Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa
File:                     34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa (raw, json)
Hash identifier:          QiTCM4abT9v2J5ls8wmqmzaMgkvnqePGm4Qc5SDWypk=
Subject key identifier:   75:4B:7E:CF:2F:38:94:BE:CF:F3:49:60:0E:57:4D:FE:0E:D8:F8:D8
Certificate issuer:       /CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
Certificate serial:       2BAFD933788D29A879B3D063384F6EFC97142103
Authority key identifier: 93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa
Signing time:             Thu 07 Mar 2024 22:54:21 +0000
ROA not before:           Thu 07 Mar 2024 22:49:21 +0000
ROA not after:            Thu 06 Mar 2025 22:54:21 +0000
asID:                     269116
IP address blocks:        45.179.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:d9:33:78:8d:29:a8:79:b3:d0:63:38:4f:6e:fc:97:14:21:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
        Validity
            Not Before: Mar  7 22:49:21 2024 GMT
            Not After : Mar  6 22:54:21 2025 GMT
        Subject: CN=754B7ECF2F3894BECFF349600E574DFE0ED8F8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:b2:1f:86:01:ce:c3:c7:aa:53:0c:b4:02:
                    78:5d:75:cb:2a:11:55:d7:3b:cd:ab:38:46:58:dc:
                    de:27:ee:b4:60:16:5d:d2:0f:64:d4:1e:bb:6a:47:
                    be:7c:29:01:52:9a:a4:43:aa:45:77:39:5f:02:0b:
                    56:e4:af:24:2f:64:ca:19:9f:50:93:89:9b:a8:48:
                    8b:a4:91:ab:62:63:f7:5f:06:67:d4:1f:e1:58:28:
                    4f:64:fd:6d:02:a2:f7:87:77:54:af:ef:03:8a:a7:
                    44:c6:1e:8b:a2:20:8c:1f:3a:2f:f4:0d:01:a4:9b:
                    ab:1e:f3:22:89:5c:d8:96:af:f5:39:96:fe:4d:e7:
                    63:fa:3f:02:fa:6f:4c:99:d8:43:df:36:e0:9a:55:
                    29:2b:52:33:ea:e8:08:ba:fa:37:74:7b:06:2c:59:
                    71:83:ff:29:04:9e:7b:61:10:a1:7b:fb:db:ce:e1:
                    d1:f8:b9:76:1c:6f:98:3a:81:3d:be:35:17:88:a3:
                    49:f6:0a:c5:74:ef:54:c7:ad:42:2d:80:89:37:fa:
                    21:ab:bd:b6:78:0b:8e:c4:91:a2:29:56:ab:ef:c4:
                    24:e4:53:ed:db:05:c9:d4:a7:0c:df:8d:eb:a2:a8:
                    03:ae:33:3a:02:10:93:2f:4d:68:77:94:2d:7f:b5:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4B:7E:CF:2F:38:94:BE:CF:F3:49:60:0E:57:4D:FE:0E:D8:F8:D8
            X509v3 Authority Key Identifier:
                keyid:93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:b8:72:c1:5e:29:55:a6:b2:0f:6a:07:fa:3d:c0:c7:38:
         d5:c2:37:84:ab:4c:e2:af:96:4b:7d:69:50:29:c9:8c:81:ae:
         f8:ef:00:ad:12:74:86:aa:eb:e5:a4:93:38:3a:0d:80:de:57:
         58:62:ab:01:8e:80:04:ff:72:66:ad:4e:39:53:64:01:3d:b2:
         8c:90:f6:c2:d3:22:59:a1:2b:a3:6c:b1:aa:c2:35:76:1b:b5:
         7e:9a:fd:f1:22:7c:5b:d0:16:7d:1e:a0:dc:83:37:9f:af:a1:
         aa:52:d5:80:5c:66:1c:c8:51:b8:30:3b:42:52:17:77:05:c8:
         9e:26:63:cd:b0:65:7e:18:62:dc:bb:97:53:5b:d4:15:44:fe:
         b0:97:39:aa:55:d0:bf:e8:f8:8e:33:e1:8f:b8:95:4d:f9:95:
         aa:cf:37:fe:00:64:ba:fc:a5:15:98:0a:45:12:72:7b:f7:5e:
         f5:df:e8:e4:a1:e1:77:cf:fd:74:dd:a4:8f:77:d1:14:b1:bb:
         0c:c8:e7:8f:f1:aa:56:49:ee:61:55:de:d5:e5:c4:be:2e:be:
         f6:cf:8a:97:3d:e9:10:d9:3b:12:bc:dc:32:c8:3d:59:70:cf:
         74:20:ff:15:1f:06:d6:a1:44:12:02:a7:14:87:0d:da:3e:3a:
         9e:ff:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:30 2024 by rpki-client on console-ams.rpki-client.org