Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37382e302f32342d3234203d3e20323638383930.roa
File:                     34352e3137352e37382e302f32342d3234203d3e20323638383930.roa (raw, json)
Hash identifier:          zJcGRcekx3HrbwXc6OIJotOiWLxt9y53Q2apXf/QfyQ=
Subject key identifier:   C2:CC:EC:43:FE:8E:9E:34:55:4B:37:32:D3:BD:27:E9:0A:FF:DF:08
Certificate issuer:       /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial:       4EBB1D346D54FF7646DFAFF8A0587F7F3A4CF56C
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37382e302f32342d3234203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:50:11 +0000
ROA not before:           Tue 09 Apr 2024 19:45:11 +0000
ROA not after:            Tue 08 Apr 2025 19:50:11 +0000
asID:                     268890
IP address blocks:        45.175.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bb:1d:34:6d:54:ff:76:46:df:af:f8:a0:58:7f:7f:3a:4c:f5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
        Validity
            Not Before: Apr  9 19:45:11 2024 GMT
            Not After : Apr  8 19:50:11 2025 GMT
        Subject: CN=C2CCEC43FE8E9E34554B3732D3BD27E90AFFDF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:65:f0:d0:e6:26:f7:25:2e:e6:06:43:b0:6f:
                    f8:8b:c2:06:fc:c5:f8:a7:7b:45:93:77:fa:6b:7c:
                    8c:a9:bb:f2:26:73:c3:9f:83:f8:49:78:13:30:7c:
                    0d:33:56:ea:b4:e3:d6:2a:b1:54:ff:02:20:97:e9:
                    28:f3:c7:17:ea:9d:a0:3e:4f:1a:fe:27:a9:0a:d3:
                    a7:c0:66:ca:ab:e1:d0:43:f1:59:46:68:32:8e:1e:
                    6a:93:c8:bf:a2:32:6d:b6:c3:31:09:e3:2b:ad:9d:
                    d0:c1:eb:7f:80:d2:ef:85:a1:80:2f:75:6f:a9:d8:
                    ab:b9:5b:ec:d3:5a:a8:e5:4d:25:67:86:bf:f5:9f:
                    36:1d:4c:c7:21:58:a7:cf:40:55:08:72:63:31:ea:
                    da:4d:2d:69:bd:96:21:e7:a0:af:61:4a:28:38:18:
                    84:ce:46:12:40:f1:6c:93:f5:a4:25:8c:e0:b1:20:
                    df:7b:5f:57:1e:30:9a:38:e5:e0:f0:7a:1c:bf:02:
                    bc:98:fb:a8:3d:99:e0:fd:13:ad:6b:bd:7c:14:f2:
                    fa:42:f2:46:e4:1e:dc:5d:dd:6e:93:c4:30:d4:61:
                    5b:a0:b5:a0:c0:af:61:0c:e0:c3:f1:ea:cd:08:5d:
                    e5:eb:f5:82:98:34:ea:5a:26:18:93:49:ae:ad:c2:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:EC:43:FE:8E:9E:34:55:4B:37:32:D3:BD:27:E9:0A:FF:DF:08
            X509v3 Authority Key Identifier:
                keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37382e302f32342d3234203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:1b:f0:67:5f:13:df:f7:3b:55:c5:df:71:1e:45:99:a2:
         f9:ff:61:21:a8:4f:8f:7b:3a:3b:ee:37:d1:36:4b:d5:3f:72:
         ec:47:5b:9f:89:07:ef:57:34:73:97:47:60:bb:62:ed:e2:ca:
         fa:ec:42:35:b9:b6:ad:4f:1f:a9:19:6e:90:3d:bf:5c:ad:32:
         93:93:ee:d6:c6:b8:34:74:88:c1:a6:03:6f:06:c2:68:e2:b2:
         a8:d4:6b:c1:6b:e7:90:3a:72:cb:c3:30:18:76:9c:61:12:52:
         34:77:13:2d:f3:a3:89:27:45:0a:c9:24:6b:b1:ee:12:60:41:
         3b:97:6c:68:52:0e:5a:d6:ec:1d:fc:73:54:cc:e7:ca:0d:dc:
         ea:10:49:1d:4c:66:6b:d5:81:3e:db:a7:22:76:c8:0b:ef:26:
         dd:b0:b8:b5:46:b5:30:5a:e6:ab:b3:5f:65:49:95:d9:a7:35:
         8e:34:25:8e:99:29:93:fb:89:a1:37:4e:67:f2:b0:02:91:92:
         5a:29:fc:b8:d4:ff:18:28:e9:a5:43:75:66:28:7e:14:fd:4f:
         fb:b0:e4:3d:f6:4f:b0:f0:d6:a8:c3:33:55:f9:da:3b:78:21:
         1b:36:d7:5d:8e:e3:b5:21:ee:ad:13:9d:ff:c7:ce:1e:65:74:
         a1:00:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org