Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32332d3233203d3e20323637363735.roa
File:                     34352e3232342e3233362e302f32332d3233203d3e20323637363735.roa (raw, json)
Hash identifier:          jIreh6fbPU8VyOtXIQY5lV5fAOJsqDo9XmxeCdQprQ0=
Subject key identifier:   94:FD:A8:46:A3:11:0E:42:87:9C:0D:F7:94:26:70:6A:EE:5D:09:52
Certificate issuer:       /CN=D6705BC868D161B2B42EB6434932188F27722DF3
Certificate serial:       5EEEA2AA09270E2EA7C8C025A502E2BBCF09411E
Authority key identifier: D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32332d3233203d3e20323637363735.roa
Signing time:             Thu 29 Feb 2024 23:20:24 +0000
ROA not before:           Thu 29 Feb 2024 23:15:24 +0000
ROA not after:            Thu 27 Feb 2025 23:20:24 +0000
asID:                     267675
IP address blocks:        45.224.236.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ee:a2:aa:09:27:0e:2e:a7:c8:c0:25:a5:02:e2:bb:cf:09:41:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6705BC868D161B2B42EB6434932188F27722DF3
        Validity
            Not Before: Feb 29 23:15:24 2024 GMT
            Not After : Feb 27 23:20:24 2025 GMT
        Subject: CN=94FDA846A3110E42879C0DF79426706AEE5D0952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:66:70:4e:5c:18:09:43:8c:ee:78:79:67:34:
                    80:ab:12:f0:03:2b:7a:33:af:f4:fb:5f:0e:65:28:
                    9c:db:fd:0e:83:30:4e:b6:f7:76:bb:76:94:2e:a7:
                    85:83:e0:6c:3b:3b:b0:c1:48:92:55:89:6e:4d:b4:
                    9e:c4:88:64:e3:83:a6:d2:19:a6:a5:f2:87:13:ee:
                    f8:a3:6b:56:15:92:40:22:6d:c0:6e:e2:ee:b0:27:
                    f1:13:d4:8b:3f:65:8f:1d:9c:33:37:bc:ff:0f:4b:
                    a2:5b:f2:27:2f:f6:17:d7:13:b6:9c:f0:00:72:16:
                    f8:a3:de:2a:7b:77:1f:27:e7:0b:5f:91:1a:1c:96:
                    47:db:4d:97:c1:f0:8c:b8:0d:48:31:28:bd:04:d0:
                    55:9f:22:cf:89:d4:0e:26:9b:1a:28:44:c7:eb:14:
                    9b:46:8a:71:0f:1d:59:5f:4d:eb:7d:2b:45:3e:e3:
                    69:94:d2:10:9e:a4:fc:12:a2:11:b2:49:32:8f:a4:
                    c5:65:ef:ce:75:34:91:c8:fd:6c:73:f8:20:f2:13:
                    90:dc:85:b6:3a:f6:55:6c:ad:94:b4:15:ca:5d:2d:
                    48:35:99:ea:43:84:ef:8a:8d:62:3c:ce:86:3e:e7:
                    96:86:fb:fb:e6:54:bf:13:e8:64:5c:ae:3f:7a:42:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FD:A8:46:A3:11:0E:42:87:9C:0D:F7:94:26:70:6A:EE:5D:09:52
            X509v3 Authority Key Identifier:
                keyid:D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/D6705BC868D161B2B42EB6434932188F27722DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32332d3233203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:1a:6d:d6:e5:2e:cc:dc:c4:e0:51:3f:97:c2:9e:31:9c:
         3c:d5:24:8a:f7:9c:51:ba:85:a1:fa:44:58:66:32:5d:0a:71:
         ba:7e:e8:0a:b7:ae:b6:f2:e9:36:f5:41:79:70:27:47:8e:2e:
         b2:4e:08:28:e9:d3:1c:82:09:aa:ed:11:38:8f:62:a0:68:0d:
         e8:b7:7c:92:1b:56:17:b0:cf:52:f2:f1:d7:c6:4c:85:1a:be:
         be:cc:bd:51:60:09:7e:a0:68:01:87:d2:7b:48:f0:e7:61:e4:
         19:d2:b2:10:68:e3:9b:99:71:5e:06:06:8d:ac:ab:9e:7c:b4:
         b5:a3:ba:ca:7e:ed:11:de:30:ca:42:68:26:f8:a0:19:00:a6:
         3b:af:01:a5:19:29:a5:65:31:95:36:21:ad:70:9e:82:7c:8f:
         86:17:37:e4:36:6c:df:55:08:35:a0:10:ab:20:40:5b:16:72:
         d6:02:4f:3f:20:d4:35:9c:9f:90:03:c8:b0:7d:9f:f7:fa:c1:
         8d:58:e4:e0:fd:c4:2f:94:3a:7b:18:a1:44:68:9d:68:df:40:
         f3:70:89:8e:b8:b5:27:03:e8:92:40:62:59:a0:0d:c0:ad:e4:
         5f:44:0d:18:d0:e4:e8:43:b8:3b:6b:8a:5b:d3:1d:83:f3:3e:
         81:1c:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org