Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230352e302f32342d3234203d3e20323638323435.roa
File:                     34352e3233362e3230352e302f32342d3234203d3e20323638323435.roa (raw, json)
Hash identifier:          HJAJLnDmW6Ag0pCo7TiO/AFCb78m9rPgy8APw0/sLXE=
Subject key identifier:   F2:1B:CE:58:3A:DD:22:ED:A3:C3:9D:8C:76:AC:D0:AF:9C:DC:A5:6A
Certificate issuer:       /CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
Certificate serial:       6F5BE1283FEF22A2D5D2DFB5B5C7E0C47383C6FD
Authority key identifier: 97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230352e302f32342d3234203d3e20323638323435.roa
Signing time:             Wed 13 Mar 2024 11:43:48 +0000
ROA not before:           Wed 13 Mar 2024 11:38:48 +0000
ROA not after:            Wed 12 Mar 2025 11:43:48 +0000
asID:                     268245
IP address blocks:        45.236.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5b:e1:28:3f:ef:22:a2:d5:d2:df:b5:b5:c7:e0:c4:73:83:c6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
        Validity
            Not Before: Mar 13 11:38:48 2024 GMT
            Not After : Mar 12 11:43:48 2025 GMT
        Subject: CN=F21BCE583ADD22EDA3C39D8C76ACD0AF9CDCA56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:11:17:9d:3a:58:c1:92:e6:c2:39:ad:8c:
                    5b:e5:b1:ca:63:9d:58:7b:53:5d:f3:c4:42:88:ee:
                    3b:2c:3e:95:2d:fd:62:2b:b4:1c:c8:07:c0:fe:26:
                    23:2c:85:78:67:c9:e1:60:dd:85:ed:ec:eb:5a:40:
                    13:5a:f9:af:1c:57:27:6a:04:d5:a2:4a:36:e4:71:
                    dd:e8:31:42:2f:f9:88:0e:66:c0:cf:c8:1b:3c:1c:
                    9e:c2:44:b2:3f:ea:c7:8e:33:10:4d:45:14:22:a6:
                    c0:e5:fa:9c:90:94:b6:c8:31:2b:9e:63:3c:87:bd:
                    91:32:4a:ba:2a:61:85:97:4c:60:5a:48:85:88:47:
                    12:cd:c2:27:e6:1f:d7:e2:a0:62:ac:28:93:12:0a:
                    6a:d5:96:32:17:a4:a5:2d:db:76:47:af:e1:e0:33:
                    30:74:7e:5f:ed:9d:a7:6c:18:11:5e:5d:8f:6b:ec:
                    33:12:fb:ed:41:fb:3e:3e:2e:23:4a:60:40:08:ca:
                    79:73:b5:bd:46:8d:d3:12:1c:08:4d:4d:3d:bf:7a:
                    7c:b1:5d:83:47:ea:db:38:a5:72:da:21:3f:c2:0f:
                    91:45:ae:08:34:07:e5:03:3b:46:a5:01:93:90:fb:
                    bb:b2:46:6c:a6:91:ee:6b:68:c3:4b:7f:31:1e:23:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:CE:58:3A:DD:22:ED:A3:C3:9D:8C:76:AC:D0:AF:9C:DC:A5:6A
            X509v3 Authority Key Identifier:
                keyid:97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230352e302f32342d3234203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:83:af:92:f8:ad:66:f9:fe:45:40:b3:d6:20:4b:1a:95:a9:
         61:6f:81:9a:7f:72:b7:0a:4c:10:ea:81:e9:65:95:fe:11:09:
         14:8a:38:dd:63:0e:9e:3c:e7:5f:4f:1c:f8:f6:ac:83:81:30:
         32:9a:88:20:1a:f1:75:99:03:2d:ba:68:61:70:fb:92:96:53:
         85:99:3b:ca:ef:f3:72:eb:c8:db:2f:07:38:0f:fa:c4:e6:6a:
         cb:ae:af:e6:95:60:7d:5a:2c:8c:06:68:4b:4c:9a:ea:d7:d4:
         ee:75:f6:bc:79:6c:d5:a7:13:52:a6:e4:25:0c:58:36:52:83:
         4c:9d:28:e3:84:05:af:95:c5:af:41:90:7e:a4:c9:24:8d:6a:
         b9:69:25:83:7d:4c:0d:25:25:0a:40:df:39:a5:91:d9:dd:dc:
         9c:ec:b5:65:5a:fd:42:99:b4:ac:d6:66:d0:01:90:5f:ef:c0:
         b0:86:0a:d3:50:fd:9a:1f:2a:7c:6b:b4:79:2d:36:ea:e8:79:
         d7:bb:77:57:49:fe:38:52:02:ae:1b:89:73:b0:fc:1a:b7:46:
         26:8c:43:83:f1:2d:ac:c7:cb:12:92:d4:9b:ea:aa:02:19:86:
         06:eb:63:7f:c4:66:8b:15:4a:71:18:b4:b3:cf:75:dc:ec:52:
         f0:ba:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org