Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa
File:                     34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa (raw, json)
Hash identifier:          TirmspfEuYyxpIgmMiFASR233vNeM5YfeeJCp7GXbGU=
Subject key identifier:   B9:E8:23:86:52:27:79:1E:CF:A5:8E:60:45:51:10:A7:B5:3A:9B:92
Certificate issuer:       /CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
Certificate serial:       340312E50190C70C0FE168B994A581796248EB9F
Authority key identifier: C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa
Signing time:             Wed 03 Apr 2024 13:30:53 +0000
ROA not before:           Wed 03 Apr 2024 13:25:53 +0000
ROA not after:            Wed 02 Apr 2025 13:30:53 +0000
asID:                     268726
IP address blocks:        45.171.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:03:12:e5:01:90:c7:0c:0f:e1:68:b9:94:a5:81:79:62:48:eb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Validity
            Not Before: Apr  3 13:25:53 2024 GMT
            Not After : Apr  2 13:30:53 2025 GMT
        Subject: CN=B9E823865227791ECFA58E60455110A7B53A9B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:ad:7e:1b:e0:91:23:6a:b0:a1:5a:58:49:
                    b8:97:65:82:0e:8a:b7:5f:04:b5:6c:17:5c:0f:6b:
                    38:5b:23:33:bf:30:db:de:6a:6d:71:1e:ef:e8:4b:
                    39:16:c2:31:d2:2c:ab:d1:22:4a:19:75:03:d6:59:
                    bd:31:6e:dd:0d:02:e3:62:f6:13:4d:2b:69:80:f1:
                    3d:d4:9c:49:d5:fe:43:63:d8:d5:a1:a3:54:d6:42:
                    3a:e5:71:3e:71:b3:49:b6:29:2b:46:ea:ac:58:e5:
                    31:3f:d1:77:98:27:fb:60:d5:68:58:83:cf:cc:e9:
                    e7:88:37:85:26:72:dd:b2:41:72:56:16:dc:22:08:
                    7b:fe:26:db:fd:1a:d2:21:32:ed:84:e7:a5:42:d7:
                    27:1b:d6:04:7c:23:a9:8b:14:b0:e2:86:98:c0:e1:
                    ef:ac:89:87:d0:34:4e:a8:6e:32:90:6f:25:4c:2f:
                    63:c3:86:2b:d9:47:5d:99:e6:c5:71:a0:d8:c0:01:
                    92:64:0e:b1:d6:a1:17:3e:bc:ca:a6:4f:15:f3:11:
                    c9:93:82:8b:fd:42:1b:e3:f7:92:ee:fa:d3:b7:5d:
                    f9:60:1e:58:d7:26:3d:fa:5c:4e:ab:be:52:38:77:
                    a2:8f:10:19:ca:ed:bc:be:84:c2:42:59:40:bb:6c:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E8:23:86:52:27:79:1E:CF:A5:8E:60:45:51:10:A7:B5:3A:9B:92
            X509v3 Authority Key Identifier:
                keyid:C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:34:96:3e:00:62:35:cb:9a:19:12:4a:44:ee:b9:13:16:f3:
         c9:22:6f:32:56:e6:16:36:72:80:c4:e8:b8:e3:33:5a:19:b9:
         04:07:ee:46:a9:b6:9a:da:e7:8f:33:43:74:03:70:2f:91:02:
         d0:1e:43:70:9a:bf:89:8f:61:38:1f:28:2f:42:2b:d8:95:de:
         b2:d0:b5:a8:fe:37:38:ae:17:ed:13:3c:02:53:75:29:b8:e4:
         a2:a8:7c:5f:1f:f0:87:9b:1b:ae:7c:63:6a:88:05:30:d8:f8:
         7e:3d:15:42:e9:20:60:cb:e3:96:9f:4a:1b:e9:9c:72:71:8a:
         84:0b:af:0f:3b:10:61:6f:01:6b:af:0a:68:45:2e:9f:18:3d:
         26:b6:42:e3:23:5a:0f:e9:91:4b:fe:04:fb:03:e3:d5:80:ad:
         4c:4b:cf:5f:42:38:35:21:99:9b:76:d6:a3:1b:d9:24:02:a3:
         36:1c:c5:2e:35:00:b3:1c:88:13:a3:c3:17:3a:d9:3b:18:f2:
         b9:13:11:91:e8:5a:91:c2:d8:ff:68:c2:1b:f4:e3:55:b3:3f:
         35:10:0c:0d:0b:20:ac:f8:58:87:d3:df:5a:38:4e:70:5d:6d:
         cb:fc:6d:b0:ca:5d:ff:9c:db:89:b2:84:3e:f5:68:0b:73:4e:
         a5:fc:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org