Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132352e302f32342d3234203d3e20323636313334.roa
File:                     34352e362e3132352e302f32342d3234203d3e20323636313334.roa (raw, json)
Hash identifier:          VX9yHaOqmZ7I11Viclllt0p3Fkqh9HT27CXDVoK8n5w=
Subject key identifier:   E8:32:14:D0:89:AA:3F:67:EF:FD:F5:80:72:10:B6:3E:5B:2E:E7:67
Certificate issuer:       /CN=4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4
Certificate serial:       4EACBA8949E666AD080DA64C572FA5458CEC2543
Authority key identifier: 4B:E4:B7:D8:44:EB:7B:C0:81:B6:DF:A5:A9:8D:6D:E9:0F:CD:9C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132352e302f32342d3234203d3e20323636313334.roa
Signing time:             Fri 09 Feb 2024 21:56:02 +0000
ROA not before:           Fri 09 Feb 2024 21:51:02 +0000
ROA not after:            Fri 07 Feb 2025 21:56:02 +0000
asID:                     266134
IP address blocks:        45.6.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ac:ba:89:49:e6:66:ad:08:0d:a6:4c:57:2f:a5:45:8c:ec:25:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4
        Validity
            Not Before: Feb  9 21:51:02 2024 GMT
            Not After : Feb  7 21:56:02 2025 GMT
        Subject: CN=E83214D089AA3F67EFFDF5807210B63E5B2EE767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ba:50:b6:12:6c:97:cd:ba:ca:17:88:4f:70:
                    87:a8:1c:98:ae:d7:d4:1f:f9:23:c0:b3:22:1b:6e:
                    e6:8c:24:34:30:44:e3:13:21:d0:bc:92:0d:a7:33:
                    37:a2:c7:27:51:c0:2e:77:aa:21:1e:26:d9:f5:d1:
                    8f:90:04:8b:8b:63:06:a8:19:37:9a:cf:a0:4c:d7:
                    88:d1:db:90:56:c3:1e:e1:f3:05:e0:ed:bf:e2:00:
                    8d:4b:c1:8b:4b:5a:95:f2:ce:a6:01:37:35:86:a1:
                    70:08:9d:a9:a2:43:03:ff:04:8c:a8:38:11:17:44:
                    88:61:7d:72:a8:44:ff:15:7a:e0:8f:2d:ba:14:0a:
                    db:27:1f:3e:78:3f:56:2a:d6:93:85:34:bf:0b:79:
                    f8:c2:42:bb:de:8a:b8:0d:81:78:21:63:14:8d:b9:
                    12:50:37:00:6d:a3:a5:7c:14:17:26:6f:0b:1c:40:
                    35:52:6a:fd:98:dd:85:60:bd:ae:eb:48:4f:09:e9:
                    7e:47:23:e6:63:60:14:f2:5f:cc:a0:29:09:71:a3:
                    09:22:29:54:9e:35:c6:72:b6:a7:31:c8:c4:62:3d:
                    eb:26:3a:32:f2:94:9d:b0:97:e1:2f:a3:88:b9:60:
                    4d:13:a4:e5:5d:7f:19:68:b9:1b:de:30:8f:c6:95:
                    95:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:32:14:D0:89:AA:3F:67:EF:FD:F5:80:72:10:B6:3E:5B:2E:E7:67
            X509v3 Authority Key Identifier:
                keyid:4B:E4:B7:D8:44:EB:7B:C0:81:B6:DF:A5:A9:8D:6D:E9:0F:CD:9C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132352e302f32342d3234203d3e20323636313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:55:d9:b5:75:44:0c:c9:fb:e8:9a:b7:c7:9e:01:9c:27:
         9c:47:fe:34:ac:9d:2b:09:b9:01:b1:60:b9:a0:8c:fb:24:bb:
         63:69:02:28:ab:b0:3d:43:2b:f6:16:ed:7c:1a:90:58:aa:26:
         ea:a6:1a:85:2b:e5:4c:47:a6:28:21:1f:a8:4d:74:26:dc:8f:
         12:c1:a2:fc:c5:c8:69:9e:86:44:fa:64:f7:57:97:86:fa:e5:
         7e:2c:30:5a:bc:24:ee:a0:31:5a:f4:cd:26:8b:84:ad:94:0e:
         1c:ac:ff:c9:ae:e4:04:61:9c:e1:f5:bb:d8:8d:51:d7:86:7f:
         ed:8f:90:51:37:59:ab:1c:b0:cf:bb:86:65:69:6c:52:1e:83:
         a4:92:13:7b:29:57:31:f6:d7:9d:89:1a:e2:de:a3:a6:d5:98:
         56:0d:6d:61:ad:f2:c2:9d:93:9a:ce:8d:47:11:83:78:20:46:
         10:7c:2f:b8:2d:c3:36:9e:a5:df:ef:8c:b3:18:65:99:2a:a5:
         2e:29:b2:16:ea:49:11:b5:57:6e:69:fc:86:ed:f2:ac:4c:d9:
         6f:7c:14:19:3b:46:19:24:84:18:d1:e6:37:ba:cd:39:01:b3:
         4c:fa:ac:fe:cb:3f:73:70:94:67:9b:5e:9b:9c:9c:4e:ee:9e:
         49:1a:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org