Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39322e302f32342d3234203d3e20323636313239.roa
File:                     34352e362e39322e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          lBzqJpjUnDUGjj1ebX1SAdUHXbjEwrcqZc/hOhajJxg=
Subject key identifier:   B0:39:A9:FD:A3:BC:14:41:9A:DF:35:BF:F0:03:3C:26:79:A7:5E:C2
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       0D205E1246770DDD5BED574F139DEED7663F7BCF
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39322e302f32342d3234203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 20:00:00 +0000
ROA not before:           Mon 04 Mar 2024 19:55:00 +0000
ROA not after:            Mon 03 Mar 2025 20:00:00 +0000
asID:                     266129
IP address blocks:        45.6.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:20:5e:12:46:77:0d:dd:5b:ed:57:4f:13:9d:ee:d7:66:3f:7b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 19:55:00 2024 GMT
            Not After : Mar  3 20:00:00 2025 GMT
        Subject: CN=B039A9FDA3BC14419ADF35BFF0033C2679A75EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:18:cf:3b:4d:52:af:f4:4e:20:17:ba:b3:
                    49:c1:a4:2d:d2:e7:39:a7:b5:5c:e4:4f:66:de:d7:
                    43:07:62:c7:67:90:c5:89:04:1b:31:ca:69:2c:de:
                    63:fb:61:95:0b:cb:a7:c1:c8:0b:61:6e:5d:5c:70:
                    8d:6c:8b:a2:f2:c4:f3:10:a7:50:52:94:89:83:97:
                    4e:42:ed:86:f8:f4:e7:2d:0d:11:32:90:16:99:0d:
                    2d:1a:62:bd:8e:e9:66:d8:09:97:83:66:9e:d4:64:
                    3c:fd:38:6b:ad:bd:30:e1:ed:16:3c:d3:39:5c:76:
                    f1:01:4a:a6:af:13:78:43:e7:22:67:be:f0:d5:40:
                    dc:bf:7c:37:5d:b1:7b:89:20:3e:ba:b5:4d:92:c9:
                    0a:cf:83:13:b5:7a:40:9c:29:8f:98:55:25:87:a1:
                    32:f6:cc:1e:79:4b:31:90:4f:a9:f1:c8:44:06:7c:
                    7e:d5:7e:5f:20:2f:1e:04:fc:a7:e3:61:82:0f:74:
                    2d:ca:fe:8b:e6:46:a1:88:9e:18:cd:ab:28:09:4e:
                    23:65:a4:2c:76:36:ed:e7:41:f5:b3:c1:bb:f7:55:
                    e5:96:6e:c0:51:0a:7e:40:37:f7:d2:d9:c3:e9:77:
                    74:b0:fc:e6:8b:fe:71:7f:e8:dd:e0:64:60:c3:fd:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:39:A9:FD:A3:BC:14:41:9A:DF:35:BF:F0:03:3C:26:79:A7:5E:C2
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39322e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:48:ac:75:27:2b:02:25:19:66:59:0e:f8:f8:3c:a5:bf:
         10:33:c7:50:be:42:3f:9e:0c:61:68:bd:07:29:f7:8f:b4:1d:
         a9:ad:e3:a7:e1:42:25:e1:21:41:83:8b:05:5f:8b:52:2e:aa:
         6e:ac:14:3a:3d:5d:c3:a0:3b:79:67:87:78:72:b4:9e:ac:3e:
         3d:97:15:dd:d8:3a:ed:0c:6b:c4:e5:44:70:09:82:4c:3a:3e:
         87:28:09:47:86:bb:ee:86:eb:54:3a:03:ce:3b:48:7c:79:5b:
         a2:9a:ca:f9:49:8e:a8:9a:dd:bf:f4:fc:95:b5:06:86:6a:2c:
         22:17:82:a1:0b:09:5d:22:44:b5:b3:8e:22:d9:f3:e5:f2:31:
         fe:81:68:b0:a5:af:21:ae:d2:7b:39:ff:09:a5:c3:f8:d8:4d:
         57:f8:75:fe:1b:93:25:61:e6:b8:31:fb:8a:b4:c4:d1:fd:7c:
         92:fb:71:79:52:f3:d3:b7:cd:24:ce:17:43:19:78:48:52:0e:
         75:a7:e3:e7:70:21:89:f0:30:db:fa:38:8a:6a:99:07:a0:87:
         93:3c:1a:9c:9b:83:09:85:a6:72:d9:94:04:0c:b6:31:05:df:
         94:7e:52:ef:bc:35:39:2a:36:aa:53:ad:5d:6e:51:79:46:80:
         a3:74:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org