Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32322d3232203d3e20323638373839.roa
File:                     34352e3137332e32382e302f32322d3232203d3e20323638373839.roa (raw, json)
Hash identifier:          3vIEKmb1IX6l35RG8FX5QQYzwiHW+Mt0CY5+cj6L5GY=
Subject key identifier:   7A:C1:87:5A:29:6E:F8:96:DE:FF:7F:BB:BF:83:26:D7:7B:2C:A0:76
Certificate issuer:       /CN=9836DDAF4A063B35C599D8E74240140479434CEE
Certificate serial:       03FFE0DDB65567723E37D6B5FBECFDD9155192AE
Authority key identifier: 98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32322d3232203d3e20323638373839.roa
Signing time:             Mon 11 Mar 2024 19:31:00 +0000
ROA not before:           Mon 11 Mar 2024 19:26:00 +0000
ROA not after:            Mon 10 Mar 2025 19:31:00 +0000
asID:                     268789
IP address blocks:        45.173.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ff:e0:dd:b6:55:67:72:3e:37:d6:b5:fb:ec:fd:d9:15:51:92:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9836DDAF4A063B35C599D8E74240140479434CEE
        Validity
            Not Before: Mar 11 19:26:00 2024 GMT
            Not After : Mar 10 19:31:00 2025 GMT
        Subject: CN=7AC1875A296EF896DEFF7FBBBF8326D77B2CA076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:ca:82:dc:61:d4:63:40:ac:0f:72:ae:fa:
                    33:d3:c5:6d:fa:96:c9:ea:4b:39:5f:e7:d7:e4:04:
                    5b:88:97:73:c6:6a:5f:e0:0a:8a:bc:08:24:82:86:
                    c3:87:91:04:3e:50:46:d1:6e:1a:2e:2e:13:f9:2f:
                    9c:e1:07:64:c3:87:de:99:94:fe:d9:a6:19:c7:13:
                    a6:c0:8d:51:59:8a:8a:12:45:24:c7:0f:52:5e:fb:
                    e0:97:61:79:a7:4f:49:5b:d8:c5:c4:ae:a2:51:41:
                    0e:e7:2e:7c:45:29:be:8f:19:a6:f8:b9:65:ce:ce:
                    55:02:56:ce:c3:a5:35:20:5f:72:9b:82:a2:62:da:
                    34:ca:b5:89:41:64:e3:62:51:c2:00:00:84:7b:75:
                    d2:62:ba:98:31:9b:00:8c:98:39:c8:44:e5:70:e3:
                    c9:5c:9b:a8:c7:56:d7:0d:9f:f8:aa:d2:ef:61:6b:
                    96:d4:ff:72:b8:b7:fb:cb:bf:30:ec:73:cb:b0:90:
                    9e:fa:96:98:ad:82:1c:6c:5a:96:0a:88:1c:7c:d0:
                    94:e1:6a:ab:3d:5a:1b:11:9b:05:b0:08:4b:20:0d:
                    01:90:33:28:02:e7:bd:0f:1e:df:ac:13:09:ff:42:
                    51:de:67:51:1d:ef:86:fa:73:fe:19:10:c5:47:35:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:87:5A:29:6E:F8:96:DE:FF:7F:BB:BF:83:26:D7:7B:2C:A0:76
            X509v3 Authority Key Identifier:
                keyid:98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/9836DDAF4A063B35C599D8E74240140479434CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32322d3232203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:a6:d0:40:0a:18:6e:f9:78:ab:ee:c9:94:c7:f9:cf:f9:c7:
         d5:cd:47:de:3d:2a:be:0b:87:13:17:12:b2:30:55:75:f1:92:
         92:a5:d8:ad:98:8f:04:5e:08:46:e1:29:00:05:98:33:08:f7:
         01:6a:d7:e7:63:95:39:2c:82:5f:a9:39:f8:e6:7a:9c:0d:26:
         df:f3:d9:bd:a1:25:a2:ea:dc:90:93:64:cd:6e:ef:de:1a:7f:
         f4:9d:88:cc:6f:ee:9a:e3:4a:c0:82:31:d9:88:d1:0a:52:4c:
         6a:2e:a1:fa:33:ab:5f:6e:0d:f5:3f:dc:06:3f:04:d1:7a:91:
         52:d4:a2:6a:02:41:bf:bf:24:65:6c:82:f4:15:5d:10:d9:cd:
         42:e3:20:2e:b4:7f:c6:9b:26:d9:42:56:08:1f:b8:72:45:29:
         c7:80:e5:bc:3e:b5:96:15:96:23:aa:ac:5f:ec:b8:12:9d:da:
         44:d0:de:1b:35:d0:2e:dc:19:95:e6:70:92:b6:3b:6c:f8:f4:
         0d:74:e6:ce:39:97:5d:7f:0c:d3:bf:c6:2e:e9:47:03:56:a4:
         50:8e:1c:bb:04:78:68:97:8b:5b:f1:51:15:a0:31:ea:47:91:
         b4:7d:46:bd:f7:fd:1b:a3:a6:4a:28:ee:3b:a3:18:af:85:6a:
         5a:b1:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org