Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32392e302f32342d3234203d3e20323638373839.roa
File:                     34352e3137332e32392e302f32342d3234203d3e20323638373839.roa (raw, json)
Hash identifier:          WnrmVXA/ggicgEanR3fU5v4gK/76TrL7OPrEpmxYAt4=
Subject key identifier:   9A:10:72:22:52:DD:27:79:E2:F2:64:4D:57:3F:C8:3C:F3:3B:70:69
Certificate issuer:       /CN=9836DDAF4A063B35C599D8E74240140479434CEE
Certificate serial:       5836CE2F5350C89991B7350D6CC671962C374DA3
Authority key identifier: 98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32392e302f32342d3234203d3e20323638373839.roa
Signing time:             Mon 11 Mar 2024 19:31:07 +0000
ROA not before:           Mon 11 Mar 2024 19:26:07 +0000
ROA not after:            Mon 10 Mar 2025 19:31:07 +0000
asID:                     268789
IP address blocks:        45.173.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:36:ce:2f:53:50:c8:99:91:b7:35:0d:6c:c6:71:96:2c:37:4d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9836DDAF4A063B35C599D8E74240140479434CEE
        Validity
            Not Before: Mar 11 19:26:07 2024 GMT
            Not After : Mar 10 19:31:07 2025 GMT
        Subject: CN=9A10722252DD2779E2F2644D573FC83CF33B7069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:f9:26:ee:37:4f:a4:dd:5c:c6:f2:a2:36:
                    5d:59:94:6a:d7:3e:c3:df:73:8c:51:4c:94:b6:b1:
                    63:de:42:e9:98:2f:eb:bc:d3:29:1d:1a:15:c4:e9:
                    a1:c8:8b:42:1a:80:89:83:d1:79:7e:2b:42:ec:0f:
                    c0:89:00:d3:5e:6b:21:4c:77:3e:c1:90:4c:02:77:
                    83:cc:fb:10:93:68:51:3b:43:40:2c:df:39:b9:0c:
                    13:80:d7:06:97:52:4d:dd:08:3f:7f:96:06:58:15:
                    26:0a:50:ad:33:37:5e:ed:84:01:9e:74:17:4d:7e:
                    d3:c1:12:8a:a1:cc:ad:c5:72:b9:80:57:d4:a9:01:
                    1f:68:99:b4:14:8a:de:a1:4d:f5:3f:d3:1f:1f:72:
                    13:bb:4e:41:a1:6a:7c:41:fa:a3:eb:cb:a2:a6:98:
                    14:0c:19:3d:66:c8:d4:d7:41:63:31:15:b1:49:37:
                    8c:54:1f:5a:ee:a6:5a:40:85:31:8a:e7:f5:3b:b7:
                    16:32:06:69:22:87:16:cc:53:99:e1:7c:e5:16:be:
                    b7:c0:c4:38:e2:8f:cc:21:6c:e4:0c:04:56:f3:7e:
                    55:7f:c5:91:70:8a:e0:b5:44:43:65:f9:c1:04:57:
                    64:3f:4e:c4:6d:83:f1:3e:9c:1e:85:97:f0:6e:ab:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:10:72:22:52:DD:27:79:E2:F2:64:4D:57:3F:C8:3C:F3:3B:70:69
            X509v3 Authority Key Identifier:
                keyid:98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/9836DDAF4A063B35C599D8E74240140479434CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32392e302f32342d3234203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:dc:2e:ce:4e:d9:f3:64:f7:be:1e:ef:46:bd:9a:d4:24:dc:
         26:bf:01:20:ea:98:90:c4:a2:91:3f:44:07:f2:40:68:6d:d7:
         59:78:00:9f:ee:8b:89:02:8c:3e:e7:1c:e1:d4:3a:29:f7:09:
         4b:92:af:56:12:f1:31:52:50:9f:ec:98:14:85:0c:38:e9:50:
         df:85:80:88:31:db:19:65:56:92:90:27:b4:72:28:1a:41:0c:
         23:a3:bc:92:d5:0d:f3:88:d0:25:b7:16:a2:02:16:08:99:f2:
         ea:ff:c3:18:da:ae:f3:57:aa:ac:bf:32:44:23:6f:2e:bc:fb:
         1a:20:88:75:e9:d9:39:fc:e1:60:7b:fc:df:e3:22:ca:b5:93:
         f2:e8:e6:99:4f:5d:3c:a4:2a:b3:70:5c:28:b1:cd:2b:16:1c:
         32:a5:03:23:1f:04:bb:e5:9a:63:32:ce:91:1a:f7:62:1b:37:
         e9:18:d8:08:b1:b2:fc:81:4c:ef:93:84:8e:fe:1d:ef:74:d7:
         65:c6:1b:b0:23:e4:17:d2:bc:27:cf:a7:a1:41:cc:96:de:a3:
         8d:2f:c1:9e:cf:8c:6d:9b:f9:18:36:db:2b:d3:0f:ca:78:28:
         ae:8f:91:4d:c2:81:97:7d:6e:c8:58:de:b9:b2:54:9b:c4:58:
         f4:4a:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org