:95:98
Certificate issuer:       /CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
Certificate serial:       7F3B07CB43AA3E2C3FED4C4B3D7DA690F9863138
Authority key identifier: 09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32342d3234203d3e20323638303734.roa
Signing time:             Sun 03 Mar 2024 18:00:01 +0000
ROA not before:           Sun 03 Mar 2024 17:55:01 +0000
ROA not after:            Mon 03 Mar 2025 18:00:01 +0000
asID:                     268074
IP address blocks:        45.167.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3b:07:cb:43:aa:3e:2c:3f:ed:4c:4b:3d:7d:a6:90:f9:86:31:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
        Validity
            Not Before: Mar  3 17:55:01 2024 GMT
            Not After : Mar  3 18:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:4f:7f:32:ab:0f:b9:31:12:35:20:99:1e:
                    39:fd:31:82:2b:99:d8:a8:10:e4:ab:8f:ad:cc:84:
                    24:c6:92:7c:dd:66:0f:2d:1d:ba:ed:4e:a3:4a:b5:
                    0d:11:da:78:29:bb:65:8f:4f:a2:07:2c:be:b7:9d:
                    d0:da:f7:2b:1f:c8:b0:8d:be:27:40:53:15:87:89:
                    0c:b8:85:e0:c0:c3:6c:0b:d9:2f:c9:9f:89:72:c5:
                    0d:1d:9b:79:a8:4f:38:b3:42:76:89:49:4d:92:de:
                    ab:c4:ef:d7:ff:e7:d1:e0:20:b9:9f:da:b7:19:9d:
                    0c:3e:c1:e8:f5:1a:e3:2c:44:80:ef:80:48:79:09:
                    63:54:7c:0f:f2:f0:12:59:04:21:6d:52:34:98:7a:
                    7a:85:60:f2:dd:27:74:c0:ab:97:6d:dc:4b:67:2e:
                    a5:ae:78:ba:86:9e:2d:ca:cf:96:6d:5d:8f:db:6d:
                    a5:f6:8b:5f:cc:b7:ae:62:da:f0:9e:70:75:13:f5:
                    31:dc:b3:48:de:c6:71:90:24:0a:ba:a0:98:34:61:
                    16:4b:49:a5:0b:7e:36:1c:0c:dc:ce:fd:96:c9:42:
                    81:8f:16:b5:3c:25:3a:52:2c:c3:d7:8f:0b:08:da:
                    18:75:56:55:b7:63:9f:db:8a:30:99:4e:2f:23:29:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:56:95:C1:6C:CB:D4:75:73:9C:97:66:8E:44:5D:14:EE:95:98
            X509v3 Authority Key Identifier:
                keyid:09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32342d3234203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:d9:02:5e:63:91:77:31:0d:72:1b:66:a5:c0:33:dc:40:db:
         eb:17:98:4a:42:2f:61:ba:07:25:17:8c:55:6b:4b:65:f0:4c:
         1e:87:dd:60:84:f3:99:35:a8:cc:85:23:4d:9c:24:59:4d:5b:
         14:76:34:46:cc:bc:ac:06:a4:bf:1e:53:84:51:c9:d6:b3:eb:
         33:eb:e3:7b:eb:ac:5b:64:89:00:a8:9d:8f:3b:ff:36:2e:81:
         6e:25:a3:10:91:f8:76:09:4b:ea:f1:ef:f7:64:6d:2f:c8:44:
         ce:20:bf:1d:88:b2:d4:b1:ef:59:68:5a:6c:38:ba:19:5f:8a:
         f3:33:af:6e:7f:0e:b7:db:6d:bf:46:6b:a5:72:4a:c2:de:e2:
         1e:67:8c:ad:6d:48:29:48:8d:ad:37:c7:d3:c8:69:f8:40:41:
