Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32322d3234203d3e20323636363130.roa
File:                     34352e372e36382e302f32322d3234203d3e20323636363130.roa (raw, json)
Hash identifier:          90kSA2b4ANlCp/fcxUagEo9OEAHvLrqp1NnZw7Ajm7Y=
Subject key identifier:   CB:9A:03:D8:5E:42:AE:A6:F4:5D:7B:5C:2A:FA:40:F7:92:E3:29:64
Certificate issuer:       /CN=076E1DCF19E7E161675DB8D57DA07849D8049D3C
Certificate serial:       0F390B252C54D08962075934C369369A1E29AC46
Authority key identifier: 07:6E:1D:CF:19:E7:E1:61:67:5D:B8:D5:7D:A0:78:49:D8:04:9D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/076E1DCF19E7E161675DB8D57DA07849D8049D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32322d3234203d3e20323636363130.roa
Signing time:             Mon 11 Mar 2024 11:49:33 +0000
ROA not before:           Mon 11 Mar 2024 11:44:33 +0000
ROA not after:            Mon 10 Mar 2025 11:49:33 +0000
asID:                     266610
IP address blocks:        45.7.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:39:0b:25:2c:54:d0:89:62:07:59:34:c3:69:36:9a:1e:29:ac:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076E1DCF19E7E161675DB8D57DA07849D8049D3C
        Validity
            Not Before: Mar 11 11:44:33 2024 GMT
            Not After : Mar 10 11:49:33 2025 GMT
        Subject: CN=CB9A03D85E42AEA6F45D7B5C2AFA40F792E32964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:8b:a9:a5:12:c9:fc:7a:9a:35:26:fd:0e:
                    82:55:71:f0:55:4a:d0:20:5c:a7:0f:68:52:89:f3:
                    88:f0:ab:cd:84:e3:d8:44:e4:c7:bf:81:dc:d5:f2:
                    cf:18:c1:3b:42:1d:9c:7a:c6:95:bc:e2:bb:e4:15:
                    1d:c9:6d:11:51:9a:f0:73:f0:cc:9a:70:1c:01:eb:
                    49:05:86:3d:1e:f1:0d:42:18:d4:f7:85:d4:da:e7:
                    97:2c:72:77:fd:3c:24:1c:5a:80:c8:af:fe:d3:f5:
                    df:28:86:98:8a:0e:ec:14:f3:33:b3:6a:02:c6:76:
                    1f:27:5d:5b:dd:33:82:20:7f:25:15:33:4e:6e:15:
                    c2:ae:bf:35:85:9b:ec:ff:11:a4:ea:cb:d1:dc:c5:
                    64:3f:92:7f:9a:6f:9c:6e:6c:19:ad:18:25:57:11:
                    bd:68:e8:32:ca:df:a1:b6:4d:2a:cd:dc:af:1b:b7:
                    a1:0f:75:f3:b8:dc:58:b1:d2:dd:8d:70:21:0a:6b:
                    5c:db:9b:7c:69:f2:95:f0:d1:19:69:24:a4:eb:4d:
                    fe:07:8c:ad:e0:08:00:74:56:68:ed:3a:ff:34:7a:
                    aa:d3:2e:cd:18:e9:a1:d8:98:84:00:87:8d:fb:2a:
                    31:59:8d:b5:da:c6:59:94:93:b4:80:21:59:c9:a7:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9A:03:D8:5E:42:AE:A6:F4:5D:7B:5C:2A:FA:40:F7:92:E3:29:64
            X509v3 Authority Key Identifier:
                keyid:07:6E:1D:CF:19:E7:E1:61:67:5D:B8:D5:7D:A0:78:49:D8:04:9D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/076E1DCF19E7E161675DB8D57DA07849D8049D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/076E1DCF19E7E161675DB8D57DA07849D8049D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32322d3234203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:fe:6b:74:67:b9:7a:b3:0c:97:4a:b9:e9:2f:05:84:b0:e9:
         0a:d0:53:67:db:3c:8e:a3:f2:89:9c:22:42:f4:33:b6:6e:83:
         70:fb:b3:c4:06:17:84:ee:62:5a:5b:b8:4c:6a:f8:f7:6b:f2:
         a9:42:f9:01:bf:b2:dd:dd:df:bd:4c:fd:07:35:ef:1d:4f:9b:
         36:c5:e9:b6:cd:75:7c:59:21:5b:19:92:b8:5c:3f:83:46:72:
         19:24:fb:74:41:2c:21:5a:0f:a3:92:74:28:ba:dc:44:55:3d:
         66:b4:aa:32:e4:93:34:f7:99:30:df:90:04:eb:af:88:1e:9b:
         74:66:3b:c3:9a:57:cf:5c:67:ed:0d:a3:0d:9c:5c:bd:8f:6c:
         63:28:8d:7a:30:38:a8:e4:39:a9:aa:6e:57:3a:6f:85:a9:90:
         74:14:c3:80:9e:ac:bb:a9:6b:7a:1c:76:91:25:65:5f:12:dd:
         cf:d8:6b:f7:17:68:9a:fc:f8:f6:c4:3a:13:c0:51:ad:82:2f:
         3b:dc:29:02:b4:75:8d:44:75:7e:4d:57:9b:28:36:47:95:ad:
         b0:df:f2:cd:a2:d4:ef:87:a7:03:fc:c0:08:53:98:c4:d0:65:
         ec:a4:24:fc:fc:ec:06:e3:a2:67:b5:0c:4d:0d:ae:76:86:78:
         0c:36:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org