Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133352e302f32342d3234203d3e20323638303734.roa
File:                     34352e3136372e3133352e302f32342d3234203d3e20323638303734.roa (raw, json)
Hash identifier:          3PL0dzXueH/qXVUGAmhGOza+x/u7xRgfMOpqqbpFeAM=
Subject key identifier:   3A:1A:F8:0C:FB:4C:CD:4A:31:49:64:B3:06:AA:13:29:67:A4:11:CF
Certificate issuer:       /CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
Certificate serial:       3D3B1855EF53098793E1A7789112AA8A5C2A13A6
Authority key identifier: 09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133352e302f32342d3234203d3e20323638303734.roa
Signing time:             Thu 14 Mar 2024 11:55:59 +0000
ROA not before:           Thu 14 Mar 2024 11:50:59 +0000
ROA not after:            Fri 14 Mar 2025 11:55:59 +0000
asID:                     268074
IP address blocks:        45.167.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3b:18:55:ef:53:09:87:93:e1:a7:78:91:12:aa:8a:5c:2a:13:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
        Validity
            Not Before: Mar 14 11:50:59 2024 GMT
            Not After : Mar 14 11:55:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:ef:23:52:5f:c5:a5:09:15:b8:de:54:87:
                    1b:8a:8f:d1:1a:92:f5:d4:41:10:b4:50:e7:d8:9b:
                    90:06:07:4e:0e:f4:c8:16:44:94:93:1d:b4:a0:ab:
                    96:6b:2f:c5:b8:61:39:48:b7:af:9b:ed:c0:ea:d3:
                    5a:84:28:88:e3:b6:d9:40:00:7d:17:25:f4:02:48:
                    27:86:09:6f:0c:84:8b:36:43:2e:b3:a6:d8:72:e6:
                    ec:53:dc:12:2c:0f:5f:d2:d2:fb:0d:b9:c6:cd:82:
                    3c:12:fd:09:1a:ad:6b:75:b4:00:cb:3b:48:f0:5b:
                    7e:1c:47:a8:8f:33:a6:b0:06:94:e2:ec:24:aa:6d:
                    20:5b:ec:01:6d:9b:b8:de:5c:2c:23:75:b0:92:91:
                    ac:02:6e:64:df:8c:d4:c1:59:17:02:69:a4:b9:8f:
                    ab:7c:7d:e4:85:37:71:3c:b1:f6:32:6f:23:59:2e:
                    f2:65:75:94:ee:25:aa:36:98:6a:ca:63:a7:28:11:
                    61:2f:c7:85:d5:19:b0:43:ff:30:92:c6:58:b7:39:
                    89:a8:d0:cc:d4:7c:c7:f6:07:1f:93:27:61:ac:d8:
                    15:bf:e2:8c:b1:ed:1e:23:c0:81:9c:22:3f:ed:10:
                    1f:4f:51:33:87:6c:69:d2:73:86:30:24:52:0d:aa:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1A:F8:0C:FB:4C:CD:4A:31:49:64:B3:06:AA:13:29:67:A4:11:CF
            X509v3 Authority Key Identifier:
                keyid:09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133352e302f32342d3234203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:0b:d1:b1:09:07:80:2e:d5:b6:0a:f9:f1:5c:26:8d:07:
         7c:6e:8f:44:5e:17:18:08:ed:69:17:8d:1a:e7:f7:0d:0b:27:
         3f:60:ae:6a:8d:cd:01:bb:d2:c3:0c:5d:bc:e1:52:a7:a0:d1:
         24:fc:d2:43:33:0a:28:9c:f8:5a:94:71:d7:55:7d:1e:40:ef:
         7f:a7:f8:e3:a7:11:86:b8:ff:55:e2:19:69:85:3d:b4:c5:81:
         1d:bf:5b:a7:79:2a:b0:eb:7a:d1:31:99:f1:a5:08:0a:c1:a5:
         cc:73:b2:7d:e1:ef:11:48:f2:92:a3:80:70:55:58:cd:ba:11:
         08:98:7b:b5:6c:c8:78:9e:97:d3:25:c4:a5:9c:50:aa:5f:8c:
         52:66:0f:97:3d:ac:56:ac:86:fd:19:e8:d2:57:54:80:3f:5c:
         58:1d:29:30:60:aa:9d:eb:f2:48:c0:01:48:7f:f4:b2:6e:22:
         7a:91:73:ca:9c:f7:35:c5:53:89:b6:f9:51:1d:15:0a:ff:f7:
         10:2a:35:f8:f4:54:4c:e9:ca:cc:1b:bd:cf:2a:e0:a4:13:ff:
         f5:73:d9:0e:6d:63:78:b9:22:f9:8d:24:2c:2b:d0:6a:f8:ef:
         f1:14:57:cd:c5:ea:0d:32:63:dc:50:24:e0:b1:13:99:93:7c:
         70:19:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org