Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32362e302f32342d3234203d3e20323638313833.roa
File:                     34352e3137312e32362e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          amjZhRw4n+oGmfXckEgQaNkikIzvDqMpsYUZKZxUXTk=
Subject key identifier:   A2:04:10:78:62:43:32:BF:A4:10:92:90:C5:CE:09:65:9F:90:A0:64
Certificate issuer:       /CN=86806D9BD12A677347ED32D286F9803B86B05A33
Certificate serial:       75E18024B33A7CB09C9B9AB2B5A5D5CE5A502AFE
Authority key identifier: 86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32362e302f32342d3234203d3e20323638313833.roa
Signing time:             Mon 04 Mar 2024 22:25:36 +0000
ROA not before:           Mon 04 Mar 2024 22:20:36 +0000
ROA not after:            Mon 03 Mar 2025 22:25:36 +0000
asID:                     268183
IP address blocks:        45.171.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e1:80:24:b3:3a:7c:b0:9c:9b:9a:b2:b5:a5:d5:ce:5a:50:2a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86806D9BD12A677347ED32D286F9803B86B05A33
        Validity
            Not Before: Mar  4 22:20:36 2024 GMT
            Not After : Mar  3 22:25:36 2025 GMT
        Subject: CN=A2041078624332BFA4109290C5CE09659F90A064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:93:88:e7:f5:46:db:ff:23:15:65:fc:e5:
                    4d:12:12:ba:ff:75:f7:74:ff:f4:2e:77:11:1f:c7:
                    24:d5:3f:bf:2d:66:9b:63:f6:cf:34:1e:b9:94:14:
                    a6:f1:87:9d:d2:97:af:a2:b0:19:11:5f:30:20:07:
                    8b:2a:36:04:13:53:3a:18:50:66:4b:09:c7:f5:9e:
                    51:fa:52:e1:07:21:92:a6:81:40:95:ea:ac:87:53:
                    81:76:0d:1e:62:59:10:db:4b:02:24:2f:bb:1c:cf:
                    fc:37:53:6d:ce:4d:fa:59:bd:c5:2b:ee:d8:dc:cc:
                    7d:59:ab:71:7d:a1:f8:2c:34:be:fd:37:1f:ef:70:
                    3c:ae:ff:e2:9c:2f:16:cc:79:35:1d:c3:92:f8:01:
                    af:a6:96:19:0d:09:4c:a8:80:8b:20:a2:28:9a:50:
                    a2:f5:2d:a1:bf:5a:49:22:40:31:3a:d9:f0:60:b3:
                    c8:9b:c2:67:8f:dd:3c:4a:9b:93:60:4d:22:f3:8e:
                    38:8d:a0:4a:06:29:38:4a:60:4b:4e:10:b3:98:02:
                    72:6f:ab:b0:be:ae:e6:85:4b:33:0a:26:91:d6:eb:
                    ea:2c:fd:49:c3:97:8e:5a:06:e7:5c:58:f0:0e:b4:
                    02:ca:42:df:73:7a:6c:8b:52:9d:7c:50:17:72:b0:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:10:78:62:43:32:BF:A4:10:92:90:C5:CE:09:65:9F:90:A0:64
            X509v3 Authority Key Identifier:
                keyid:86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32362e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:1c:e4:59:04:fc:62:b3:23:bf:f1:a9:37:50:88:d1:2e:
         3f:7c:fa:4a:13:1d:92:df:dc:10:04:f5:fb:28:9d:d3:f7:71:
         10:f6:c5:cc:f6:e0:ac:59:9e:8a:40:58:c8:49:92:b5:f9:e1:
         34:3d:2d:47:40:e0:f5:95:35:d1:64:3a:c4:f4:9b:db:8a:e5:
         1d:84:66:03:61:dd:33:33:17:20:90:da:03:b9:f6:dd:68:12:
         aa:bd:0a:19:08:07:32:96:e4:35:be:fc:2d:0b:05:3d:e9:9b:
         70:eb:12:11:bb:03:b9:cc:c2:6b:da:2f:88:b0:4a:dc:0c:56:
         c8:65:60:46:26:67:3e:65:07:c8:79:49:37:4a:7b:f5:90:e9:
         ab:8e:b2:dd:4d:b9:77:c5:73:f1:7b:7d:88:55:9a:de:9a:22:
         b7:c9:c7:30:cf:db:78:d0:f3:51:44:3b:0f:28:f1:19:af:10:
         f4:5e:ba:da:bb:46:27:81:10:c3:54:96:29:85:04:4e:4b:a5:
         db:a1:94:28:56:73:f2:c3:12:b7:e0:f4:cf:e2:48:f1:06:1d:
         29:9f:2f:ee:26:ab:65:4f:a9:b0:39:b5:73:bd:da:e2:8f:19:
         2c:45:34:2c:5c:e3:fa:bb:b0:d9:47:72:08:58:41:8e:0d:4c:
         5b:c8:43:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org