Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa
File:                     34352e3136382e36342e302f32322d3234203d3e20323638313338.roa (raw, json)
Hash identifier:          t0R9frv8harkCDhlUxezfdv3poy75E0SjU8knQP3e2U=
Subject key identifier:   27:C3:E1:36:E9:61:B4:3A:02:D7:65:A9:D8:B1:E2:60:7F:86:2B:C2
Certificate issuer:       /CN=711709BC181DF6689D366E1B328D3907419DF9AA
Certificate serial:       0B33CECE71B945E82EEC69FF1C4B2378AF2E3349
Authority key identifier: 71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa
Signing time:             Tue 12 Mar 2024 14:06:29 +0000
ROA not before:           Tue 12 Mar 2024 14:01:29 +0000
ROA not after:            Tue 11 Mar 2025 14:06:29 +0000
asID:                     268138
IP address blocks:        45.168.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:33:ce:ce:71:b9:45:e8:2e:ec:69:ff:1c:4b:23:78:af:2e:33:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711709BC181DF6689D366E1B328D3907419DF9AA
        Validity
            Not Before: Mar 12 14:01:29 2024 GMT
            Not After : Mar 11 14:06:29 2025 GMT
        Subject: CN=27C3E136E961B43A02D765A9D8B1E2607F862BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:28:d0:ee:43:92:8b:1e:5d:64:7b:df:da:
                    d4:b4:5e:7e:3e:83:aa:fc:74:4d:19:c2:5d:3b:14:
                    88:06:bc:94:f0:f9:88:31:96:3a:9a:a3:9e:9b:dc:
                    55:08:8c:91:2c:bc:13:6b:27:28:10:34:c0:f6:e0:
                    14:e9:20:14:9d:34:e9:d6:c7:39:3a:3e:c9:6b:6c:
                    ff:1f:0c:82:74:5f:2d:d0:fa:20:75:01:a7:0d:89:
                    b8:f3:5e:86:1f:12:1f:2d:09:6e:53:04:75:db:8b:
                    5e:2d:f3:28:36:46:be:43:23:5d:09:6c:7c:1e:3e:
                    7e:5b:fa:e4:b7:fa:f5:68:97:5b:4e:94:e4:d2:b0:
                    49:de:fd:33:d7:38:64:ad:94:6f:c2:f5:b6:dc:cd:
                    5b:38:a2:86:36:cb:c4:eb:f5:9e:23:8c:ef:1b:57:
                    d7:34:8d:ec:c5:a4:24:c9:95:8f:f4:42:b0:86:2c:
                    61:4e:b0:b6:1b:0a:2b:2e:41:1d:84:c6:7a:37:eb:
                    9f:c0:ae:fb:e0:77:1b:97:02:85:55:16:ec:54:13:
                    2e:3f:86:5e:30:e6:38:bd:c8:10:77:2f:be:7d:9c:
                    f4:6e:9a:2d:4f:95:7c:71:af:29:fd:fa:a2:c3:99:
                    e1:00:23:eb:33:39:f6:1c:65:57:66:37:3d:48:3f:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:E1:36:E9:61:B4:3A:02:D7:65:A9:D8:B1:E2:60:7F:86:2B:C2
            X509v3 Authority Key Identifier:
                keyid:71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:66:eb:91:35:eb:62:6a:63:68:6d:98:40:0f:a4:2c:10:a8:
         e3:60:16:28:db:28:22:86:83:2b:03:0a:b8:9f:aa:d9:51:0e:
         e8:55:8d:6a:5c:ae:d8:0d:05:46:29:d3:21:b5:35:a7:d6:19:
         b1:bf:91:75:91:44:41:13:ac:bf:50:c5:32:f3:e3:96:6d:75:
         bf:55:68:ce:45:18:24:fb:9f:8f:d5:de:34:02:45:bf:03:fc:
         c0:86:0b:0f:0b:a0:5f:d5:16:51:45:a7:96:f7:3a:7c:0c:17:
         70:5c:09:ca:7f:63:a1:8c:ce:5b:18:00:70:d5:af:60:45:f8:
         47:b4:76:f2:99:e6:d5:b1:c9:b8:a5:6b:24:d5:76:9e:7c:eb:
         67:68:71:80:9c:76:46:dd:39:b0:c0:5a:d9:46:18:c2:b9:00:
         ce:3a:dc:89:64:48:bb:b6:dc:14:77:62:fb:5e:99:df:86:de:
         3c:75:97:d4:79:57:f2:6f:d4:10:86:e5:8a:47:9c:cb:5c:8f:
         59:3c:15:75:a8:52:25:d0:0e:42:54:4a:3c:7d:2e:f2:b9:13:
         3e:75:fe:a4:fc:37:c8:32:25:ee:3f:f5:32:7f:d3:af:9d:75:
         e0:76:44:7b:4b:c9:78:93:87:c9:44:09:c9:28:72:cc:bc:53:
         43:e4:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org