Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39322e302f32342d3234203d3e20323636393932.roa
File:                     34352e3232362e39322e302f32342d3234203d3e20323636393932.roa (raw, json)
Hash identifier:          +fyBG5o7nyGf/tqzhDiq7X7byzrVyuXJ21KNbzslmEk=
Subject key identifier:   2C:3C:2A:BA:95:2C:38:7F:91:48:17:1F:82:22:24:1C:AD:7C:EE:5D
Certificate issuer:       /CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
Certificate serial:       2B6ED80B257D3B43002A0D14026DC6C9CCCB8E10
Authority key identifier: 3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39322e302f32342d3234203d3e20323636393932.roa
Signing time:             Wed 17 Apr 2024 13:14:44 +0000
ROA not before:           Wed 17 Apr 2024 13:09:44 +0000
ROA not after:            Wed 16 Apr 2025 13:14:44 +0000
asID:                     266992
IP address blocks:        45.226.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6e:d8:0b:25:7d:3b:43:00:2a:0d:14:02:6d:c6:c9:cc:cb:8e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
        Validity
            Not Before: Apr 17 13:09:44 2024 GMT
            Not After : Apr 16 13:14:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:78:1b:34:d9:fd:ca:3f:0d:0b:e1:9b:ad:
                    f9:78:0b:31:bf:3d:d5:69:4e:46:68:7a:25:a0:e0:
                    54:99:a3:4f:0b:9b:7a:29:80:6f:53:7d:45:41:91:
                    25:43:9e:0c:02:aa:c6:a8:02:99:d6:2d:4f:a8:d0:
                    b7:cc:09:a0:f2:d9:07:09:27:b4:81:f0:ec:fe:d3:
                    18:89:30:cb:3d:1e:86:2c:05:4e:6d:f6:0e:97:4f:
                    0c:12:4e:25:83:7a:53:ef:c5:bd:c7:f2:8f:71:95:
                    08:29:c2:e9:0d:b0:86:d2:68:8d:ba:3f:0a:6c:bf:
                    07:d6:24:35:49:fe:9b:9d:31:44:cd:2b:eb:55:9e:
                    c4:d4:da:7c:ea:4b:92:89:b6:b8:3a:e5:0a:cf:d1:
                    0c:8b:e6:de:33:9b:70:29:be:63:06:f5:45:ab:0d:
                    00:76:3e:ba:67:f4:1c:47:a7:46:70:e3:9b:85:9a:
                    f2:4f:7f:6a:63:0e:96:9f:25:05:01:a0:68:87:3a:
                    69:20:78:6a:4d:8b:c4:01:e0:dd:56:ef:cb:20:09:
                    4c:1e:82:9d:78:e6:e3:99:05:09:82:e4:82:4e:c4:
                    5e:55:13:97:ab:71:3d:54:58:56:29:86:5e:d6:ba:
                    e9:17:62:9f:7f:73:6e:e6:28:61:eb:e3:57:68:2f:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3C:2A:BA:95:2C:38:7F:91:48:17:1F:82:22:24:1C:AD:7C:EE:5D
            X509v3 Authority Key Identifier:
                keyid:3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39322e302f32342d3234203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:69:ed:e6:db:f8:4b:31:0f:59:3b:3f:05:19:8a:e1:99:60:
         a5:c6:5d:a7:79:0c:2d:ab:72:a6:e2:47:28:d7:17:b1:ac:b6:
         5d:ec:ae:1e:9d:7c:10:e7:e3:70:de:66:06:d7:7f:32:91:71:
         35:18:c5:0c:c8:8d:77:b1:1b:ec:ce:62:95:a5:94:b1:0b:05:
         5e:25:82:6a:b9:42:48:02:ca:36:c7:dc:d0:f7:7d:a8:1d:16:
         d9:4e:86:83:02:3c:85:d8:3b:61:fb:3f:73:25:be:26:1e:7e:
         cf:ab:19:25:b2:28:7e:95:65:4c:6e:22:29:0d:c7:83:ff:02:
         ed:31:8d:c6:8e:fb:cc:a0:93:1a:90:f4:e4:b8:19:08:d9:cb:
         64:f7:58:24:2a:bf:f7:68:04:8f:e1:99:59:d2:f0:21:c7:c1:
         2c:ff:be:e6:42:37:66:f1:16:6f:dc:fa:15:3b:2e:04:13:fc:
         88:bc:52:8f:fd:90:11:da:b8:12:6f:5b:65:0a:d5:42:8e:84:
         49:d6:86:26:fe:c3:26:0a:62:b1:9e:98:5b:b5:51:fa:87:f6:
         80:65:31:c7:24:6d:93:3c:c0:33:b4:09:1a:22:e1:b6:7a:39:
         12:b1:16:1f:09:69:eb:c5:35:78:69:ef:6f:e5:4a:eb:88:31:
         5e:86:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org