Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39332e302f32342d3234203d3e20323636313239.roa
File:                     34352e362e39332e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          kWBmdjaA6NIV1ltPgkGcwvh4ZwGvNgJOYajouMk52pw=
Subject key identifier:   64:D1:0B:45:33:60:AD:06:BC:80:4E:B7:F8:EA:A4:CD:69:BD:41:04
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       0D6710C3EA71687FB6B015F4EB7B6CD37E9171F4
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39332e302f32342d3234203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 20:00:00 +0000
ROA not before:           Mon 04 Mar 2024 19:55:00 +0000
ROA not after:            Mon 03 Mar 2025 20:00:00 +0000
asID:                     266129
IP address blocks:        45.6.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:67:10:c3:ea:71:68:7f:b6:b0:15:f4:eb:7b:6c:d3:7e:91:71:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 19:55:00 2024 GMT
            Not After : Mar  3 20:00:00 2025 GMT
        Subject: CN=64D10B453360AD06BC804EB7F8EAA4CD69BD4104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bb:c1:0b:32:d4:ab:1a:67:35:75:2e:3e:d9:
                    63:d9:2f:e6:eb:86:42:f5:40:4f:d8:30:4e:b9:33:
                    2a:db:6e:f8:4b:43:58:ba:47:74:f1:f2:0b:6a:18:
                    32:e9:df:4b:6e:bf:99:91:b4:da:ff:9a:c2:a5:af:
                    d0:7f:97:30:6d:81:fb:72:16:db:5e:5e:4e:e3:55:
                    3b:3b:81:04:c2:6c:af:2e:71:79:e0:1c:b0:8e:fb:
                    ad:e7:5a:54:99:91:b9:ae:8b:b9:e2:35:d6:c7:d9:
                    30:fa:b5:25:e6:4e:d5:ef:08:cc:d4:c7:89:8e:ac:
                    fb:88:42:9b:e2:2e:0a:e8:c9:57:1c:f2:0b:dd:af:
                    65:f2:ea:30:ca:2e:9c:24:29:9f:8a:44:29:1e:4e:
                    88:74:22:4d:27:58:7f:25:8f:72:f0:2c:0d:d3:51:
                    1b:b7:5c:da:0a:48:b2:d8:69:f8:75:c4:24:e6:32:
                    5c:a0:59:16:0e:02:53:8d:9b:5f:a2:a1:20:34:d9:
                    38:40:9f:22:fd:c6:d9:56:fd:67:78:f5:68:20:3f:
                    aa:4f:21:ed:53:10:78:b5:3b:35:81:bf:57:72:af:
                    e4:90:2a:92:1e:c3:fd:ac:b5:27:8e:28:c1:b9:2d:
                    65:08:50:ae:d7:54:7b:8d:46:bc:4f:86:87:bf:42:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D1:0B:45:33:60:AD:06:BC:80:4E:B7:F8:EA:A4:CD:69:BD:41:04
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39332e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:0f:bc:dc:44:64:58:71:7e:50:0b:9b:71:e6:b9:3f:09:
         25:10:bc:85:51:31:5d:11:e1:a2:dd:65:58:ea:3c:f3:c5:27:
         d7:90:37:05:f0:a8:85:41:dc:c2:fe:6a:54:a7:67:29:b8:97:
         9a:9a:e8:9e:11:53:92:62:27:5e:7f:5d:fd:ec:1f:a9:8f:9f:
         43:79:c3:31:77:fa:41:d9:42:7c:b7:ae:84:69:8b:fa:36:bf:
         2e:a2:40:86:d8:ed:f7:99:d3:4a:3e:e5:0a:9b:f3:28:ce:e9:
         13:50:84:af:c9:db:10:0c:c5:48:16:69:6e:5f:ff:56:f8:b2:
         26:04:87:9a:70:4c:d5:52:c4:db:bb:bf:2f:f2:1b:fa:aa:90:
         74:a6:98:9c:a0:47:fe:ff:6d:20:0b:4c:0c:4c:07:8a:fb:50:
         7c:c4:67:33:19:eb:11:a8:3c:ac:c1:a6:c4:3f:c5:c7:26:a6:
         ee:7d:53:43:95:ef:0c:a3:d9:5e:6d:01:8d:8e:9b:0e:c3:07:
         2a:2a:95:5e:6f:ee:93:6c:20:56:4c:46:ab:0f:b8:e5:5f:e3:
         ae:cb:b1:f7:08:41:a8:69:98:59:69:e5:65:19:c6:29:d0:14:
         0c:c7:d6:05:2f:a4:6c:23:3c:9a:0e:df:25:30:83:e9:a3:4d:
         d6:ac:a9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org