Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39352e302f32342d3234203d3e20323636393932.roa
File:                     34352e3232362e39352e302f32342d3234203d3e20323636393932.roa (raw, json)
Hash identifier:          QusyFT62LpvZLYHLszhatFIRe8fI+BUj8hhfxXwNmGA=
Subject key identifier:   3E:CD:2E:80:96:6F:F7:1B:5D:DD:30:01:C1:38:6E:92:82:AF:62:74
Certificate issuer:       /CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
Certificate serial:       03A9148C57FC6400FA076AA13A1C1B4EBD457C74
Authority key identifier: 3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39352e302f32342d3234203d3e20323636393932.roa
Signing time:             Wed 17 Apr 2024 13:14:44 +0000
ROA not before:           Wed 17 Apr 2024 13:09:44 +0000
ROA not after:            Wed 16 Apr 2025 13:14:44 +0000
asID:                     266992
IP address blocks:        45.226.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a9:14:8c:57:fc:64:00:fa:07:6a:a1:3a:1c:1b:4e:bd:45:7c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
        Validity
            Not Before: Apr 17 13:09:44 2024 GMT
            Not After : Apr 16 13:14:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:84:07:d1:0d:a3:36:dc:ce:fc:b6:e6:86:
                    5e:02:5f:91:8c:0c:62:e1:72:63:8a:0b:3b:5f:ff:
                    43:c5:c0:f7:bc:5a:33:a3:2f:ce:3b:e2:e9:5c:12:
                    9b:a7:99:e3:5d:d5:dc:86:d3:5e:3c:be:ed:d3:06:
                    e4:af:4c:3a:84:0b:2a:43:ad:38:6a:18:3d:84:ce:
                    af:7f:7c:0f:87:eb:a8:22:95:c5:f7:e8:85:a4:14:
                    5d:51:9e:91:88:98:74:79:a4:7c:7a:b4:39:db:6e:
                    3e:01:f6:48:98:b7:f4:bc:54:2b:c6:24:99:c9:11:
                    49:0e:f8:bd:6a:60:61:31:fb:18:38:2f:82:f0:91:
                    8c:43:dc:59:6e:40:ed:33:94:d6:f1:c5:dc:bc:e4:
                    a5:cb:27:eb:a6:3d:51:1a:46:de:60:85:12:d7:62:
                    ca:b4:a3:b6:a7:58:e9:48:b3:97:f3:1e:ae:73:b8:
                    ab:6c:55:9b:72:9e:51:03:32:4c:37:ef:fe:0d:c4:
                    f0:c8:8a:5a:b3:ad:ce:24:8d:a9:fa:7b:6b:42:1e:
                    ae:80:f6:bf:a6:b8:09:d5:e8:4d:30:df:c6:a3:c0:
                    5d:eb:a4:1f:68:52:bd:c7:df:3a:7e:30:39:03:ec:
                    dd:0d:fe:8f:f0:97:4e:d4:09:f0:0e:4c:41:ab:6f:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CD:2E:80:96:6F:F7:1B:5D:DD:30:01:C1:38:6E:92:82:AF:62:74
            X509v3 Authority Key Identifier:
                keyid:3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39352e302f32342d3234203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:22:c2:ca:b2:51:49:92:1f:e2:47:47:b5:dc:2c:08:76:1d:
         b7:50:e5:d4:29:56:f9:4b:58:05:40:ed:38:95:97:31:94:b4:
         b7:e7:12:87:3b:fb:fc:0d:29:69:67:ca:91:b6:25:0e:b2:99:
         0b:e6:1b:5f:b3:af:11:02:a0:f3:7a:cb:57:01:16:9a:30:1b:
         e2:12:d8:d0:bb:c2:33:1f:e5:ac:b1:b5:62:5c:d9:b0:a3:3a:
         26:05:e9:a9:f2:b6:c3:f9:72:97:80:0b:7e:2f:17:d2:b0:57:
         9f:fd:92:59:b3:f2:1f:16:1e:72:72:60:e6:e3:4b:b9:72:b8:
         78:33:77:e6:29:70:80:ca:14:9f:7d:c8:98:74:2c:17:06:04:
         d2:89:0c:10:b8:5f:62:79:e8:93:5b:93:f2:36:68:fe:94:02:
         6a:0b:89:9e:67:1a:f1:b1:6c:62:f6:5d:51:50:61:a2:d4:e0:
         66:2c:75:bb:c2:de:c1:3b:e6:2f:e9:df:9c:88:54:07:4b:6b:
         4f:4e:8d:2d:7c:e6:f4:ca:13:3a:f7:89:34:8d:1b:ea:da:34:
         a3:c0:ac:45:eb:69:26:64:f6:f0:f8:78:6c:79:53:c6:99:79:
         d8:7f:ef:82:81:c5:0d:8e:b2:9b:37:85:e3:a7:c1:e7:19:57:
         be:6b:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org