Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          a9Kn0OBrXhNfn9ZTQbLrvUsVuxS4kXvidv0STOr+YBQ=
Subject key identifier:   0D:03:A1:DA:F5:61:3E:73:D9:47:FA:BF:05:27:9E:C9:A7:2D:B0:FB
Certificate issuer:       /CN=D6705BC868D161B2B42EB6434932188F27722DF3
Certificate serial:       12BE8CA2C1A14B475D5056C72D1E0E7C88BD7FA1
Authority key identifier: D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 29 Feb 2024 23:20:25 +0000
ROA not before:           Thu 29 Feb 2024 23:15:25 +0000
ROA not after:            Thu 27 Feb 2025 23:20:25 +0000
asID:                     267675
IP address blocks:        45.224.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:be:8c:a2:c1:a1:4b:47:5d:50:56:c7:2d:1e:0e:7c:88:bd:7f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6705BC868D161B2B42EB6434932188F27722DF3
        Validity
            Not Before: Feb 29 23:15:25 2024 GMT
            Not After : Feb 27 23:20:25 2025 GMT
        Subject: CN=0D03A1DAF5613E73D947FABF05279EC9A72DB0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:ae:c2:7c:13:db:cc:3d:2b:c9:b7:e2:b5:
                    67:5b:fd:a3:c2:d3:a4:85:c6:fd:1f:fb:dd:d8:c3:
                    5a:9f:3b:ab:49:0c:5a:0f:16:c4:68:a7:30:4e:9f:
                    49:20:d4:33:fc:75:f8:9a:61:3c:58:bc:1f:ad:21:
                    f6:33:32:44:bf:51:e5:d5:8f:05:17:13:07:ec:fd:
                    cc:b7:7b:a1:02:fc:ed:2c:ec:83:4f:87:28:54:a6:
                    8f:88:50:96:29:d3:be:ed:f0:cf:0c:34:e6:78:f0:
                    63:2e:8a:d9:5c:90:1f:3d:80:05:27:bc:80:97:86:
                    d4:20:e0:5e:5c:be:9e:1c:46:53:06:b2:be:0d:90:
                    d0:4c:22:f1:d5:16:26:2e:e8:98:70:47:fd:00:c2:
                    09:35:a5:42:7e:cf:83:1f:14:22:ff:bc:ec:7c:c2:
                    6e:28:70:1d:20:3a:52:df:3a:d4:e6:ea:67:fc:98:
                    da:3e:0a:17:b6:98:ae:52:97:75:4c:15:b9:cb:ac:
                    a8:0b:58:43:06:0a:23:27:a6:d2:85:b6:a5:f7:ee:
                    34:10:d5:7b:e3:77:3a:ba:cc:a1:c7:7c:49:f1:f6:
                    c8:d6:5a:20:66:4b:bf:da:3e:5e:e4:40:d2:ec:2b:
                    f3:1c:d9:28:b7:0a:d8:cb:29:61:13:08:cb:b7:08:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:A1:DA:F5:61:3E:73:D9:47:FA:BF:05:27:9E:C9:A7:2D:B0:FB
            X509v3 Authority Key Identifier:
                keyid:D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/D6705BC868D161B2B42EB6434932188F27722DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:fe:2d:30:61:1e:96:72:71:6a:23:a9:3c:7a:fa:ee:07:38:
         6c:8b:95:95:a8:e8:4d:d3:38:5a:c2:c1:be:39:4e:cb:dd:0d:
         db:1f:9d:33:2d:ac:01:90:41:28:1e:7b:a4:c5:69:54:36:39:
         f9:2f:ac:47:c4:18:c2:d8:f6:a5:bf:20:3d:45:65:05:8e:e8:
         82:62:91:da:a0:0f:cf:04:d2:18:59:79:e1:c8:18:61:57:2a:
         2a:b3:fb:83:fa:56:82:4d:07:d6:a9:e9:62:de:33:97:c2:7a:
         1f:9d:8f:1b:20:2d:68:85:0c:54:0d:2b:fd:d3:80:31:a2:f9:
         90:50:6a:00:25:56:54:cd:8f:f3:53:84:2f:ac:67:4a:7c:8f:
         a9:12:f0:6e:7a:32:30:ec:f0:3e:78:bd:28:c7:ff:06:3c:3c:
         ca:9f:03:a8:b8:20:92:f0:fc:8d:82:d2:1b:ca:b0:ab:fc:f7:
         80:f1:37:6c:46:7d:c7:6d:f8:88:20:ae:02:04:c3:b0:84:83:
         b5:e5:0e:f8:ef:e5:8f:3a:3b:ca:f5:9a:3b:5d:2f:53:f9:c3:
         fd:31:50:bd:bd:b1:cb:1c:7c:b0:7d:82:96:5f:d7:16:80:f5:
         18:4c:c9:5a:ac:34:e9:ef:48:f6:5c:0e:e8:a6:0d:39:db:ae:
         87:84:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org