Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          OWYRbv9pr+3otav+PE/oQu+ACiLzVXlhez+JPqy9BLE=
Subject key identifier:   16:08:11:56:90:BD:5C:14:20:30:39:2F:33:CE:32:9D:2A:A1:D7:17
Certificate issuer:       /CN=EAB76C1C74217637A55BBD7B24712072ECDA398A
Certificate serial:       4A91ABFC387128057530577937141B6354BA1CC9
Authority key identifier: EA:B7:6C:1C:74:21:76:37:A5:5B:BD:7B:24:71:20:72:EC:DA:39:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAB76C1C74217637A55BBD7B24712072ECDA398A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
Signing time:             Thu 04 Jan 2024 22:51:54 +0000
ROA not before:           Thu 04 Jan 2024 22:46:54 +0000
ROA not after:            Thu 02 Jan 2025 22:51:54 +0000
asID:                     268063
IP address blocks:        45.168.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:91:ab:fc:38:71:28:05:75:30:57:79:37:14:1b:63:54:ba:1c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB76C1C74217637A55BBD7B24712072ECDA398A
        Validity
            Not Before: Jan  4 22:46:54 2024 GMT
            Not After : Jan  2 22:51:54 2025 GMT
        Subject: CN=1608115690BD5C142030392F33CE329D2AA1D717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:e4:3e:eb:b9:8b:de:9b:e7:43:6d:53:d5:
                    bd:47:af:90:9f:f2:ea:da:2c:b8:a6:04:de:36:cd:
                    dd:60:a3:fc:cf:07:3a:41:1f:3a:0d:82:f8:8f:b0:
                    15:df:a8:4c:59:a2:c2:eb:61:e4:dd:07:1f:a2:fc:
                    85:c5:05:7d:a3:df:6a:83:2e:83:d5:5d:02:ca:04:
                    70:e3:fd:0b:59:e7:33:81:dd:f7:ec:43:e1:50:82:
                    bc:d4:8d:03:31:26:55:2b:61:ad:dd:bc:c1:95:9a:
                    c6:a2:26:4e:13:00:72:a9:ad:d4:74:2b:06:36:0f:
                    ef:87:66:30:4c:13:0e:ab:58:48:06:a2:6c:a6:42:
                    e3:a5:e1:fe:ec:8f:8d:6a:10:8b:b6:cb:c2:32:65:
                    ef:ed:ff:67:66:fb:50:23:02:50:3f:7a:b7:47:5a:
                    da:f5:b5:21:de:e0:d3:c0:48:14:b5:16:c8:7e:83:
                    f4:f0:02:1d:78:2a:33:76:23:59:3c:f8:e1:5c:fc:
                    99:b5:b9:a2:6e:8c:6c:23:b0:95:70:76:e8:cd:3c:
                    ab:f6:5b:b5:66:cb:15:90:10:01:13:ec:c6:95:a8:
                    21:34:a1:99:d8:c3:1a:30:6d:57:97:50:cb:15:f0:
                    47:12:89:8c:b9:1b:d2:1f:c8:96:c0:f0:4f:0a:e0:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:11:56:90:BD:5C:14:20:30:39:2F:33:CE:32:9D:2A:A1:D7:17
            X509v3 Authority Key Identifier:
                keyid:EA:B7:6C:1C:74:21:76:37:A5:5B:BD:7B:24:71:20:72:EC:DA:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/EAB76C1C74217637A55BBD7B24712072ECDA398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAB76C1C74217637A55BBD7B24712072ECDA398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:0e:1b:84:89:73:55:35:70:be:ef:ce:7c:03:c9:c3:9f:
         e3:0e:12:85:66:40:e5:1c:25:97:29:63:98:c8:9c:67:d5:cc:
         6b:ee:b0:18:a6:e9:9d:87:6f:16:64:17:95:34:37:ce:cd:a3:
         ee:a2:ee:7d:4a:61:97:bb:c7:03:04:fd:a0:35:6a:22:0b:7f:
         de:ed:eb:e0:37:0b:74:42:53:88:70:d9:ed:62:f9:dc:20:45:
         18:6a:4c:b2:20:a0:f1:8d:8d:b4:1a:ba:45:8d:5a:8d:2b:50:
         d7:3c:2e:43:4b:0b:24:c9:ed:ed:60:c9:17:92:63:ed:b7:4a:
         86:37:78:d7:bc:f5:9d:2f:02:b2:6b:93:a7:d6:41:b8:74:93:
         55:c8:12:5b:8d:aa:39:c1:60:f8:c4:a1:cf:ee:96:ee:5b:fc:
         11:68:04:3f:e5:fa:d9:5f:e9:41:86:5a:5c:d6:30:2a:ce:ef:
         78:07:71:fb:93:c4:65:11:34:7f:fd:ec:b7:92:d5:2e:3f:4a:
         b2:7b:83:bb:1e:6e:7c:1d:d6:82:e7:23:84:76:13:88:a3:6a:
         46:11:b1:35:a2:81:8e:3f:8b:98:ce:1e:1a:2f:f5:d7:66:10:
         5f:8c:c3:05:c5:c2:0b:f0:18:96:e7:e6:a5:ca:83:df:5f:86:
         06:20:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org