Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3230392e302f32342d3234203d3e20323639313136.roa
File:                     34352e3137392e3230392e302f32342d3234203d3e20323639313136.roa (raw, json)
Hash identifier:          /b1rIgBDBwkcmISOW6Qgo+XrWFzkGUc3btaAhwUMIrY=
Subject key identifier:   A0:12:EA:A0:F6:22:A1:C2:60:2D:C0:94:89:8F:2F:A1:6B:04:D9:58
Certificate issuer:       /CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
Certificate serial:       1FBBC1DF00081F8077C51B76C6492AA1F502E236
Authority key identifier: 93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3230392e302f32342d3234203d3e20323639313136.roa
Signing time:             Tue 05 Mar 2024 16:19:14 +0000
ROA not before:           Tue 05 Mar 2024 16:14:14 +0000
ROA not after:            Tue 04 Mar 2025 16:19:14 +0000
asID:                     269116
IP address blocks:        45.179.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bb:c1:df:00:08:1f:80:77:c5:1b:76:c6:49:2a:a1:f5:02:e2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
        Validity
            Not Before: Mar  5 16:14:14 2024 GMT
            Not After : Mar  4 16:19:14 2025 GMT
        Subject: CN=A012EAA0F622A1C2602DC094898F2FA16B04D958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:f4:2f:c2:5e:57:8a:a8:f9:3f:fd:0d:b8:
                    01:4e:fd:19:df:0a:77:89:8d:bc:01:e4:e2:7d:48:
                    f5:68:a9:34:a6:73:1a:50:07:c6:f2:5b:97:d7:30:
                    ca:15:50:ba:f3:dc:66:90:69:40:ef:97:96:7d:57:
                    29:64:f0:c1:56:f6:de:c3:f7:92:0a:b3:1b:73:33:
                    29:60:3d:86:11:1d:ea:5f:35:da:dd:10:f6:28:50:
                    46:df:1f:7e:eb:af:61:c9:2c:cd:5f:c3:6e:d3:0f:
                    34:8f:15:18:94:6e:9e:08:dd:83:04:00:f3:4f:28:
                    e1:be:81:1a:23:3a:b7:69:35:25:05:fe:31:a6:47:
                    22:5e:69:a4:8c:e7:71:b6:f7:a1:e0:42:b2:f4:39:
                    c1:14:1c:31:b1:48:46:d1:39:1a:d8:6a:60:af:bc:
                    53:2d:e7:c6:90:31:1f:30:9e:98:4a:6d:d8:f4:0d:
                    84:ef:4e:f8:4d:00:43:f2:52:1b:b2:e0:2b:e4:9a:
                    12:7f:b3:ad:91:4c:c7:74:c2:7f:00:95:26:1d:fc:
                    0f:8c:0e:6b:90:4d:8b:14:07:7c:2a:47:49:8b:78:
                    0d:94:ae:42:ca:a7:ad:bb:02:cd:c4:90:db:e2:d6:
                    0a:c9:70:36:37:14:d0:7c:2d:9c:2b:91:c1:7a:94:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:12:EA:A0:F6:22:A1:C2:60:2D:C0:94:89:8F:2F:A1:6B:04:D9:58
            X509v3 Authority Key Identifier:
                keyid:93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3230392e302f32342d3234203d3e20323639313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:44:b7:ef:28:93:72:76:37:6a:7c:f0:0c:b2:15:68:66:5e:
         bc:7c:d0:e8:9b:75:5b:d6:1e:41:7c:a1:b5:53:93:88:c3:9c:
         bd:f8:d8:83:af:cc:79:73:a3:fa:cb:fb:4b:f9:92:34:c0:e1:
         43:f2:55:20:ee:11:dc:82:f9:3c:db:75:c6:89:32:41:ea:d9:
         80:36:bd:ea:52:4d:4f:9d:75:6f:91:1e:c8:1a:e0:ff:09:7a:
         18:e0:f0:10:90:ae:18:9c:3a:ef:bf:6c:08:99:be:1d:69:e8:
         e5:ce:5d:aa:cc:e7:f3:0c:13:21:c1:f2:ec:52:0b:b1:17:bf:
         0d:dc:56:e6:a8:3c:10:ac:a9:24:92:ef:c3:93:ed:e2:2f:31:
         38:fc:4f:75:af:0a:d2:60:bb:99:3a:31:be:0f:51:95:53:ca:
         63:ef:17:b0:1b:cc:80:dd:eb:05:03:39:4c:f6:92:a1:52:38:
         d6:ad:51:3d:1f:2f:e4:60:bf:af:0e:52:e3:44:5e:c6:b5:e4:
         fc:66:4b:72:e7:5e:e4:b2:ad:26:a1:ea:5c:30:d1:7e:1b:b8:
         c7:6e:24:10:9a:4c:70:d4:ef:bc:43:0a:7a:3c:f3:6d:ec:d3:
         ad:33:3c:36:65:83:0d:00:9f:08:80:14:d3:88:2c:f8:d8:dc:
         43:4c:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org