Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32332d3233203d3e20323638373839.roa
File:                     34352e3137332e32382e302f32332d3233203d3e20323638373839.roa (raw, json)
Hash identifier:          8bB5Q+KtDG9rF1bKQih8JRKh8Vn7CmBAnZUPWGV/I7U=
Subject key identifier:   A6:4E:09:78:73:AD:E4:48:43:65:D1:E3:80:AC:66:87:7A:8A:59:D6
Certificate issuer:       /CN=9836DDAF4A063B35C599D8E74240140479434CEE
Certificate serial:       4665F24FDEB8737BC9716DED83E1886F01CE8CB9
Authority key identifier: 98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32332d3233203d3e20323638373839.roa
Signing time:             Mon 11 Mar 2024 19:31:02 +0000
ROA not before:           Mon 11 Mar 2024 19:26:02 +0000
ROA not after:            Mon 10 Mar 2025 19:31:02 +0000
asID:                     268789
IP address blocks:        45.173.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:65:f2:4f:de:b8:73:7b:c9:71:6d:ed:83:e1:88:6f:01:ce:8c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9836DDAF4A063B35C599D8E74240140479434CEE
        Validity
            Not Before: Mar 11 19:26:02 2024 GMT
            Not After : Mar 10 19:31:02 2025 GMT
        Subject: CN=A64E097873ADE4484365D1E380AC66877A8A59D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:05:67:2e:e8:40:8a:65:e0:da:9f:70:d9:
                    ac:24:63:2d:e5:f1:84:ec:72:86:a4:b7:f1:37:4a:
                    e3:13:d6:62:a3:9c:6d:21:09:0f:2c:ba:00:5a:2e:
                    6f:ab:d3:78:e4:a2:0d:0a:34:47:09:c5:50:20:7d:
                    b1:bf:6b:36:66:8d:2e:6b:c6:58:65:cc:fc:ef:ee:
                    bd:6b:d0:3e:f6:b6:7b:09:e1:b8:0f:73:47:2f:64:
                    8e:30:93:98:18:1b:e3:fd:41:58:3b:3d:cd:ac:67:
                    15:1f:3d:c9:e2:63:d2:9c:a2:2c:9c:05:fd:ac:b3:
                    8f:5f:17:2e:3d:47:be:be:6d:1a:c3:22:f7:70:67:
                    7e:f8:94:82:f4:fa:cc:e2:53:9e:21:26:51:46:42:
                    97:1e:1b:80:0f:79:31:ca:db:5f:53:73:ed:55:03:
                    c2:06:52:66:19:40:55:47:e3:57:fe:13:3d:6a:c3:
                    16:7f:11:47:24:c4:24:55:49:39:a5:30:81:06:ee:
                    93:d5:c1:df:d9:65:2c:22:68:87:6a:3c:fa:74:fb:
                    34:2e:45:99:83:4e:e3:4d:05:96:c6:88:d4:c6:4c:
                    17:62:6d:40:1a:d8:eb:4e:12:7b:92:88:f9:b5:c3:
                    65:50:3a:ac:77:f8:ce:a4:a4:51:a4:57:44:0c:63:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4E:09:78:73:AD:E4:48:43:65:D1:E3:80:AC:66:87:7A:8A:59:D6
            X509v3 Authority Key Identifier:
                keyid:98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/9836DDAF4A063B35C599D8E74240140479434CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32332d3233203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:31:0d:ee:45:b8:a5:4d:21:bd:c8:93:68:90:e2:43:90:
         20:84:71:44:6d:03:58:3a:79:e0:42:c1:9a:51:c3:9d:e7:f3:
         fd:41:7c:8a:4d:47:57:da:1e:74:8b:db:0c:67:9b:46:ad:81:
         7f:27:bc:6b:0a:dc:9d:a8:d0:06:fc:b1:b2:4c:5f:ec:2d:88:
         96:34:80:06:1d:e4:67:93:9c:12:ea:9a:fb:c9:09:5f:35:6d:
         17:bf:a2:85:e3:c2:03:2a:10:17:30:04:c3:20:17:db:0f:de:
         d3:6f:9a:c8:86:b0:ad:9f:3f:a3:7a:ba:5b:da:79:fd:26:5d:
         eb:41:c4:23:25:f7:92:9f:21:0f:fc:0e:29:f4:92:7c:42:2b:
         8c:3c:1c:d8:f2:e1:de:33:35:b4:78:96:78:7f:2f:c1:67:1c:
         d2:aa:46:f7:33:2f:51:a2:44:9a:0a:9b:7d:74:2b:f6:6d:62:
         90:e7:f8:68:c3:c5:30:f6:36:5f:d0:80:94:6a:8c:eb:d0:1b:
         59:b9:9c:ea:26:bf:e7:5e:ff:13:2d:84:81:48:f4:0a:b9:48:
         23:2b:be:7b:1f:a8:da:30:c8:11:55:07:a1:20:8b:f2:9b:ea:
         87:be:bc:e6:47:8a:b5:48:48:16:18:8b:e5:d3:a7:34:8d:8c:
         55:41:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org