Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233362e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          t4ZRox0FbdKaudmbEH7qYXSEpiWLg0ploAfoL8fqVQY=
Subject key identifier:   94:97:F8:E5:74:D4:47:51:3C:D4:8D:7F:2F:DF:66:66:AE:77:38:87
Certificate issuer:       /CN=D6705BC868D161B2B42EB6434932188F27722DF3
Certificate serial:       096D251E3309045FC02AA5AD34AFEDF0A6A08424
Authority key identifier: D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 29 Feb 2024 23:20:24 +0000
ROA not before:           Thu 29 Feb 2024 23:15:24 +0000
ROA not after:            Thu 27 Feb 2025 23:20:24 +0000
asID:                     267675
IP address blocks:        45.224.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6d:25:1e:33:09:04:5f:c0:2a:a5:ad:34:af:ed:f0:a6:a0:84:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6705BC868D161B2B42EB6434932188F27722DF3
        Validity
            Not Before: Feb 29 23:15:24 2024 GMT
            Not After : Feb 27 23:20:24 2025 GMT
        Subject: CN=9497F8E574D447513CD48D7F2FDF6666AE773887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:e9:b7:61:ce:e7:24:82:ef:75:c2:c3:6a:
                    fa:93:39:e3:79:55:22:b4:80:4d:29:9f:62:12:76:
                    b9:88:d5:41:5a:3e:6d:bd:26:ff:b5:3f:f1:3b:84:
                    95:33:8d:34:23:6c:32:ff:42:e6:0b:78:fa:b8:bb:
                    ae:2b:6f:cc:d3:b0:7f:d3:9b:11:29:3b:59:c1:01:
                    31:b5:4b:2c:cc:e5:d0:f1:34:f8:e8:2a:8d:98:ec:
                    52:4b:e1:54:7e:6d:3e:9e:6c:83:ca:73:91:cf:90:
                    e9:d9:e6:b2:6b:07:a4:40:d9:d9:49:df:5d:90:c3:
                    68:08:ac:d9:9b:f6:c2:58:18:aa:bc:67:00:06:7a:
                    b6:2e:44:6c:0e:58:e3:77:53:60:7e:e6:32:fe:e4:
                    ad:3b:8a:1c:32:46:83:8f:2f:51:67:cf:24:16:c2:
                    39:98:28:e2:64:e8:a7:87:ef:ca:4b:3b:bc:3b:dc:
                    b2:1b:ef:58:1d:34:b1:14:a4:4f:98:fe:28:de:52:
                    1b:49:7e:2c:cf:9f:1d:e9:a6:82:3c:c6:29:b9:36:
                    b3:a1:a5:14:77:51:92:64:75:3e:8d:38:78:90:ee:
                    0e:e8:86:ea:4d:63:cf:16:87:1f:71:e7:03:1e:ca:
                    66:a5:e4:28:b0:c3:ac:c2:50:d8:bf:7f:55:58:ec:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:97:F8:E5:74:D4:47:51:3C:D4:8D:7F:2F:DF:66:66:AE:77:38:87
            X509v3 Authority Key Identifier:
                keyid:D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/D6705BC868D161B2B42EB6434932188F27722DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:80:71:a2:c7:00:a0:a6:b5:de:aa:7b:d0:45:3e:c4:e7:23:
         2b:8b:4c:76:50:a4:71:e9:57:bd:63:dd:f0:33:83:1d:a1:24:
         96:8e:d1:56:79:4e:a1:2e:63:47:51:df:da:fa:4e:f5:78:af:
         48:6d:5b:5f:1c:1d:69:75:f5:a6:33:d2:2e:76:18:3c:09:02:
         b8:6d:d3:02:87:94:b4:72:77:1f:39:40:09:dc:15:04:92:24:
         ce:69:7c:34:96:f0:79:17:b7:e1:1d:be:bd:19:a4:32:34:c1:
         eb:39:3a:9e:ca:50:6c:4f:0c:15:2e:34:cf:b4:26:65:a0:eb:
         eb:36:90:8d:5f:20:94:fd:1c:fe:7d:b3:a4:fa:23:29:43:aa:
         4f:2b:6b:04:94:33:50:03:3c:80:b1:9b:dc:07:3b:59:0d:43:
         5e:b4:70:96:86:67:dc:2b:18:0e:e8:6b:42:51:c6:ec:47:fe:
         03:dd:f0:97:51:78:05:5b:9b:09:d5:de:09:81:d2:0d:26:71:
         d2:ee:8e:f8:20:21:a6:ec:d6:a5:fd:c4:66:9f:2a:dd:b6:67:
         e2:3e:e7:53:0c:78:ef:ac:a8:c2:35:1a:7b:47:63:41:30:06:
         84:c0:81:5f:db:2f:14:10:34:d0:ca:8b:6b:fc:41:8d:63:30:
         5b:f6:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org