Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa
File:                     34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa (raw, json)
Hash identifier:          zwCgRXYEqiiVca2yOs75m8OO6cMrAKUCFsccCQ9herc=
Subject key identifier:   5C:67:10:95:39:68:89:5E:FD:BF:62:25:35:94:FE:D8:33:86:10:A2
Certificate issuer:       /CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
Certificate serial:       6B8B4247EDD684380B0613AD3A5CB2905E9725E8
Authority key identifier: 97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa
Signing time:             Wed 13 Mar 2024 11:43:48 +0000
ROA not before:           Wed 13 Mar 2024 11:38:48 +0000
ROA not after:            Wed 12 Mar 2025 11:43:48 +0000
asID:                     268245
IP address blocks:        45.236.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8b:42:47:ed:d6:84:38:0b:06:13:ad:3a:5c:b2:90:5e:97:25:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
        Validity
            Not Before: Mar 13 11:38:48 2024 GMT
            Not After : Mar 12 11:43:48 2025 GMT
        Subject: CN=5C6710953968895EFDBF62253594FED8338610A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:26:b8:b3:2f:43:e7:87:bf:6c:3e:9b:22:
                    fa:a3:8f:b6:7b:bd:30:fe:34:f8:a7:8f:eb:27:72:
                    f9:f9:b0:f6:98:38:5e:6e:e3:5b:6e:99:2c:58:2a:
                    c4:e6:90:33:bd:d3:da:89:03:eb:ed:99:85:df:c6:
                    b9:08:da:7b:8b:a0:54:5c:9b:ae:c4:1d:3e:c4:09:
                    0f:d9:51:6d:30:cd:fd:de:e0:fa:40:2d:3c:6b:0f:
                    08:2b:99:67:96:2a:43:11:a1:5b:eb:3f:f8:80:22:
                    19:3e:e5:75:2f:44:12:c6:0c:62:87:ff:21:88:57:
                    b0:80:b5:4b:2c:ac:e5:ac:04:63:28:cc:51:c6:97:
                    e8:17:ab:ae:8e:04:91:e1:24:2f:69:d4:8c:5c:2e:
                    9c:90:8e:d5:54:a9:a3:78:a4:4f:ca:de:87:a9:5a:
                    e0:68:fc:20:de:92:9b:e2:89:a7:85:d4:f9:a0:fa:
                    d3:a9:9e:0e:36:2b:09:2a:ea:b0:ea:b4:f6:e8:57:
                    1d:69:a7:dd:05:1b:a7:fb:b0:95:2b:49:1f:0a:2a:
                    94:65:ad:90:19:a8:11:a0:c9:0a:12:0d:16:35:70:
                    6c:5b:cf:c1:2d:6b:6a:6a:15:9f:33:17:6f:60:6e:
                    2e:81:85:79:ca:a7:64:0d:c1:d7:d3:a3:91:e1:db:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:67:10:95:39:68:89:5E:FD:BF:62:25:35:94:FE:D8:33:86:10:A2
            X509v3 Authority Key Identifier:
                keyid:97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:31:da:ac:72:5c:ab:80:df:49:21:4d:2d:f8:99:a2:93:81:
         25:3e:e8:71:2d:fa:c5:ae:25:de:69:08:30:8e:0d:ac:58:93:
         01:fb:3c:42:2f:35:83:3b:79:0e:92:9c:6b:2f:0c:43:89:3e:
         85:b0:cd:b9:fb:29:49:92:66:ff:1d:b3:4c:13:49:e2:e2:bb:
         dc:35:52:11:42:2e:b6:97:1a:90:0b:77:6b:38:34:04:33:9b:
         e8:ea:3b:42:bb:c6:71:7b:99:70:d7:ae:a5:6d:b5:42:9c:d4:
         b9:2c:51:ab:1c:de:15:f9:34:0f:41:a6:09:0a:20:a2:c1:01:
         8d:09:fc:1c:22:da:c7:f0:dc:34:50:02:d9:a6:00:ff:13:e8:
         56:e1:b0:df:1e:19:c6:1c:d5:bb:f1:58:98:88:00:c3:c2:ec:
         6b:63:e4:16:f6:40:2d:cb:89:3b:ac:6e:54:c7:08:cb:36:58:
         a8:e0:fd:42:87:f7:8e:c3:34:4b:7d:92:ea:50:52:7b:e2:5f:
         ac:01:b0:0e:2f:f9:a5:25:11:07:79:2c:d5:2b:89:73:cf:ff:
         4a:61:41:5a:10:7b:72:be:be:26:40:5f:f8:34:51:12:d7:77:
         2f:78:98:d5:ee:db:98:0b:88:ed:6a:12:f3:d5:9b:b7:c5:5b:
         b9:33:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org