Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          Hhwbo9xTn38bhpWJ9sKJZuo1uSE3cveRObrKlhn+pqQ=
Subject key identifier:   41:84:54:5D:60:E4:CD:1D:7B:21:E0:DA:E5:66:CA:D0:D1:C7:F3:E6
Certificate issuer:       /CN=D6705BC868D161B2B42EB6434932188F27722DF3
Certificate serial:       4D101E80FF09CA764F606BB65BF2E24CA463FA08
Authority key identifier: D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 29 Feb 2024 23:20:24 +0000
ROA not before:           Thu 29 Feb 2024 23:15:24 +0000
ROA not after:            Thu 27 Feb 2025 23:20:24 +0000
asID:                     267675
IP address blocks:        45.224.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:10:1e:80:ff:09:ca:76:4f:60:6b:b6:5b:f2:e2:4c:a4:63:fa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6705BC868D161B2B42EB6434932188F27722DF3
        Validity
            Not Before: Feb 29 23:15:24 2024 GMT
            Not After : Feb 27 23:20:24 2025 GMT
        Subject: CN=4184545D60E4CD1D7B21E0DAE566CAD0D1C7F3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:79:36:0b:70:6a:0a:3c:f8:12:6a:0b:dd:
                    1a:bc:d3:55:3e:44:57:6e:34:4f:03:c7:70:3b:c4:
                    53:ba:e8:a6:73:bc:dc:3c:12:df:cf:7e:0c:b4:97:
                    5e:a9:78:cc:d9:87:4c:0e:53:be:3a:6c:56:66:8b:
                    84:23:3d:30:b3:0d:8f:72:fe:57:c0:ef:dd:11:e5:
                    a2:74:0d:c0:e2:22:5e:50:68:9e:14:78:05:5a:9e:
                    8f:fc:40:47:96:71:6b:35:1b:f7:a2:eb:a8:e3:d1:
                    be:e7:1b:5e:c1:2b:d3:9a:ea:61:32:c1:bb:2f:ca:
                    b5:0a:9f:b2:1b:e7:91:9d:f7:a1:9a:04:13:be:cd:
                    26:0b:8d:7e:c5:19:eb:e1:0d:70:9e:fd:87:51:3b:
                    a0:d9:e3:99:f3:00:3d:b5:31:63:12:e5:13:8a:a4:
                    ac:79:ae:c0:04:b9:8a:80:fd:a4:1a:68:a2:07:ac:
                    2f:c1:e1:be:4b:72:3d:bf:b8:39:f6:7c:a2:46:3b:
                    ab:c4:14:ce:31:c2:4a:46:df:6f:3a:50:68:99:f5:
                    bd:7b:e8:69:ca:38:0b:68:a7:36:8e:b6:31:c3:4c:
                    14:24:b1:3e:77:e8:a3:05:1d:58:c6:39:1d:b5:a6:
                    81:0b:73:e6:99:db:75:75:08:f8:eb:d1:d0:90:10:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:84:54:5D:60:E4:CD:1D:7B:21:E0:DA:E5:66:CA:D0:D1:C7:F3:E6
            X509v3 Authority Key Identifier:
                keyid:D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/D6705BC868D161B2B42EB6434932188F27722DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:87:c0:38:80:2c:1b:c9:64:ff:4a:ae:9f:77:e3:d9:50:
         27:d8:5d:4c:dd:50:e6:e3:82:7a:81:53:68:61:2c:34:fb:3b:
         a2:c2:61:ea:25:dc:3d:c8:33:84:34:93:f3:e5:41:89:06:39:
         9f:44:e1:c2:a3:d0:e3:06:d2:c8:db:00:0f:9a:9c:42:99:2a:
         c3:e4:97:3f:17:ab:35:72:c7:e2:ab:d3:a7:a1:07:63:23:61:
         8c:9a:58:16:3d:db:55:54:63:00:3a:dc:58:66:6f:84:88:90:
         9b:cd:2e:7b:44:ab:a1:4c:80:9d:c5:e0:84:42:b7:b4:b0:bc:
         be:94:08:a7:37:c7:8d:f5:b4:4e:64:0a:a0:cf:6e:64:4a:ca:
         00:66:82:43:fd:e3:9c:0e:d1:02:c4:8b:69:45:e1:03:0b:47:
         74:87:68:82:17:e6:d1:7d:48:5c:f9:b7:7b:b9:fc:b4:e4:c8:
         cc:47:35:c4:da:1c:4f:67:21:9f:18:03:40:fd:4e:11:c4:26:
         b8:cd:a1:2b:d8:0c:a8:81:27:4c:bf:a8:dc:16:a1:fa:be:20:
         ec:85:a4:08:4d:4f:b6:3d:f9:15:b6:6b:4e:b8:b5:c1:eb:52:
         bb:5c:ba:dd:23:22:a2:75:3c:17:0f:53:c1:7b:b1:a4:01:04:
         91:6a:24:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org