Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa
File:                     34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa (raw, json)
Hash identifier:          T4xENRIVFc6DZwATNv5Vys7imLkmwu9FQsy1v83JFl8=
Subject key identifier:   7E:0A:36:FC:C8:72:27:E5:49:D2:8C:D1:21:EE:0B:85:A0:EE:3F:41
Certificate issuer:       /CN=D6705BC868D161B2B42EB6434932188F27722DF3
Certificate serial:       29E632B8779676AB0EBABFBD50361123E8D38179
Authority key identifier: D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa
Signing time:             Thu 29 Feb 2024 23:20:25 +0000
ROA not before:           Thu 29 Feb 2024 23:15:25 +0000
ROA not after:            Thu 27 Feb 2025 23:20:25 +0000
asID:                     267675
IP address blocks:        45.224.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e6:32:b8:77:96:76:ab:0e:ba:bf:bd:50:36:11:23:e8:d3:81:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6705BC868D161B2B42EB6434932188F27722DF3
        Validity
            Not Before: Feb 29 23:15:25 2024 GMT
            Not After : Feb 27 23:20:25 2025 GMT
        Subject: CN=7E0A36FCC87227E549D28CD121EE0B85A0EE3F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:b1:01:66:34:a4:7d:3c:0c:f7:e2:98:6f:
                    43:1b:9d:97:d6:d2:e4:e3:54:d9:8b:c3:94:c8:a3:
                    85:b5:e7:a2:55:5e:2c:da:c8:ce:37:ca:0e:a2:96:
                    c8:7c:b3:a4:0a:c3:27:77:4d:69:9a:d1:4a:c5:fd:
                    7c:4c:5f:28:61:8a:94:91:d9:57:c7:7c:ad:f5:af:
                    4e:1a:e4:86:bb:aa:03:9e:38:d8:65:21:a2:80:0f:
                    21:26:80:3e:09:68:04:56:c6:14:2f:d1:8e:8a:a3:
                    52:07:67:9a:18:45:f6:63:35:01:10:9e:71:b6:09:
                    1e:00:3c:c5:38:f5:bf:96:2e:d3:9c:4b:52:cd:73:
                    29:b0:4a:2a:05:ea:6e:26:bd:89:0b:16:11:3c:5e:
                    b4:58:16:e8:57:15:55:70:f8:3f:1d:ac:ae:1e:0e:
                    07:41:b6:5d:b1:81:be:3f:2f:1a:04:11:44:dd:22:
                    d3:d0:c1:66:61:f4:a1:fd:0e:4f:c6:70:50:99:df:
                    77:b0:2d:e3:9e:df:9d:4b:09:b6:e4:2e:09:b9:46:
                    d7:57:a0:1b:5d:4d:cd:66:56:eb:2a:40:27:19:28:
                    8a:79:1a:0e:1f:c0:c9:d1:92:17:22:46:7b:62:cf:
                    78:47:60:21:2d:7d:e6:e4:16:03:2f:1a:be:d5:ac:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0A:36:FC:C8:72:27:E5:49:D2:8C:D1:21:EE:0B:85:A0:EE:3F:41
            X509v3 Authority Key Identifier:
                keyid:D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/D6705BC868D161B2B42EB6434932188F27722DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:52:02:f9:42:9f:eb:b2:50:dd:b4:ab:a1:ba:81:76:59:
         e2:c0:5b:a4:82:f3:da:06:7e:3b:59:53:69:a4:dd:9a:8e:31:
         2a:3e:d7:88:ae:92:e2:d5:01:40:46:cf:63:b2:68:c4:7f:a5:
         b4:29:25:f3:1f:2c:b1:4d:23:e3:7a:ab:1d:ff:b7:fe:95:05:
         55:32:68:e4:c9:22:23:f6:7c:52:25:31:5d:7d:ee:8b:c1:98:
         0a:e1:23:4c:b6:25:37:af:c4:06:26:2d:bc:d5:0c:89:3e:61:
         88:68:d1:a2:e4:0a:db:d7:6c:70:39:55:9c:8d:40:8b:26:d8:
         77:8c:4e:06:76:6a:38:a2:a1:89:5a:f9:02:5e:ac:d7:dd:ff:
         54:03:d9:ff:c2:cd:88:31:b7:ce:ab:49:62:3a:4c:0d:ae:e4:
         35:52:e9:a3:69:4f:b1:d3:9b:ac:05:a8:75:04:29:73:18:d4:
         e8:fa:4e:78:d4:bd:de:86:48:42:7d:78:51:6e:28:f3:4a:6d:
         78:6c:28:c3:53:74:6b:f3:ac:ed:da:27:d0:40:48:60:bb:35:
         ee:b0:60:b6:2a:21:c3:f9:ca:41:7c:c0:45:61:8c:bd:ae:79:
         10:a1:f6:49:12:90:5e:c4:98:82:62:5e:47:4f:d8:30:56:2a:
         59:b6:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org