Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          tZqmZ7D9i1Nv15Iz1EoiXpzBer5cQnHt26ag2/CBnFA=
Subject key identifier:   B7:79:C2:E4:41:00:5C:87:B2:2B:1F:C8:5C:4A:78:C7:81:85:89:E2
Certificate issuer:       /CN=EAB76C1C74217637A55BBD7B24712072ECDA398A
Certificate serial:       1485903E9DB9BA08FCBCDB4BA832076E8F28B434
Authority key identifier: EA:B7:6C:1C:74:21:76:37:A5:5B:BD:7B:24:71:20:72:EC:DA:39:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAB76C1C74217637A55BBD7B24712072ECDA398A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa
Signing time:             Thu 04 Jan 2024 22:51:54 +0000
ROA not before:           Thu 04 Jan 2024 22:46:54 +0000
ROA not after:            Thu 02 Jan 2025 22:51:54 +0000
asID:                     268063
IP address blocks:        45.168.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:85:90:3e:9d:b9:ba:08:fc:bc:db:4b:a8:32:07:6e:8f:28:b4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB76C1C74217637A55BBD7B24712072ECDA398A
        Validity
            Not Before: Jan  4 22:46:54 2024 GMT
            Not After : Jan  2 22:51:54 2025 GMT
        Subject: CN=B779C2E441005C87B22B1FC85C4A78C7818589E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:93:94:af:c6:08:0e:00:f6:73:11:49:8f:
                    b1:21:fa:a8:5c:20:e5:b9:c6:f4:f7:9c:6f:c9:92:
                    85:64:7e:52:01:63:bc:ad:82:f7:22:cf:38:28:2c:
                    2b:fd:69:e0:5f:df:36:cc:1a:6f:2f:4d:2d:9d:54:
                    77:5d:c4:89:00:d7:27:e2:ea:fd:3c:30:3f:50:ea:
                    16:0f:5e:14:f2:82:b9:6f:4f:d4:20:ad:f7:93:15:
                    ca:4b:fb:e9:77:1b:9f:9e:06:34:84:30:5b:71:8f:
                    b8:2d:a2:9c:4b:ac:68:e3:c8:26:0f:17:60:47:b5:
                    3d:a1:f0:7a:c3:81:48:75:d6:f1:e6:1f:f1:2a:d8:
                    3e:3f:8a:71:ad:36:cc:b0:b5:b8:b6:31:dc:39:10:
                    dd:95:9d:59:3e:97:40:9b:2a:7f:ce:7c:15:92:01:
                    c0:ee:9f:e8:2c:66:01:2e:91:ba:54:31:24:1d:36:
                    80:8d:73:f7:aa:38:e4:0e:75:70:4c:23:3e:5c:51:
                    30:45:e9:88:cf:52:fd:10:79:89:a8:97:4d:32:c6:
                    32:cd:30:55:0a:1e:fb:64:72:85:84:63:f2:4c:e5:
                    7e:4d:ae:35:d1:c3:9e:04:fd:77:7d:8d:15:bd:d7:
                    45:89:62:ad:b4:8c:00:cb:50:ea:c9:8c:f3:15:9a:
                    5d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:79:C2:E4:41:00:5C:87:B2:2B:1F:C8:5C:4A:78:C7:81:85:89:E2
            X509v3 Authority Key Identifier:
                keyid:EA:B7:6C:1C:74:21:76:37:A5:5B:BD:7B:24:71:20:72:EC:DA:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/EAB76C1C74217637A55BBD7B24712072ECDA398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAB76C1C74217637A55BBD7B24712072ECDA398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d1:02:7c:03:e8:00:b2:aa:78:f8:65:d7:ed:b5:2f:c4:e3:
         5a:91:b7:2e:c2:da:96:8b:c8:9a:03:4b:ea:31:d5:20:c8:19:
         26:9f:6d:76:2a:2e:bc:80:7a:15:40:4e:22:28:97:44:08:37:
         11:7e:d5:c1:ab:21:9b:e4:2f:1c:48:17:6b:ef:fe:57:72:ea:
         64:a4:f0:5c:fb:a8:f9:22:88:2f:e0:14:2c:a9:ec:85:cc:f4:
         ce:e1:da:99:2e:63:ef:b3:f9:77:cd:b8:3b:a6:6c:dd:0d:4b:
         8a:28:85:91:3e:35:bd:01:ca:96:4c:dc:ce:ce:2f:cc:1b:74:
         69:d3:c7:8d:86:08:e7:08:62:70:6f:fd:2e:e1:76:36:b7:0d:
         6e:2b:b3:b1:a2:0d:7f:b7:01:df:3e:68:73:89:02:d1:33:90:
         3c:ce:8a:86:f6:14:11:22:b4:b8:22:be:cd:a4:05:f4:91:40:
         f5:76:8c:85:6b:dd:07:86:e6:02:25:fe:68:a5:94:dc:da:06:
         92:ae:9a:f3:94:f0:da:5a:97:b4:5a:fd:c3:46:d7:f8:a5:18:
         db:6c:e6:8f:d6:5b:17:d7:a6:56:e9:99:24:24:5e:ec:b8:78:
         37:47:b0:65:0f:f7:b9:75:96:99:46:84:92:ee:5c:a8:80:6a:
         c3:b3:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org