Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39342e302f32342d3234203d3e20323636313239.roa
File:                     34352e362e39342e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          MV/9I9xY8wDqryffIRV6j1f8ykNhlsw6oleS5zAlR1I=
Subject key identifier:   9C:83:3A:00:2E:A5:EB:7A:AE:24:11:C7:EC:40:59:56:17:DC:E9:5E
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       16E94B861C56B0602EE6681CF34EFA1414218CE0
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39342e302f32342d3234203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 20:00:00 +0000
ROA not before:           Mon 04 Mar 2024 19:55:00 +0000
ROA not after:            Mon 03 Mar 2025 20:00:00 +0000
asID:                     266129
IP address blocks:        45.6.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:4b:86:1c:56:b0:60:2e:e6:68:1c:f3:4e:fa:14:14:21:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 19:55:00 2024 GMT
            Not After : Mar  3 20:00:00 2025 GMT
        Subject: CN=9C833A002EA5EB7AAE2411C7EC40595617DCE95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:62:3f:3b:cc:52:1b:19:01:29:9b:9f:3c:
                    38:3c:59:71:3d:b5:24:0f:c2:64:09:ae:f2:5d:0f:
                    49:1f:02:ee:b9:87:9e:43:13:01:77:79:c2:58:da:
                    d6:4b:e1:71:04:64:ed:fa:50:b4:d2:64:d9:59:ba:
                    af:16:06:ab:38:09:37:20:9b:4b:40:50:d3:12:56:
                    d8:ac:c0:55:90:0e:e6:04:9c:2b:07:67:ed:4b:5a:
                    eb:b8:24:1b:4f:81:b3:13:0f:e5:35:18:8a:47:55:
                    d7:d4:2e:dc:1f:91:ba:8d:4d:ea:97:1a:10:9a:23:
                    ae:31:e0:c9:92:df:10:4f:af:7e:81:f7:8f:35:45:
                    ee:a1:39:a9:69:73:38:4d:86:4f:c7:8e:e5:ff:31:
                    8e:00:f7:5d:83:0e:f2:97:20:43:fa:61:64:a0:0d:
                    f6:7a:a2:a6:54:39:a5:11:6b:b8:20:4d:98:82:0c:
                    94:92:a7:fd:1e:3e:13:06:cd:4f:32:e6:30:d8:d4:
                    54:17:f2:a0:cf:ea:50:16:d1:c7:26:e4:b2:ca:50:
                    70:bb:92:f6:ec:70:40:2b:2c:42:cb:c4:7c:f1:86:
                    93:b0:e2:b5:0c:dc:33:fe:bd:ec:42:26:e5:46:61:
                    17:04:9f:30:a4:b0:26:3a:54:8c:a5:08:39:b4:d1:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:83:3A:00:2E:A5:EB:7A:AE:24:11:C7:EC:40:59:56:17:DC:E9:5E
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39342e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:21:54:55:52:3d:73:51:55:e1:72:7b:03:50:ad:1d:ea:
         c5:25:86:7f:8b:1f:43:e8:86:5b:70:b6:0d:92:8c:29:09:21:
         45:7c:58:f8:11:87:ed:03:af:e6:21:c5:2e:4d:91:dc:bb:ec:
         2a:d7:67:0a:0a:8c:92:75:09:76:32:87:97:67:5e:7f:43:d7:
         8f:80:7b:62:ca:d4:30:c6:52:ea:f1:db:5d:16:dd:3e:c8:5d:
         8d:5f:a8:23:54:7d:5f:3a:d7:1a:c6:92:0f:dc:6b:87:26:50:
         88:f3:15:67:cd:56:d0:ef:64:33:ac:26:d1:ec:c2:3f:8c:3e:
         dc:15:d9:1b:64:3a:f3:11:8e:1d:7b:37:3b:1f:3b:88:9b:d1:
         59:9d:c6:4e:8c:6f:d3:6f:f6:92:8e:08:df:72:f3:69:c9:7d:
         1d:a7:bc:b0:09:cb:1e:7a:7d:fa:81:2a:34:3b:9f:5f:f7:b6:
         ac:7e:50:63:0f:b0:c9:d5:d4:3d:0c:d8:b5:a6:8f:7d:35:8f:
         2c:72:3f:d9:a9:c4:36:23:9c:27:b5:f7:68:e3:d8:29:9b:3e:
         bc:ee:5b:45:ca:53:24:ff:a6:3a:00:3d:43:7f:77:1a:a2:91:
         f1:87:ae:56:4b:03:6a:ed:fe:d2:0d:aa:4c:23:6b:20:cf:ce:
         e5:a3:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org