Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3137302e302f32342d3234203d3e20323638373836.roa
File:                     34352e3137322e3137302e302f32342d3234203d3e20323638373836.roa (raw, json)
Hash identifier:          /U5AhX9qhK85L+ie4HmdOC9qAoyMHmJk7xHP4ZNZVXk=
Subject key identifier:   06:6B:8C:DE:D3:9C:20:A2:A8:85:D5:F1:7D:BB:95:A4:FB:3A:35:AA
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       99C9839038A6526C094E337C35EEF486819429
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3137302e302f32342d3234203d3e20323638373836.roa
Signing time:             Thu 04 Apr 2024 10:25:57 +0000
ROA not before:           Thu 04 Apr 2024 10:20:57 +0000
ROA not after:            Thu 03 Apr 2025 10:25:57 +0000
asID:                     268786
IP address blocks:        45.172.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            99:c9:83:90:38:a6:52:6c:09:4e:33:7c:35:ee:f4:86:81:94:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr  4 10:20:57 2024 GMT
            Not After : Apr  3 10:25:57 2025 GMT
        Subject: CN=066B8CDED39C20A2A885D5F17DBB95A4FB3A35AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:42:92:5c:23:74:ab:36:c4:50:88:f9:5a:b8:
                    5d:42:20:bb:53:0f:b8:4d:54:17:eb:54:10:77:9d:
                    7a:b0:b5:8d:b4:99:a4:2d:01:fb:f9:c8:f8:48:c8:
                    47:58:03:59:b6:f7:2c:f6:6a:18:2d:e1:8c:50:99:
                    27:0e:ad:73:f7:f9:47:4c:ab:ad:29:fc:88:9e:ca:
                    4b:a2:11:83:e5:0c:8d:23:1c:47:3d:4e:59:9b:8e:
                    57:f3:be:3d:2a:44:a7:5f:78:aa:3c:e2:9e:54:30:
                    f3:1a:14:99:e4:a7:b2:65:91:e7:0d:55:49:97:40:
                    f3:6d:9b:89:ef:d8:01:cf:20:d2:6c:af:b5:62:20:
                    75:3e:08:63:16:ae:e5:1f:94:4b:86:c3:84:4c:33:
                    89:ec:71:10:f8:da:dd:0b:f3:37:21:37:69:f8:dd:
                    fb:d3:5a:20:62:82:45:0c:1e:05:fc:12:79:3a:2b:
                    0d:4f:88:bb:5a:c9:82:f5:b8:b4:c6:61:26:b2:56:
                    c4:80:83:42:74:14:d0:57:26:8b:15:31:b3:22:c0:
                    0e:1d:df:11:66:ac:17:81:2a:6b:d4:46:3c:af:21:
                    b5:6e:18:a0:35:00:cf:68:8c:98:d7:1a:6c:5b:94:
                    de:f6:a1:00:94:52:d8:4f:fd:e0:15:49:a4:f8:47:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:8C:DE:D3:9C:20:A2:A8:85:D5:F1:7D:BB:95:A4:FB:3A:35:AA
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3137302e302f32342d3234203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:04:1d:39:99:13:6c:47:28:c1:86:e6:8e:48:b1:df:55:ce:
         51:02:7a:a3:66:22:fa:2a:53:c4:c0:7f:c3:91:e5:9f:5e:b1:
         aa:0c:68:35:ea:64:90:ce:29:d7:60:74:9b:2b:fd:f2:e4:cb:
         88:b4:3a:e7:b9:f2:e1:b2:db:1e:4e:c3:cc:86:92:52:a4:5c:
         ea:b0:58:ac:7a:ee:f4:4d:80:3f:29:10:57:90:48:e5:c2:31:
         db:6c:24:8d:40:5f:e5:3a:d2:63:ec:c9:24:c6:e8:b0:f3:18:
         3f:2f:79:eb:b5:11:28:5e:6d:0c:d5:aa:20:bd:68:d9:9c:f7:
         28:b2:f6:03:c1:9f:1e:09:2c:b5:d2:a7:7f:0f:96:95:1a:a7:
         0f:80:19:05:8a:8d:d9:2d:73:15:7f:eb:e0:9b:6a:2e:e5:54:
         6e:4c:0a:21:c7:66:9b:b4:6e:99:f1:67:df:81:f5:13:41:07:
         68:fa:4e:59:99:c7:c9:65:11:3e:a4:84:f7:76:3b:a7:36:67:
         ab:ba:31:db:87:96:72:05:2a:da:d3:54:b4:7c:2d:18:42:e6:
         59:55:f9:b3:94:9d:d2:72:84:b3:86:30:e2:d4:eb:d4:4e:72:
         d8:47:92:08:aa:64:c6:8e:78:4d:62:6a:d2:11:c6:cf:60:30:
         d1:f9:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org