Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39342e302f32342d3234203d3e20323636393932.roa
File:                     34352e3232362e39342e302f32342d3234203d3e20323636393932.roa (raw, json)
Hash identifier:          Fm3WQO6+PpfSvQoZWtiERWfvlyLhe4KgkKMYzFI2Q10=
Subject key identifier:   4A:1E:8F:0B:32:E5:E2:59:2F:8D:D9:44:A3:82:96:16:FE:54:D6:CC
Certificate issuer:       /CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
Certificate serial:       39D6F00E31852C7F934BD684B6F008768CA72505
Authority key identifier: 3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39342e302f32342d3234203d3e20323636393932.roa
Signing time:             Wed 17 Apr 2024 13:14:44 +0000
ROA not before:           Wed 17 Apr 2024 13:09:44 +0000
ROA not after:            Wed 16 Apr 2025 13:14:44 +0000
asID:                     266992
IP address blocks:        45.226.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d6:f0:0e:31:85:2c:7f:93:4b:d6:84:b6:f0:08:76:8c:a7:25:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
        Validity
            Not Before: Apr 17 13:09:44 2024 GMT
            Not After : Apr 16 13:14:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:e3:02:0a:1e:41:35:f5:cb:99:80:e7:83:
                    7b:a3:06:02:0a:3e:2e:4d:9e:d4:11:3f:53:26:ed:
                    f0:6a:fc:7e:3e:9a:fa:05:82:3c:a2:29:67:ce:7a:
                    1b:26:1f:39:13:b6:d4:1e:c2:eb:ab:86:0a:8e:4f:
                    a6:44:b3:a2:15:8a:8d:b8:1a:e7:2e:ad:50:83:df:
                    53:6a:51:30:20:da:ed:d3:db:86:cc:6c:38:92:7b:
                    85:89:91:6a:66:12:9c:cc:fb:7d:ea:0c:85:0b:54:
                    77:82:e5:7e:c9:2b:63:06:7f:3c:ae:d5:35:c5:7d:
                    94:78:c4:54:b4:d7:0b:09:36:46:85:a5:c9:f1:33:
                    f0:d8:cf:4b:70:e6:96:14:c7:69:e0:05:23:32:cf:
                    04:66:fe:04:53:3a:8b:98:9a:6a:af:0b:ae:46:7c:
                    74:99:30:86:db:ab:41:23:56:c6:d7:a0:03:0f:70:
                    fb:c5:fb:3a:ad:88:df:d1:3a:db:c9:3d:5e:3b:16:
                    b0:b4:32:c4:54:dd:55:d1:83:54:18:c5:8c:72:e4:
                    f0:1b:51:67:4f:b7:67:7a:5d:f7:c7:d5:6a:81:67:
                    72:81:19:16:ef:dc:29:99:db:d4:10:9b:c6:af:a9:
                    c7:e4:8a:1a:b8:9b:35:c7:6b:c7:fe:f3:21:ec:ee:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1E:8F:0B:32:E5:E2:59:2F:8D:D9:44:A3:82:96:16:FE:54:D6:CC
            X509v3 Authority Key Identifier:
                keyid:3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39342e302f32342d3234203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:8b:61:a4:87:be:c1:c5:9d:0c:05:bc:76:ee:1b:c3:84:03:
         c8:cf:dd:48:fc:12:18:da:b3:c2:de:82:34:66:31:64:fd:75:
         3d:5b:f0:bd:4a:5b:39:1f:96:e9:0d:f1:34:08:77:c3:28:a1:
         e9:46:0e:9c:b7:55:91:c6:c0:c2:f3:67:b2:d8:1a:d0:c2:81:
         83:67:7c:a6:6d:c4:8a:45:a9:03:25:e2:c3:ef:76:ce:58:98:
         04:9c:12:ca:39:0d:ce:2b:89:31:4f:64:de:1c:ab:26:43:df:
         c1:93:20:ba:6f:18:3f:d2:06:17:d2:9f:42:2a:44:62:c9:7b:
         b7:07:44:7e:a7:24:44:bb:8a:d9:3c:cc:54:89:d1:70:96:56:
         83:ce:6a:ed:e3:1a:fb:68:e6:69:0f:04:b1:98:f4:43:ae:40:
         2b:b0:81:f1:2b:0b:2c:40:d2:fc:6a:7f:dd:12:90:ef:53:18:
         c8:84:9f:18:22:ec:e1:47:a3:d1:2f:5d:ec:ad:0f:5e:3c:ba:
         51:64:d7:3b:67:ea:ce:4c:45:ba:19:9d:f3:b6:54:f3:ae:7c:
         53:05:86:cc:b2:f2:05:74:42:27:22:01:3f:56:e3:89:78:93:
         08:fc:c8:9f:12:be:a0:d6:0c:de:b8:4d:36:52:29:ae:0c:34:
         15:f2:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org