         e2:a8:ab:51:5e:f4:4c:7b:b8:9d:ac:31:9b:31:a9:62:4c:f3:
         54:f7:90:d9:5b:a3:12:2f:55:57:f6:b2:0a:56:75:3d:04:42:
         f1:6b:47:9e:12:75:db:b5:f8:2f:2a:f7:fb:09:7c:42:04:58:
         67:2f:b8:88:d1:99:2f:b3:a6:e0:ef:63:4c:5c:a4:86:89:62:
         8c:02:e0:ee:42:95:88:67:99:c9:c1:c5:93:76:59:48:56:25:
         9e:9e:25:76
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfzsHy0OqPiw/7UxLPX2mkPmGMTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlDNzkwQzA1RkU3Rjk1OTA5QURFMEM3NkJCQTM2NzBD
NjcxNzgxOTAeFw0yNDAzMDMxNzU1MDFaFw0yNTAzMDMxODAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDk0OTRGN0YzMkFCMEZCOTMx
MTIzNTIwOTkxRTM5RkQzMTgyMkI5OUQ4QTgxMEU0QUI4RkFEQ0M4NDI0QzY5MjdD
REQ2NjBGMkQxREJBRUQ0RUEzNEFCNTBEMTFEQTc4MjlCQjY1OEY0RkEyMDcyQ0JF
Qjc5REQwREFGNzJCMUZDOEIwOERCRTI3NDA1MzE1ODc4OTBDQjg4NUUwQzBDMzZD
MEJEOTJGQzk5Rjg5NzJDNTBEMUQ5Qjc5QTg0RjM4QjM0Mjc2ODk0OTREOTJERUFC
QzRFRkQ3RkZFN0QxRTAyMEI5OUZEQUI3MTk5RDBDM0VDMUU4RjUxQUUzMkM0NDgw
RUY4MDQ4NzkwOTYzNTQ3QzBGRjJGMDEyNTkwNDIxNkQ1MjM0OTg3QTdBODU2MEYy
REQyNzc0QzBBQjk3NkREQzRCNjcyRUE1QUU3OEJBODY5RTJEQ0FDRjk2NkQ1RDhG
REI2REE1RjY4QjVGQ0NCN0FFNjJEQUYwOUU3MDc1MTNGNTMxRENCMzQ4REVDNjcx
OTAyNDBBQkFBMDk4MzQ2MTE2NEI0OUE1MEI3RTM2MUMwQ0RDQ0VGRDk2Qzk0Mjgx
OEYxNkI1M0MyNTNBNTIyQ0MzRDc4RjBCMDhEQTE4NzU1NjU1Qjc2MzlGREI4QTMw
OTk0RTJGMjMyOThBQjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2UlPfzKrD7kxEjUgmR45/TGCK5nYqBDkq4+tzIQkxpJ83WYPLR26
7U6jSrUNEdp4Kbtlj0+iByy+t53Q2vcrH8iwjb4nQFMVh4kMuIXgwMNsC9kvyZ+J
csUNHZt5qE84s0J2iUlNkt6rxO/X/+fR4CC5n9q3GZ0MPsHo9RrjLESA74BIeQlj
VHwP8vASWQQhbVI0mHp6hWDy3Sd0wKuXbdxLZy6lrni6hp4tys+WbV2P222l9otf
zLeuYtrwnnB1E/Ux3LNI3sZxkCQKuqCYNGEWS0mlC342HAzczv2WyUKBjxa1PCU6
UizD148LCNoYdVZVt2Of24owmU4vIymKsQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOPXVpXBbMvUdXOcl2aORF0U7pWYMB8GA1UdIwQYMBaAFAnHkMBf5/lZCa3gx2u6
NnDGcXgZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI2ZmpZVU5ZRXVReW8x
M0tqN1Fid1h5TWJOUXZING9LZHFkRzJUSkd5SkZ1LzAvMDlDNzkwQzA1RkU3Rjk1
OTA5QURFMEM3NkJCQTM2NzBDNjcxNzgxOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wOUM3OTBDMDVGRTdGOTU5MDlBREUwQzc2QkJBMzY3MEM2NzE3
ODE5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yNmZqWVVOWUV1UXlvMTNLajdR
YndYeU1iTlF2SDRvS2RxZEcyVEpHeUpGdS8wLzM0MzUyZTMxMzYzNzJlMzEzMzMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzAzNzM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LaeEMA0GCSqGSIb3DQEBCwUAA4IBAQCQ2QJeY5F3MQ1yG2alwDPcQNvrF5hKQi9h
ugclF4xVa0tl8Eweh91ghPOZNajMhSNNnCRZTVsUdjRGzLysBqS/HlOEUcnWs+sz
6+N766xbZIkAqJ2PO/82LoFuJaMQkfh2CUvq8e/3ZG0vyETOIL8diLLUse9ZaFps
OLoZX4rzM69ufw63222/RmulckrC3uIeZ4ytbUgpSI2tN8fTyGn4QEHiqKtRXvRM
e7idrDGbMaliTPNU95DZW6MSL1VX9rIKVnU9BELxa0eeEnXbtfgvKvf7CXxCBFhn
L7iI0Zkvs6bg72NMXKSGiWKMAuDuQpWIZ5nJwcWTdllIViWeniV2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org