Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34312e302f32342d3234203d3e20323636303534.roa
File:                     34352e342e34312e302f32342d3234203d3e20323636303534.roa (raw, json)
Hash identifier:          994U9xLwd0EMeR8ML9PyxtUNRVujXBIw/0nT5TmLoSg=
Subject key identifier:   DD:A6:A7:42:50:19:0E:9F:E8:43:1B:6C:3F:4A:BE:CC:1C:4C:23:15
Certificate issuer:       /CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
Certificate serial:       08982E391F2C47583596AA6F5E9835D045B247B1
Authority key identifier: EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34312e302f32342d3234203d3e20323636303534.roa
Signing time:             Thu 15 Feb 2024 14:56:49 +0000
ROA not before:           Thu 15 Feb 2024 14:51:49 +0000
ROA not after:            Thu 13 Feb 2025 14:56:49 +0000
asID:                     266054
IP address blocks:        45.4.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:98:2e:39:1f:2c:47:58:35:96:aa:6f:5e:98:35:d0:45:b2:47:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
        Validity
            Not Before: Feb 15 14:51:49 2024 GMT
            Not After : Feb 13 14:56:49 2025 GMT
        Subject: CN=DDA6A74250190E9FE8431B6C3F4ABECC1C4C2315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:ca:a0:ba:f7:d6:42:a8:0e:a3:11:35:12:
                    8d:67:fb:cc:ce:73:5a:c4:50:bd:da:ff:43:91:20:
                    80:d9:f9:67:43:f7:67:30:c8:c2:55:88:f7:50:2e:
                    b8:21:83:a0:3b:e3:94:40:a0:68:41:e7:ef:b8:5f:
                    d2:71:d6:d1:c9:44:84:af:84:ed:2b:1d:ca:cb:28:
                    e9:90:51:fb:94:c1:4c:88:c6:10:7a:6f:76:94:85:
                    b4:b6:45:5b:88:f8:c4:a9:0f:70:32:ff:1d:be:71:
                    33:12:76:60:9f:6c:52:55:25:28:f7:70:9d:21:6f:
                    2d:28:20:ac:64:48:dd:08:24:c4:c7:8e:cf:3e:ef:
                    31:ba:67:b5:c3:04:8f:58:13:cc:1d:b5:9e:d0:fc:
                    cf:d9:36:ea:78:21:96:87:01:33:43:c5:73:bb:c7:
                    90:0c:0b:4a:9a:35:2e:32:92:a8:d9:21:14:01:30:
                    a8:c2:8a:43:bc:45:8a:a8:41:80:f3:7d:dc:bf:33:
                    30:9e:8e:c7:4a:9b:8d:27:40:09:25:24:d7:76:c9:
                    e6:8d:86:62:9b:20:52:66:c6:c4:de:1a:3d:f5:b9:
                    71:de:7e:cd:5c:61:de:8a:25:55:42:a8:12:b0:81:
                    cc:c4:5c:d4:49:d7:87:39:d4:fa:f7:05:b6:fa:de:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A6:A7:42:50:19:0E:9F:E8:43:1B:6C:3F:4A:BE:CC:1C:4C:23:15
            X509v3 Authority Key Identifier:
                keyid:EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34312e302f32342d3234203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:93:96:10:ca:61:e7:42:ac:43:42:97:e7:af:7c:af:7f:
         c7:63:ae:af:06:ba:1e:87:a5:40:e3:67:66:01:15:c0:98:34:
         15:7b:7e:4c:2c:8c:e7:98:69:ff:45:a7:b3:9f:ab:aa:86:61:
         20:7b:20:6c:a4:b6:14:75:21:5b:1b:3d:4f:ff:c3:17:e0:45:
         bb:1e:9e:02:25:cc:7e:ae:85:27:a6:05:1e:16:e4:82:67:8b:
         8e:aa:ef:fa:34:a1:ab:a1:4c:0b:fb:7f:b5:99:cf:2a:af:78:
         60:69:f3:41:b6:66:ec:d2:2c:e4:a5:96:68:f3:ac:90:ad:61:
         c0:af:e2:77:0b:57:66:10:5f:0a:64:01:d3:9c:95:bf:e9:a0:
         cf:65:ee:ce:4d:6b:e5:47:a0:36:24:0f:9a:4c:81:06:0e:41:
         93:70:48:6d:54:90:c9:d7:d2:e8:3f:fb:95:54:3c:82:80:86:
         c8:19:6e:97:8d:e7:bf:13:62:a1:3f:eb:1e:cd:97:54:02:08:
         e9:f9:09:58:e4:4e:b9:3e:31:34:26:6d:b0:b4:79:17:ab:6d:
         7f:90:a3:0a:bb:28:c8:2c:43:af:7e:6c:54:77:c1:a6:fa:e9:
         9f:57:da:dd:28:50:ef:e6:10:23:43:57:7d:60:bd:f9:09:0b:
         ed:2c:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org