Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133332e302f32342d3234203d3e20323638303734.roa
File:                     34352e3136372e3133332e302f32342d3234203d3e20323638303734.roa (raw, json)
Hash identifier:          lzYdmywC/lCfzru9h8UlsE/AqAzuY9RYqRAAch3OdVY=
Subject key identifier:   9A:A2:DD:AC:0A:8C:37:62:DE:34:25:75:9B:7C:CA:AD:5A:16:A5:A4
Certificate issuer:       /CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
Certificate serial:       1A125B63C4BCD9ED55A693BDEE1EBE42014EE270
Authority key identifier: 09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133332e302f32342d3234203d3e20323638303734.roa
Signing time:             Sun 03 Mar 2024 18:00:00 +0000
ROA not before:           Sun 03 Mar 2024 17:55:00 +0000
ROA not after:            Mon 03 Mar 2025 18:00:00 +0000
asID:                     268074
IP address blocks:        45.167.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:12:5b:63:c4:bc:d9:ed:55:a6:93:bd:ee:1e:be:42:01:4e:e2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
        Validity
            Not Before: Mar  3 17:55:00 2024 GMT
            Not After : Mar  3 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:0e:4f:fb:e1:36:89:82:9a:56:12:f5:34:
                    93:87:c3:0b:25:3b:f9:9d:62:6f:d9:c3:59:62:e4:
                    65:c3:b6:f7:0a:1f:aa:9b:6f:9e:fd:db:40:30:73:
                    ab:81:11:e0:e6:c0:82:1c:3c:f4:e0:9a:4b:2a:11:
                    0b:ed:6b:fb:d1:21:9a:44:d5:47:5d:12:00:8d:2c:
                    d2:50:d0:5f:65:93:d6:5d:1f:a6:8b:0a:99:44:e0:
                    80:ac:30:c2:78:54:80:59:14:6c:5e:9c:fc:33:f8:
                    b7:a9:e6:bd:42:1f:b8:5f:2d:a3:18:de:29:c3:20:
                    75:00:07:1d:9d:81:1a:6d:b8:41:64:56:45:f5:77:
                    c2:a5:09:fd:c1:fa:9d:82:af:e2:b5:e4:d7:10:ba:
                    a3:fd:a0:84:3a:91:77:b7:f6:18:c6:f6:78:e8:7a:
                    21:b6:c1:f8:95:67:1f:26:4c:2a:e1:93:0f:b3:93:
                    71:c9:43:42:51:35:83:42:99:3e:5d:bb:c1:1b:6a:
                    dc:5e:1a:7b:ee:75:62:48:6c:e1:3c:46:b6:a2:f7:
                    ba:83:9d:8b:82:6f:16:88:5b:c5:80:31:cb:cd:bc:
                    fb:02:31:ca:3e:13:c1:f9:ca:20:d4:92:21:e5:cf:
                    52:65:b2:fa:7b:c2:21:87:2f:c5:e4:b0:6d:2f:28:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:DD:AC:0A:8C:37:62:DE:34:25:75:9B:7C:CA:AD:5A:16:A5:A4
            X509v3 Authority Key Identifier:
                keyid:09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133332e302f32342d3234203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c9:6a:b0:7f:fa:3c:d4:fc:e0:ec:c0:7a:79:1e:1f:51:a5:
         cb:61:60:bb:cb:72:76:1d:a0:fe:df:08:f5:c2:64:33:05:0f:
         87:b1:e7:df:4f:79:6a:b1:cf:db:6c:41:19:dd:1e:e2:6e:24:
         5e:be:43:45:9a:2c:25:6b:19:5a:4d:ff:f0:6e:8c:af:3c:5f:
         b1:d3:0d:62:fe:f5:c7:79:01:0b:00:12:d4:72:c2:01:b7:3d:
         5c:4f:96:03:27:ac:82:74:68:43:95:52:34:2f:89:ad:14:d3:
         25:1c:31:15:29:ee:9f:26:11:7e:95:cb:57:45:e2:87:78:f8:
         9e:81:9f:9b:24:15:c7:dc:20:f6:7d:6d:dd:78:33:87:95:04:
         11:a3:c6:64:cd:2c:2d:e1:0b:bb:d2:8f:cd:73:0f:bd:71:f7:
         8c:c5:53:09:fc:fc:b3:b3:62:22:f8:d5:54:66:ca:65:94:a8:
         50:7d:39:ac:58:32:1d:87:dd:6b:97:bf:e3:95:f7:c0:ce:3c:
         ee:a6:7b:b0:2e:2d:fb:e3:1c:5c:b5:e7:18:a0:08:80:38:44:
         b1:d8:f1:a4:c7:51:32:df:db:e9:bb:69:17:59:6f:ad:8b:c4:
         7f:68:31:26:d3:c8:6c:bc:42:88:99:8a:64:89:af:3d:6f:ae:
         7a:43:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org