Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39332e302f32342d3234203d3e20323636393932.roa
File:                     34352e3232362e39332e302f32342d3234203d3e20323636393932.roa (raw, json)
Hash identifier:          hJigmtOfY/+godNkqxMGdbgxAcznE+4lDC8NZqqtJuw=
Subject key identifier:   C7:0C:23:DD:27:83:8F:D6:33:77:D7:B6:59:F3:01:39:2B:1D:07:34
Certificate issuer:       /CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
Certificate serial:       08E08336B2794EF8B65EBFB482D31AA2955E0C10
Authority key identifier: 3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39332e302f32342d3234203d3e20323636393932.roa
Signing time:             Wed 17 Apr 2024 13:14:44 +0000
ROA not before:           Wed 17 Apr 2024 13:09:44 +0000
ROA not after:            Wed 16 Apr 2025 13:14:44 +0000
asID:                     266992
IP address blocks:        45.226.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e0:83:36:b2:79:4e:f8:b6:5e:bf:b4:82:d3:1a:a2:95:5e:0c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
        Validity
            Not Before: Apr 17 13:09:44 2024 GMT
            Not After : Apr 16 13:14:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:7e:00:10:52:cf:b4:b3:f5:28:da:2d:cf:
                    ab:f1:9c:7a:4e:af:a8:84:74:ea:cf:2e:20:3e:4a:
                    f2:82:76:c0:24:b1:ae:1f:09:72:34:4e:4e:ab:c9:
                    14:dd:e6:a7:2d:e8:17:b8:ff:0d:66:0b:f3:e1:44:
                    b3:9d:30:d8:09:62:4c:bf:78:cd:e0:f6:f7:5d:2d:
                    fe:b7:7f:e0:f5:52:89:90:92:12:13:d4:11:b5:bc:
                    6a:85:63:f7:c3:64:d6:4f:c3:ce:c9:cf:85:b8:9b:
                    f7:27:80:ba:da:ed:24:db:9f:19:62:fd:fe:86:9a:
                    c3:dd:0b:05:3d:88:91:0a:31:45:9f:71:42:f6:f7:
                    57:20:7a:dc:18:a7:c5:44:f1:f4:71:dc:79:89:55:
                    65:d6:2b:c9:95:cb:45:92:fb:0e:cb:19:7e:04:88:
                    0d:6f:14:e4:40:83:e2:51:ec:ef:52:54:b0:6c:69:
                    f5:b5:af:c4:68:98:a2:89:8c:d1:ca:3a:61:21:f1:
                    47:a7:3d:de:93:38:9b:4f:eb:08:68:d4:b0:13:31:
                    25:48:5e:62:00:2b:19:3b:3e:08:00:64:b9:2f:06:
                    c0:f2:8c:4e:59:d1:fd:d6:ef:51:77:3c:ae:33:cc:
                    6e:b5:27:f9:70:b7:5b:9e:c9:59:21:1f:d5:e5:47:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0C:23:DD:27:83:8F:D6:33:77:D7:B6:59:F3:01:39:2B:1D:07:34
            X509v3 Authority Key Identifier:
                keyid:3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39332e302f32342d3234203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:75:5d:56:cf:6f:21:b4:61:9a:f0:fa:93:b1:c5:9b:0a:
         2a:6c:bc:a2:fa:e6:6e:ee:22:4f:f6:61:55:84:2e:1f:ee:35:
         53:60:1e:90:7c:25:e1:2c:0f:c5:ec:0a:7f:99:69:c5:99:a7:
         09:c3:0e:cf:49:87:d7:b1:b9:66:6e:34:ad:4e:7c:b7:ce:3c:
         9d:6f:7b:08:13:d8:72:22:88:d0:1a:b3:00:35:14:6d:ed:a6:
         7e:02:7b:42:1c:2e:75:81:59:f7:b0:88:61:59:9e:e9:87:61:
         11:17:ba:30:d5:90:a6:1e:38:e9:e0:3a:1a:77:f9:cf:5f:5c:
         46:77:fe:75:a8:ce:43:88:86:5d:c9:bb:f2:d3:b3:9a:76:3b:
         d9:1f:99:17:2c:87:20:94:b1:07:b1:7b:3f:57:a0:6c:86:d5:
         09:97:ac:ea:39:8e:12:12:ee:20:36:98:ea:c8:5b:8d:2f:8b:
         35:1b:3a:0c:83:34:3d:3a:43:c7:c6:c6:ed:40:89:90:38:ca:
         cb:95:3b:0b:e1:83:f3:92:e4:a8:e2:66:29:d9:50:df:c6:2b:
         a4:c5:e8:96:45:d9:1f:26:15:c1:1f:3c:52:56:bd:61:ec:7b:
         48:04:4e:7c:96:7a:c2:ac:4f:73:de:eb:fa:83:6b:2b:3d:7a:
         04:c4:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org