Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34302e302f32322d3234203d3e20323636303534.roa
File:                     34352e342e34302e302f32322d3234203d3e20323636303534.roa (raw, json)
Hash identifier:          ubB62D5x9/Amb0QoYflQTb1sjunZ96XsHnqQywl40O0=
Subject key identifier:   FF:1B:6C:39:05:18:03:AB:CB:89:A8:07:2D:71:9B:47:B8:AF:5B:F8
Certificate issuer:       /CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
Certificate serial:       4C4ED53E4EAB5E33FE1495D852087BC61FFBF1BF
Authority key identifier: EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34302e302f32322d3234203d3e20323636303534.roa
Signing time:             Wed 10 Apr 2024 13:11:59 +0000
ROA not before:           Wed 10 Apr 2024 13:06:59 +0000
ROA not after:            Wed 09 Apr 2025 13:11:59 +0000
asID:                     266054
IP address blocks:        45.4.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4e:d5:3e:4e:ab:5e:33:fe:14:95:d8:52:08:7b:c6:1f:fb:f1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
        Validity
            Not Before: Apr 10 13:06:59 2024 GMT
            Not After : Apr  9 13:11:59 2025 GMT
        Subject: CN=FF1B6C39051803ABCB89A8072D719B47B8AF5BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:5e:e0:8c:dd:cb:c6:04:8d:bf:31:9e:63:
                    e3:ee:1b:58:e0:df:64:7b:a8:8e:50:cb:f0:6e:4f:
                    87:19:9a:f8:14:86:16:75:64:23:59:2d:fe:19:29:
                    99:b2:d1:98:bf:72:fc:a0:2f:3b:a7:5a:b9:1e:85:
                    4d:7f:88:fa:06:33:3f:b0:ab:98:75:94:fc:25:15:
                    10:b8:68:cf:a3:c5:d7:b0:19:cb:96:18:14:72:33:
                    6b:90:42:ae:bf:7b:61:e3:9f:8f:c7:0d:f4:dc:44:
                    7a:f0:aa:cf:60:c4:e0:dc:80:06:2c:14:7b:8f:ce:
                    14:56:40:39:29:fa:9e:57:f8:dd:5d:3c:e9:3a:1e:
                    52:b4:3c:9e:6f:9e:a4:f5:65:4f:b3:5d:54:5a:2c:
                    5c:e5:ed:0a:62:27:fd:06:31:63:8d:43:01:24:08:
                    e8:8f:88:31:a1:9b:8a:7b:db:ac:c7:b2:f9:96:dc:
                    e8:f4:7f:e4:d5:db:65:29:6a:89:33:6c:d0:5d:5f:
                    4c:27:02:da:13:ca:10:31:da:d8:86:99:55:50:32:
                    c0:ea:5f:03:ab:d9:01:d6:78:9b:15:de:cc:b9:71:
                    e8:5f:ed:1b:0a:aa:29:ac:74:13:70:a3:6f:c8:b0:
                    80:86:b5:40:ab:5d:33:b0:8c:3f:b4:33:6c:4c:bb:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1B:6C:39:05:18:03:AB:CB:89:A8:07:2D:71:9B:47:B8:AF:5B:F8
            X509v3 Authority Key Identifier:
                keyid:EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34302e302f32322d3234203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:61:0b:c5:27:de:13:aa:fe:71:16:0f:ac:7f:53:f4:03:4f:
         75:35:2d:49:77:42:ed:7d:3a:df:ca:a1:32:57:37:14:69:ad:
         fc:8e:a4:cb:fd:80:bc:c6:dd:16:41:31:0a:f9:8f:e2:89:f0:
         cb:c8:94:67:5e:67:0b:08:3d:c1:9d:a8:c5:a4:de:2c:b2:5d:
         54:da:bc:aa:00:14:ac:4a:bb:b5:f2:99:ea:f1:f4:8f:11:91:
         b2:b9:50:b0:45:df:c5:5f:8a:48:74:97:37:a5:19:ab:5b:cf:
         60:6b:4f:9c:18:63:f1:1f:9a:68:0c:e6:17:8d:84:94:d7:f5:
         1b:fa:c3:e0:8e:6e:24:99:04:98:53:db:9c:b2:e9:08:ac:ab:
         10:c3:d9:ee:48:2b:9c:57:de:dd:ac:62:7e:d9:71:5f:68:fb:
         d4:30:5e:5c:53:09:0f:c9:4a:27:3c:5b:24:d7:6d:4c:0a:fc:
         03:db:48:40:6c:82:62:7d:57:ac:66:c6:f6:64:bf:d8:3c:50:
         2c:3d:ff:38:17:74:f4:84:cf:9a:9c:cc:51:8f:ae:73:6e:25:
         84:53:ae:98:1c:e0:48:72:4a:f2:c9:df:de:f2:87:ef:a7:9d:
         9d:e8:8d:38:3b:b1:30:05:e6:37:22:c5:8e:5b:24:a8:2a:24:
         00:c8:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org