Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/34352e362e3137362e302f32322d3234203d3e20323636313730.roa
File:                     34352e362e3137362e302f32322d3234203d3e20323636313730.roa (raw, json)
Hash identifier:          shEbnAvhew46RolLcLbWHJufLBXEFbY3WnRJZHWJpKw=
Subject key identifier:   40:44:D1:24:88:B0:1C:78:A5:60:DD:CB:0A:78:11:90:4A:E2:D1:3C
Certificate issuer:       /CN=9D5AD2A27015B084D717893DE61B62934999BC26
Certificate serial:       576415754B8BCE0361A12C3BD3D36187D350184E
Authority key identifier: 9D:5A:D2:A2:70:15:B0:84:D7:17:89:3D:E6:1B:62:93:49:99:BC:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5AD2A27015B084D717893DE61B62934999BC26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/34352e362e3137362e302f32322d3234203d3e20323636313730.roa
Signing time:             Thu 04 Apr 2024 10:42:06 +0000
ROA not before:           Thu 04 Apr 2024 10:37:06 +0000
ROA not after:            Thu 03 Apr 2025 10:42:06 +0000
asID:                     266170
IP address blocks:        45.6.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:64:15:75:4b:8b:ce:03:61:a1:2c:3b:d3:d3:61:87:d3:50:18:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5AD2A27015B084D717893DE61B62934999BC26
        Validity
            Not Before: Apr  4 10:37:06 2024 GMT
            Not After : Apr  3 10:42:06 2025 GMT
        Subject: CN=4044D12488B01C78A560DDCB0A7811904AE2D13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:df:91:68:f4:b6:44:16:f9:73:ec:d9:1a:
                    6c:3b:0e:68:43:f4:bd:9d:bf:0c:b8:b3:94:bf:58:
                    6a:93:e6:20:4e:d6:29:5f:04:65:7a:b8:19:f2:10:
                    a5:67:e3:09:f5:76:ae:92:54:24:0e:8d:75:f6:9a:
                    ad:09:56:c4:a7:90:6c:c9:9e:32:80:c8:f0:e4:04:
                    b5:d4:55:c2:66:1b:53:88:62:9a:bf:51:a3:4c:08:
                    67:38:db:0d:76:cb:89:4a:33:11:68:22:54:7a:e4:
                    e8:20:86:fc:04:96:13:2d:b9:f4:38:54:59:e6:a6:
                    2f:0b:49:eb:0e:4d:0f:3b:f7:5d:f5:c6:96:b8:10:
                    03:09:33:12:d0:ce:c0:10:d2:13:02:6d:2c:c9:0b:
                    24:ac:a8:ed:49:4f:3e:a4:71:d4:8e:df:2f:b1:23:
                    f6:cf:59:1a:70:10:26:c4:cc:3d:6f:70:c4:36:19:
                    03:a0:ee:b2:62:7f:62:3e:24:28:36:58:a2:4e:22:
                    b0:16:e9:3b:83:9e:c7:16:7d:b2:22:d2:c4:23:83:
                    08:48:63:c9:1a:cc:bb:df:6d:8e:4d:65:fe:1e:db:
                    13:7b:ab:0a:70:74:d7:f0:4e:0c:91:2c:e9:ba:44:
                    84:48:c3:1e:06:38:ef:11:d6:5f:08:ff:20:78:a0:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:D1:24:88:B0:1C:78:A5:60:DD:CB:0A:78:11:90:4A:E2:D1:3C
            X509v3 Authority Key Identifier:
                keyid:9D:5A:D2:A2:70:15:B0:84:D7:17:89:3D:E6:1B:62:93:49:99:BC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/9D5AD2A27015B084D717893DE61B62934999BC26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5AD2A27015B084D717893DE61B62934999BC26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/34352e362e3137362e302f32322d3234203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:6b:73:4e:d9:05:5e:09:86:96:f2:62:53:2a:ad:55:4c:
         8e:7d:c6:4d:51:1f:06:eb:31:dc:51:69:5f:f4:7d:bb:75:17:
         29:55:74:09:ba:a5:76:7c:6b:67:a2:db:87:1b:6c:14:97:b9:
         cd:2c:e7:33:91:e5:34:01:03:09:0d:e7:10:a0:c9:a0:18:e4:
         81:f7:dc:32:45:41:24:b7:42:38:b3:5c:9c:24:c8:1f:bc:68:
         73:13:19:75:49:23:9f:b9:b3:6a:60:bf:ce:61:89:19:af:f2:
         45:64:31:b4:ac:bb:37:1a:f8:30:50:ca:43:2f:48:41:0d:94:
         68:87:63:98:58:16:20:53:7d:e1:04:4e:c4:52:a5:1d:86:6c:
         13:45:60:39:6e:42:5e:46:2b:67:e2:a2:cd:50:e9:f1:76:85:
         2e:1f:8e:8e:b4:f3:58:07:dc:10:61:16:4a:f6:80:a1:d3:0c:
         4b:08:d2:fb:07:5e:d6:9e:d7:d7:e6:f0:4a:49:23:87:4f:e9:
         05:12:fb:ca:89:ff:1c:f4:e4:51:c8:3e:7f:70:ae:4e:38:f5:
         5a:79:43:85:91:6f:b3:b3:a9:ec:18:33:01:b2:04:e1:eb:ae:
         4c:38:5c:31:5e:0e:06:95:12:c5:d5:fd:db:44:22:21:8e:31:
         8e:31:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org