Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32342d3234203d3e20323636303534.roa
File:                     34352e342e34322e302f32342d3234203d3e20323636303534.roa (raw, json)
Hash identifier:          QJeiliTV0VH/zSLz5Tb5rlxilyGzlSr4Tl85aSfe4vU=
Subject key identifier:   0F:8A:5A:DD:EE:34:5C:C1:46:B1:6F:1A:9A:F5:5C:E9:F8:A1:35:8A
Certificate issuer:       /CN=DBF158771926EFB8CA7EEE542CF98F947B92A763
Certificate serial:       3867358535EEE33018E389C658F014672DAA8D94
Authority key identifier: DB:F1:58:77:19:26:EF:B8:CA:7E:EE:54:2C:F9:8F:94:7B:92:A7:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBF158771926EFB8CA7EEE542CF98F947B92A763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32342d3234203d3e20323636303534.roa
Signing time:             Fri 23 Aug 2024 20:04:38 +0000
ROA not before:           Fri 23 Aug 2024 19:59:38 +0000
ROA not after:            Fri 22 Aug 2025 20:04:38 +0000
asID:                     266054
IP address blocks:        45.4.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:67:35:85:35:ee:e3:30:18:e3:89:c6:58:f0:14:67:2d:aa:8d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF158771926EFB8CA7EEE542CF98F947B92A763
        Validity
            Not Before: Aug 23 19:59:38 2024 GMT
            Not After : Aug 22 20:04:38 2025 GMT
        Subject: CN=0F8A5ADDEE345CC146B16F1A9AF55CE9F8A1358A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:8c:72:0f:d2:10:2f:a0:52:4c:f4:07:cd:
                    4a:cd:bb:49:f5:b1:e8:7b:65:2d:cd:0a:7f:3b:7f:
                    e9:df:58:0a:f9:89:2e:83:1f:eb:1a:bd:10:85:95:
                    a3:e8:dd:68:49:fa:e1:80:3e:0b:89:16:29:61:dd:
                    a5:84:15:71:ec:cd:2b:06:68:aa:e4:94:27:d0:de:
                    62:1f:c8:b2:af:01:78:4b:af:6d:5c:5a:85:19:bb:
                    bf:ae:e1:82:cc:f4:80:18:1d:c0:e2:9c:9a:c5:c0:
                    e8:89:b4:7c:38:8e:37:08:38:a5:8d:47:9f:7c:29:
                    9a:4c:f8:30:b2:53:05:ce:25:2d:15:17:43:cf:ae:
                    f6:40:39:e7:ca:bb:41:69:3e:7c:16:c6:20:ff:55:
                    ac:df:ed:df:2e:d1:93:1b:82:3d:b7:f0:96:9d:a3:
                    ad:43:d6:7f:73:53:bf:e1:10:c4:14:fd:1a:ff:a5:
                    6a:30:55:17:e7:aa:44:3d:ea:7f:75:4d:91:01:e3:
                    f6:81:fb:e4:95:a0:a9:d5:04:ef:5c:12:1e:cd:9b:
                    56:e7:b0:f2:19:d5:6c:f4:d3:17:7a:49:85:9e:a1:
                    a3:c3:d4:ab:4a:6c:79:db:bb:c6:30:66:aa:c4:2e:
                    36:aa:fb:15:b4:b8:55:3f:0c:cb:9d:a9:6a:5d:66:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:5A:DD:EE:34:5C:C1:46:B1:6F:1A:9A:F5:5C:E9:F8:A1:35:8A
            X509v3 Authority Key Identifier:
                keyid:DB:F1:58:77:19:26:EF:B8:CA:7E:EE:54:2C:F9:8F:94:7B:92:A7:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/DBF158771926EFB8CA7EEE542CF98F947B92A763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBF158771926EFB8CA7EEE542CF98F947B92A763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32342d3234203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:dd:11:7f:66:f6:fb:29:8c:ae:18:ca:98:f6:a7:d6:99:65:
         52:54:33:77:dc:08:48:01:e3:67:99:90:46:62:8e:db:a3:7f:
         2f:8a:a4:a1:d1:7a:34:28:9f:74:a9:ad:70:37:df:a8:b0:40:
         de:f6:bd:2c:60:49:4c:04:96:24:09:b8:5d:21:d7:c9:98:93:
         05:ae:c6:d1:e7:66:23:01:11:30:ff:e6:bb:5d:30:5b:9b:e1:
         c2:36:c5:d7:2a:f7:56:fd:92:25:d2:b8:ad:c4:5a:52:78:12:
         24:98:2f:ea:e6:5a:42:21:e9:3f:db:bd:91:5a:16:53:56:22:
         d6:48:79:fc:b3:c9:99:b3:74:c8:6f:83:97:87:3c:2d:61:56:
         97:9c:03:e2:79:e0:13:cc:87:a7:5d:ef:fd:e0:02:1d:2d:62:
         b7:99:b4:55:df:fa:e9:52:e2:37:2c:ba:4b:77:1f:22:f3:90:
         3d:f0:fe:2e:e5:dc:c3:9c:c3:1a:c1:a9:34:6b:e2:4c:d2:e8:
         19:9c:8a:e4:33:67:8c:f5:b7:ad:f3:bb:c2:35:c6:c7:22:bc:
         da:42:c6:12:2f:09:f3:9f:36:fd:89:e9:75:45:3f:ab:9d:73:
         e2:e5:1d:88:44:e3:9b:4d:f0:24:9f:0d:9d:e2:36:6f:c1:1d:
         ee:43:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 22:54:19 2024 by rpki-client on console-fra.rpki-client.org