Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
File:                     34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa (raw, json)
Hash identifier:          ZkHfEVfI/M3rxB0y3OZvXR2ZfGBS4ztf5vcSzxIoRns=
Subject key identifier:   77:CD:93:2B:D9:FD:5F:55:A4:CF:7B:32:BC:88:9A:D8:62:43:87:75
Certificate issuer:       /CN=78DB938675CA6E5AA26F004E6B233DBFD4812140
Certificate serial:       462519D8D8E0EB42E747C286A686E494F2D7755E
Authority key identifier: 78:DB:93:86:75:CA:6E:5A:A2:6F:00:4E:6B:23:3D:BF:D4:81:21:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78DB938675CA6E5AA26F004E6B233DBFD4812140.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
Signing time:             Tue 13 Feb 2024 19:39:19 +0000
ROA not before:           Tue 13 Feb 2024 19:34:19 +0000
ROA not after:            Tue 11 Feb 2025 19:39:19 +0000
asID:                     267022
IP address blocks:        45.226.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:25:19:d8:d8:e0:eb:42:e7:47:c2:86:a6:86:e4:94:f2:d7:75:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DB938675CA6E5AA26F004E6B233DBFD4812140
        Validity
            Not Before: Feb 13 19:34:19 2024 GMT
            Not After : Feb 11 19:39:19 2025 GMT
        Subject: CN=77CD932BD9FD5F55A4CF7B32BC889AD862438775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:9d:e6:a8:52:99:7b:fe:ff:33:61:f9:6e:
                    6e:bd:20:3a:26:f9:d3:75:f0:20:2d:15:d7:17:06:
                    16:76:10:dd:e5:1e:3a:b1:d5:9c:34:21:81:69:68:
                    ef:c1:a1:be:8a:cd:44:45:fe:a5:6e:c6:26:bf:99:
                    5b:5c:14:5a:68:59:2a:50:14:e9:19:bf:5d:dd:fb:
                    d0:ba:ca:7c:f4:cf:70:fd:b7:61:59:0a:e3:56:a3:
                    38:ee:04:dc:67:72:19:02:f3:90:70:7f:2b:7f:d9:
                    db:1c:4c:27:61:01:17:21:1c:3d:76:ad:c8:1a:13:
                    8e:21:15:18:ec:1f:e4:3c:2b:d2:fe:4a:eb:5f:73:
                    05:99:69:64:ab:77:31:d6:cd:e6:12:5d:ad:46:85:
                    0c:74:4c:78:a3:d4:82:5e:ae:26:85:db:f2:93:73:
                    13:35:d3:fe:ae:08:d3:80:60:9d:2d:13:a3:91:02:
                    dd:5e:c3:4c:2a:72:7a:19:c7:9c:8a:d7:88:65:e4:
                    d8:a0:06:53:89:d9:ff:05:62:ab:a2:5e:db:eb:88:
                    68:86:ff:d6:97:9f:4a:2e:c4:a8:48:ee:ac:47:f1:
                    25:74:08:8f:41:6a:85:ad:da:18:af:d5:65:44:bf:
                    c2:1f:2c:a6:d6:22:2a:bd:c3:c0:5c:98:a1:34:49:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:93:2B:D9:FD:5F:55:A4:CF:7B:32:BC:88:9A:D8:62:43:87:75
            X509v3 Authority Key Identifier:
                keyid:78:DB:93:86:75:CA:6E:5A:A2:6F:00:4E:6B:23:3D:BF:D4:81:21:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/78DB938675CA6E5AA26F004E6B233DBFD4812140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78DB938675CA6E5AA26F004E6B233DBFD4812140.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:ec:d2:85:c9:6e:c9:75:0a:78:93:40:58:03:e8:52:3b:ed:
         70:2d:0d:78:5c:a1:8c:d3:31:4a:3c:08:75:23:51:4c:cf:20:
         f0:4a:6e:a6:0e:24:3d:94:88:c8:f4:46:63:f1:f6:ec:49:40:
         31:92:47:45:57:9d:38:74:9e:2b:b3:88:36:a0:d0:20:f4:91:
         5d:3f:d8:79:f6:97:1a:96:ab:e8:ff:9e:b9:04:b6:11:77:a1:
         37:49:27:27:52:1e:08:f8:0b:53:94:49:b4:d3:cd:b9:71:a5:
         4c:69:54:4f:de:c3:28:34:90:4a:76:d4:fe:59:45:02:2d:02:
         2d:66:3d:f0:6b:38:f1:5f:2b:39:1b:41:32:d4:08:ed:a5:61:
         c8:ff:6a:b8:f0:64:88:26:6d:b5:95:91:68:47:58:9b:30:5f:
         16:c6:d7:c0:16:3c:b8:99:5a:17:5a:c5:d7:c8:fe:d2:b1:77:
         86:00:60:23:0a:5b:f1:35:1c:ee:de:f9:82:fe:c2:10:4c:c5:
         65:70:fa:b2:c5:36:56:1f:ef:20:08:8d:42:04:d3:f5:a7:eb:
         ee:0c:4b:1d:4e:0c:d0:43:5a:e4:70:44:9c:a3:45:b0:b7:c8:
         4a:44:35:e1:4b:e9:f6:91:14:62:57:98:9b:de:91:da:e8:15:
         0e:84:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org