Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/34352e362e3234342e302f32322d3234203d3e20323731303738.roa
File:                     34352e362e3234342e302f32322d3234203d3e20323731303738.roa (raw, json)
Hash identifier:          Q4pIZ7K8fE+pJiRL0D8r2TU31Y3AYZeoAbcipc1YzXM=
Subject key identifier:   26:C4:3E:18:A3:EE:2D:71:AF:CB:CB:D7:9C:13:74:20:63:D6:30:71
Certificate issuer:       /CN=7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA
Certificate serial:       0A5AEB35AB76AE582FC6914752D53DC21A9DDA51
Authority key identifier: 79:79:B5:C5:D5:EF:09:88:CC:5D:8F:F5:F8:0C:FB:EA:AD:BF:96:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/34352e362e3234342e302f32322d3234203d3e20323731303738.roa
Signing time:             Thu 01 Feb 2024 04:32:37 +0000
ROA not before:           Thu 01 Feb 2024 04:27:37 +0000
ROA not after:            Thu 30 Jan 2025 04:32:37 +0000
asID:                     271078
IP address blocks:        45.6.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5a:eb:35:ab:76:ae:58:2f:c6:91:47:52:d5:3d:c2:1a:9d:da:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA
        Validity
            Not Before: Feb  1 04:27:37 2024 GMT
            Not After : Jan 30 04:32:37 2025 GMT
        Subject: CN=26C43E18A3EE2D71AFCBCBD79C13742063D63071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2f:e7:2a:ce:56:8d:3e:01:59:b9:7c:dd:5b:
                    48:7a:d0:15:d7:9a:e0:91:3b:7d:01:9f:5e:b2:dc:
                    23:78:f3:c9:e9:e3:9b:66:77:60:56:9a:98:d3:94:
                    5e:bb:8c:3f:9e:41:de:95:96:5e:43:0f:0f:5d:9e:
                    1e:1d:33:08:85:66:34:27:e6:85:55:8b:73:2b:9b:
                    95:45:62:65:8a:61:3f:18:35:9c:51:32:ca:79:73:
                    3d:0f:25:5f:67:04:26:57:42:f7:d8:b1:6a:67:d9:
                    15:98:7a:02:81:de:c3:35:de:bb:1f:40:43:f4:1c:
                    19:55:c6:fd:21:39:2c:60:ce:ed:6d:3b:1e:a8:7e:
                    12:27:09:0c:5b:9b:29:a0:c7:5f:b8:cc:ad:ef:42:
                    fc:ed:5e:c2:f9:f1:a6:10:28:26:84:12:32:be:8b:
                    6c:7d:51:1d:35:e3:7b:e9:7d:69:89:e3:c5:20:6b:
                    83:1e:12:ad:6c:4e:5e:1b:0b:a0:9e:ed:30:35:51:
                    d0:9b:cb:10:a2:02:69:2a:db:ab:f8:06:30:88:f4:
                    99:45:39:8b:d7:2c:16:95:73:24:47:d4:03:c2:0b:
                    bd:8e:eb:d4:17:cb:46:8a:4a:b4:68:d7:e2:05:9e:
                    0b:98:00:8c:db:d7:df:4e:93:c2:0d:1e:70:68:93:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C4:3E:18:A3:EE:2D:71:AF:CB:CB:D7:9C:13:74:20:63:D6:30:71
            X509v3 Authority Key Identifier:
                keyid:79:79:B5:C5:D5:EF:09:88:CC:5D:8F:F5:F8:0C:FB:EA:AD:BF:96:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/34352e362e3234342e302f32322d3234203d3e20323731303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:96:20:c6:c4:9d:20:58:d1:df:22:8d:0a:dc:b2:d8:94:e6:
         26:b6:8a:a8:f1:c9:18:2f:cc:7f:38:b9:a9:52:ba:d5:ba:f8:
         0d:4a:2b:e2:5a:ed:56:96:10:82:05:75:1a:4e:14:85:31:fa:
         d7:49:a6:44:09:0d:db:d0:0f:00:dd:f0:a6:43:c6:39:ae:73:
         ba:1f:15:8b:85:3d:df:19:03:77:9c:d3:11:01:f9:f1:21:46:
         63:b8:b5:38:e4:57:89:94:0c:ee:62:1c:e8:6c:87:b7:b3:6c:
         eb:57:52:1b:5e:87:04:66:da:42:15:8d:37:6f:a1:b3:75:75:
         46:d9:6b:46:2f:d0:ba:ec:3d:77:2f:2c:13:42:bb:a7:82:b3:
         87:ee:94:56:de:49:95:60:c9:ba:1c:99:0d:ca:97:c4:ba:be:
         d8:90:7f:7a:11:8a:0b:bd:d7:74:69:e5:db:9a:f2:43:36:14:
         e6:cd:e9:63:a4:c6:6b:c5:ae:3a:f8:34:1c:c7:42:51:47:cc:
         6e:45:c6:90:4d:eb:19:32:67:e0:8c:75:96:10:c4:e3:66:67:
         b3:6d:62:9a:9c:8c:88:78:4d:4b:60:76:f6:47:77:f8:23:db:
         b9:15:01:4d:ee:00:5f:56:5b:29:91:1d:1a:c6:ae:b8:3c:b3:
         58:bd:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org