Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39342e302f32332d3233203d3e20323636393932.roa
File:                     34352e3232362e39342e302f32332d3233203d3e20323636393932.roa (raw, json)
Hash identifier:          mOBKgmUFA+p95/4dU4QxGUpFsZjMqcWoRThxw5mv2S0=
Subject key identifier:   C4:0E:E7:73:DF:E4:0F:C8:BF:53:EB:1B:74:97:09:F4:56:E0:35:EC
Certificate issuer:       /CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
Certificate serial:       66C88FC526EE857766393D9487A094456BC08F96
Authority key identifier: 3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39342e302f32332d3233203d3e20323636393932.roa
Signing time:             Wed 17 Apr 2024 13:14:45 +0000
ROA not before:           Wed 17 Apr 2024 13:09:45 +0000
ROA not after:            Wed 16 Apr 2025 13:14:45 +0000
asID:                     266992
IP address blocks:        45.226.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c8:8f:c5:26:ee:85:77:66:39:3d:94:87:a0:94:45:6b:c0:8f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
        Validity
            Not Before: Apr 17 13:09:45 2024 GMT
            Not After : Apr 16 13:14:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:06:14:b7:77:06:ce:69:73:6e:0b:fd:96:
                    b4:b8:66:fc:9d:a7:67:f4:04:13:f9:1c:f5:63:f2:
                    cf:20:44:03:fa:32:b3:97:c8:84:dd:d4:c1:f6:f9:
                    59:75:4e:a4:53:80:92:3c:eb:bf:62:6c:bf:a1:a9:
                    41:19:16:d4:d1:37:00:be:e0:59:76:e9:fa:b4:05:
                    3c:16:93:4b:0a:31:dd:74:ce:71:53:0c:18:aa:62:
                    a8:2b:bb:b8:dd:e5:73:06:0d:d9:b6:e1:ac:ae:e4:
                    67:a4:21:b6:49:e6:d9:18:1c:60:1e:94:e7:0a:68:
                    a0:e3:08:a4:1d:86:2e:90:5f:14:42:71:42:3d:37:
                    e8:03:f9:fc:1a:75:fe:11:bb:ff:43:b4:26:22:2b:
                    b8:aa:41:46:fd:d6:ec:8e:00:30:ef:a8:84:4b:ca:
                    dc:1a:83:7a:bf:bf:db:80:2e:06:e3:e3:b8:e4:72:
                    ce:5e:f3:e8:c0:ed:8f:ca:de:f7:1e:9b:65:d6:ca:
                    c2:fa:ef:c8:fd:fc:e6:4e:5b:5d:89:2b:e4:8d:2f:
                    40:81:20:63:36:b0:c5:a8:e6:fb:8b:cd:d8:be:30:
                    72:65:c9:ba:4d:59:07:fb:9b:99:c9:2d:93:89:b4:
                    6d:05:b7:2a:0d:4e:f0:8e:20:66:31:26:df:27:e9:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:E7:73:DF:E4:0F:C8:BF:53:EB:1B:74:97:09:F4:56:E0:35:EC
            X509v3 Authority Key Identifier:
                keyid:3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39342e302f32332d3233203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:ec:8d:31:77:ad:12:37:65:dc:e2:7d:d3:d1:7c:60:6e:f2:
         87:00:b8:6a:3d:67:a4:c8:e0:01:33:e1:46:82:7c:d7:a2:27:
         3b:67:e6:fb:8e:46:3d:84:8f:8c:ca:15:3c:7e:8f:ac:77:19:
         0f:db:ed:7e:3f:16:5f:80:5c:8d:0b:1b:43:a9:71:3a:ad:6d:
         c8:63:e7:3b:11:0d:f3:e3:4c:43:11:b6:be:64:ac:6c:75:43:
         8a:a7:23:b8:65:db:e9:63:cf:cf:7e:cb:ae:24:cc:37:f4:0d:
         4c:13:b2:67:d6:0e:20:20:f7:2e:10:ca:04:22:7d:78:7f:17:
         56:07:99:a2:4e:57:aa:a9:3b:41:73:72:22:15:be:90:e6:eb:
         84:7b:af:fa:18:9d:23:3d:44:c1:6f:ff:0f:28:19:44:94:9f:
         a4:c2:21:98:5a:13:5e:e8:e7:ce:8f:13:e5:02:58:92:2e:eb:
         94:71:a6:89:be:f1:b4:62:ad:bd:b3:a1:d1:0f:0f:88:82:f7:
         24:0d:5f:8b:90:3c:e7:1a:b3:13:bf:de:d3:07:29:fd:af:20:
         4f:ca:6f:11:28:1b:3a:cd:02:5a:dd:7e:2a:b8:b9:4e:89:37:
         1a:72:9f:0c:08:81:c6:f8:89:28:ba:cc:8b:ea:0d:bf:af:7b:
         cc:4f:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org