Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
File:                     34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier:          6edzPMOi0S8OMTYqAoIfNWMycUx76pUyWg2c6Y4ycFc=
Subject key identifier:   E6:F2:00:BC:61:C4:34:B2:3B:61:80:56:66:64:F0:7B:50:87:E2:B6
Certificate issuer:       /CN=BD822F759E542679706513A49206DC4783B35F84
Certificate serial:       350F37936855D7560730FD9F7064C3BF5CE610B1
Authority key identifier: BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
Signing time:             Sun 04 Aug 2024 00:34:59 +0000
ROA not before:           Sun 04 Aug 2024 00:29:59 +0000
ROA not after:            Sun 03 Aug 2025 00:34:59 +0000
asID:                     266924
IP address blocks:        45.224.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0f:37:93:68:55:d7:56:07:30:fd:9f:70:64:c3:bf:5c:e6:10:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD822F759E542679706513A49206DC4783B35F84
        Validity
            Not Before: Aug  4 00:29:59 2024 GMT
            Not After : Aug  3 00:34:59 2025 GMT
        Subject: CN=E6F200BC61C434B23B6180566664F07B5087E2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:e8:c3:2f:93:d5:8a:28:fc:fa:77:b8:76:
                    51:4f:9d:a0:12:a1:ec:d9:ab:52:59:f4:d0:51:e0:
                    cb:d7:34:c9:93:2c:11:d8:d4:d8:4a:6a:93:e8:80:
                    7e:7c:49:05:99:ba:8c:9c:54:e5:87:a6:83:75:db:
                    19:bc:9a:dd:3d:65:f0:cd:e1:a0:80:69:d9:f3:ec:
                    89:55:73:2f:86:ca:7b:22:90:fb:c3:b8:cd:27:ed:
                    1a:c9:e3:a1:0e:69:73:2d:52:7a:6e:bd:5b:05:7c:
                    9a:ce:e3:af:df:8b:19:aa:3b:40:74:d9:5c:2d:84:
                    3b:e0:6a:92:bd:4a:fa:7f:83:12:9e:67:fd:5f:6c:
                    b3:dc:c7:16:0e:a5:6e:09:4a:da:4d:8b:39:38:cb:
                    53:01:45:f4:e2:85:e4:3a:2e:78:6e:df:27:e0:f1:
                    db:a5:cc:c7:1a:97:94:0a:fe:ca:b3:4f:29:e4:82:
                    95:4b:85:b5:e3:73:68:81:07:18:72:75:3c:98:6e:
                    a7:53:bb:13:b6:f8:76:df:61:e4:70:9f:bf:0c:c0:
                    27:e7:af:93:06:cf:b5:fc:ad:c2:73:a6:af:65:6d:
                    5e:ab:4e:21:ce:86:31:76:39:e7:b1:64:56:77:db:
                    03:71:16:93:a7:ca:4c:cf:dc:ca:7d:6d:e9:a6:dd:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:00:BC:61:C4:34:B2:3B:61:80:56:66:64:F0:7B:50:87:E2:B6
            X509v3 Authority Key Identifier:
                keyid:BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/BD822F759E542679706513A49206DC4783B35F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:2c:79:8a:82:88:dd:24:f8:b0:77:4b:10:f4:46:f7:55:0d:
         2e:c5:1f:ff:98:aa:4a:26:46:00:1f:78:fc:9e:69:98:04:f7:
         5d:c7:f6:19:8f:44:82:9a:67:98:00:e4:6c:73:70:2a:36:84:
         ee:18:f6:67:bf:71:6c:a2:75:f0:94:e8:ee:e7:40:91:22:65:
         b9:9f:cf:5b:6e:0d:90:ab:d2:b9:56:7b:ea:d7:66:c8:64:2f:
         ba:9b:fb:87:18:57:d0:57:14:94:a2:5b:9c:bd:1c:24:44:99:
         c2:fd:9e:52:bd:ad:74:83:c0:9e:9c:59:35:57:dd:69:14:cc:
         72:8f:da:bc:a7:47:81:a6:04:3a:d4:98:54:53:62:dc:8e:64:
         39:8b:1e:4c:a7:f0:be:27:9b:4f:01:7c:e7:d8:05:c0:ed:99:
         dc:4d:ba:e2:ca:e4:e5:b2:e1:e8:a3:0e:0e:72:c9:3b:3a:4c:
         9f:a6:c1:5b:5f:c4:8a:b0:13:fb:6f:7a:62:13:8f:ee:a0:49:
         ac:49:09:0c:dd:e2:7d:b1:ea:6c:9b:d7:52:ad:fe:7e:64:2c:
         8c:d1:7e:7e:6a:cd:f5:48:1c:36:12:c7:5f:3d:fc:05:47:1f:
         77:39:d7:19:62:c2:63:92:d7:89:91:15:1c:38:6c:d0:23:e4:
         52:ac:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 02:24:59 2024 by rpki-client on console-fra.rpki-client.org