Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32342d3234203d3e20323638313334.roa
File:                     34352e3136392e3234302e302f32342d3234203d3e20323638313334.roa (raw, json)
Hash identifier:          yZQApjAiahFp7ycbstQ3ZaqzL267BrSjH4niNrmSwqE=
Subject key identifier:   9C:1C:62:DE:74:52:1F:DB:BA:09:91:36:38:A3:39:96:77:D9:51:AA
Certificate issuer:       /CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
Certificate serial:       70566940D8D5AB6105981CF0C5EAB895BDF246DB
Authority key identifier: 7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32342d3234203d3e20323638313334.roa
Signing time:             Sun 16 Jul 2023 21:45:34 +0000
ROA not before:           Sun 16 Jul 2023 21:40:34 +0000
ROA not after:            Sun 14 Jul 2024 21:45:34 +0000
asID:                     268134
IP address blocks:        45.169.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:56:69:40:d8:d5:ab:61:05:98:1c:f0:c5:ea:b8:95:bd:f2:46:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
        Validity
            Not Before: Jul 16 21:40:34 2023 GMT
            Not After : Jul 14 21:45:34 2024 GMT
        Subject: CN=9C1C62DE74521FDBBA09913638A3399677D951AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:e8:4a:1e:b6:38:21:c7:0f:77:bd:15:72:
                    08:47:cc:4d:24:4f:20:67:c5:d5:7f:2a:a1:a8:e4:
                    c8:c7:62:6e:b0:a7:b3:da:fe:e5:04:3d:dd:7a:e7:
                    3b:2d:9c:5a:4e:6c:70:79:ab:1c:b9:76:59:00:33:
                    b1:a6:06:79:bc:44:37:17:0e:ad:76:a7:7c:8e:63:
                    82:bd:84:b8:13:84:8d:98:94:71:0b:eb:72:ee:6d:
                    77:bf:65:3b:d4:2f:b9:e0:6f:d1:73:b3:60:f2:b6:
                    a5:c4:01:df:ae:5b:87:c8:80:f7:24:89:0f:d3:f4:
                    c0:64:fe:39:f6:e1:28:88:9a:51:dd:b5:81:76:d2:
                    e9:ed:4a:8d:ba:21:9c:53:00:43:b1:5f:51:19:d0:
                    1c:0a:cc:9d:54:77:67:b9:c9:bb:e4:92:06:1d:13:
                    eb:42:76:01:64:a5:9c:40:7b:58:02:82:19:e8:e1:
                    41:ec:cf:06:1f:d9:ac:6e:f2:1b:f7:0e:7e:95:42:
                    1a:d8:6d:b0:40:b7:e0:ea:a0:56:15:0f:e9:4e:65:
                    a3:a9:d2:c0:e3:10:42:2a:9e:c7:92:ce:f7:c0:fe:
                    df:5f:c6:9e:f0:81:2c:39:8f:74:e9:0c:e1:6a:4d:
                    3b:03:43:63:b0:87:42:99:76:1e:e9:5c:d2:ac:26:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1C:62:DE:74:52:1F:DB:BA:09:91:36:38:A3:39:96:77:D9:51:AA
            X509v3 Authority Key Identifier:
                keyid:7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234302e302f32342d3234203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:48:66:66:49:7a:a8:c5:8d:8e:03:69:6f:8c:d5:70:87:
         dd:1d:e0:4b:11:c7:df:f9:c8:56:be:0e:50:7a:3d:f8:7b:d4:
         69:5c:9c:0b:b4:97:e7:f3:9f:a6:0d:f6:c7:91:e2:4a:04:88:
         12:4b:58:ab:a6:28:bc:86:bc:19:89:4a:2e:0b:f6:7a:07:ca:
         d6:44:d5:91:a5:3a:db:32:4e:8d:7e:1e:90:d2:06:08:08:20:
         36:ad:27:21:e9:f1:77:e1:08:8d:e7:6b:00:87:30:d5:09:a6:
         a8:78:c4:85:f9:5e:8f:51:c1:35:02:6c:24:85:1a:73:b7:54:
         db:5e:00:83:c1:0e:cf:4b:3f:e7:25:30:c3:7b:28:94:35:75:
         eb:17:0d:e7:02:c4:61:08:26:f9:75:94:e5:70:a3:0f:67:ea:
         d6:3a:22:34:7f:6d:19:0b:47:fc:aa:1f:93:a5:74:0a:03:fc:
         bd:75:b9:06:9f:52:67:39:7b:f9:72:34:59:0e:8d:ce:6a:b1:
         03:35:6f:4d:d8:00:33:62:49:48:86:44:f9:b8:8c:c4:15:69:
         94:8b:06:e8:53:a2:09:f1:17:83:64:6e:f7:30:64:74:f7:01:
         61:0b:c0:d9:5b:e6:4f:a5:6d:ee:03:6f:a2:f2:17:ed:9d:fe:
         88:4c:06:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org