Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131362e302f32322d3234203d3e20323636353834.roa
File:                     34352e372e3131362e302f32322d3234203d3e20323636353834.roa (raw, json)
Hash identifier:          1TlB/8X8z+X1NfWYpLaxPBB1UYENfIhbEq2SbY+nBSE=
Subject key identifier:   45:24:E3:E9:B2:04:BB:57:BA:5A:CB:61:48:E8:EC:93:3F:83:45:41
Certificate issuer:       /CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
Certificate serial:       0C25DC445108C95EEEE950DAAFAA7DDF63ABA148
Authority key identifier: D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131362e302f32322d3234203d3e20323636353834.roa
Signing time:             Wed 20 Mar 2024 18:29:21 +0000
ROA not before:           Wed 20 Mar 2024 18:24:21 +0000
ROA not after:            Wed 19 Mar 2025 18:29:21 +0000
asID:                     266584
IP address blocks:        45.7.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:25:dc:44:51:08:c9:5e:ee:e9:50:da:af:aa:7d:df:63:ab:a1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
        Validity
            Not Before: Mar 20 18:24:21 2024 GMT
            Not After : Mar 19 18:29:21 2025 GMT
        Subject: CN=4524E3E9B204BB57BA5ACB6148E8EC933F834541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:73:6b:78:ed:0d:2c:28:79:4e:34:55:db:9f:
                    a5:6b:80:14:b1:77:95:5a:47:b5:7b:66:38:74:1a:
                    7c:2b:c2:a4:43:5e:11:04:b4:a0:f9:17:4f:2e:9a:
                    d2:19:95:70:b3:bb:49:17:71:af:fe:6a:13:79:e6:
                    19:1d:c4:56:ab:5d:45:d1:46:3b:a9:eb:40:13:f4:
                    41:2d:27:a5:99:2e:18:52:47:33:37:ce:80:3d:9e:
                    ce:fb:70:8b:9d:37:06:bc:01:43:ff:ad:eb:9f:42:
                    1f:82:b4:98:70:9b:cc:54:d7:cc:d9:a8:b6:78:0a:
                    26:3d:95:40:69:3d:7e:77:55:9f:89:4c:97:a2:88:
                    3f:a3:0e:d6:3c:1e:d7:78:d1:bf:04:9e:d6:6c:85:
                    e3:37:fd:c2:38:60:05:4d:7c:be:08:d5:5d:c7:71:
                    9f:87:4a:87:39:09:2c:91:01:60:e8:9a:f6:61:8a:
                    c4:ac:4d:b7:1c:96:0f:7d:da:66:18:a0:e3:58:e3:
                    5e:6c:5e:87:3b:5a:c3:bf:98:5c:60:d7:27:ae:50:
                    75:f3:99:c4:45:0f:ac:9a:18:c1:3e:3a:57:0f:ad:
                    6b:47:7d:a8:be:d0:39:2e:8c:ab:4e:d6:64:64:50:
                    7c:03:d4:fa:77:5f:c8:93:26:d7:4f:2b:d8:c0:86:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:24:E3:E9:B2:04:BB:57:BA:5A:CB:61:48:E8:EC:93:3F:83:45:41
            X509v3 Authority Key Identifier:
                keyid:D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131362e302f32322d3234203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:c9:1e:fd:cb:45:fc:43:a1:c7:3c:bf:98:32:0b:16:31:e7:
         27:7a:c6:28:ee:10:aa:16:4b:ce:d8:6c:10:f9:61:87:28:c4:
         7d:ee:96:09:14:01:66:c6:3b:32:04:79:a7:a9:1f:d0:97:f1:
         71:d9:d8:7c:68:f1:99:1e:d5:3b:65:9f:24:f6:aa:81:c9:89:
         7e:94:e5:24:cd:f8:ad:bc:29:48:a2:4b:00:ce:bb:47:e7:6d:
         5f:0b:8b:e0:76:90:eb:9d:6f:ce:19:a8:b9:ac:82:a8:72:11:
         fd:51:85:09:ec:0b:de:51:8a:55:f4:fe:0c:66:0c:81:63:34:
         e3:57:e2:39:a4:91:6b:19:5a:c8:80:2d:b3:3b:cb:08:ef:40:
         a1:cd:70:9b:0b:37:b7:a2:c8:49:96:ad:ed:fb:12:83:1c:2d:
         35:65:23:90:4b:a3:30:0d:b0:28:14:13:43:67:1d:0f:4d:97:
         15:76:98:69:09:01:38:c8:74:cd:e4:77:a5:73:ef:50:ee:56:
         ae:f8:88:8c:73:aa:d2:7c:0c:e8:cd:92:2b:5e:f3:6d:76:81:
         81:a7:65:f8:b3:1f:23:47:c8:7d:0e:bf:bf:af:a4:17:8a:9d:
         81:46:64:91:58:70:bf:77:f7:55:0c:ac:8a:79:bb:82:8b:96:
         1b:44:3a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org