Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230372e302f32342d3234203d3e20323638323435.roa
File:                     34352e3233362e3230372e302f32342d3234203d3e20323638323435.roa (raw, json)
Hash identifier:          1PpP3N4iWdWTGHKqsCAdfSdeHGWUfxZISfLfGHp0LC0=
Subject key identifier:   BD:B6:48:1A:36:45:5A:00:E1:22:2B:6E:08:87:1E:C4:B8:24:28:A8
Certificate issuer:       /CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
Certificate serial:       3B356936EBA21007E39321BFFDFA9559574F1885
Authority key identifier: 97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230372e302f32342d3234203d3e20323638323435.roa
Signing time:             Wed 13 Mar 2024 11:43:48 +0000
ROA not before:           Wed 13 Mar 2024 11:38:48 +0000
ROA not after:            Wed 12 Mar 2025 11:43:48 +0000
asID:                     268245
IP address blocks:        45.236.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:35:69:36:eb:a2:10:07:e3:93:21:bf:fd:fa:95:59:57:4f:18:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97071FFFD8FB901780C3CDDCBFF099B99B961467
        Validity
            Not Before: Mar 13 11:38:48 2024 GMT
            Not After : Mar 12 11:43:48 2025 GMT
        Subject: CN=BDB6481A36455A00E1222B6E08871EC4B82428A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:ba:50:b9:6d:ed:41:0d:81:10:f5:92:25:
                    05:7f:f1:88:fd:ff:53:03:1b:f1:23:d0:5a:63:b3:
                    06:e0:d1:91:58:8e:19:28:0c:f8:11:b9:94:a7:e2:
                    52:be:73:ee:6c:dd:ca:8e:55:80:36:46:1a:36:3e:
                    e5:d6:4c:28:70:2c:93:51:1b:09:72:ab:51:3e:fa:
                    fd:34:56:ff:ed:20:9d:e9:d4:6c:6b:d7:b0:0b:c8:
                    db:e5:95:57:eb:4f:04:3a:d4:d6:b1:99:58:3c:76:
                    f6:a0:7e:71:04:7a:f8:c1:e7:d2:5a:6b:35:49:4c:
                    7f:c6:7f:3f:d8:7d:eb:57:76:5c:5a:8a:0b:a8:dd:
                    fd:5b:1d:61:01:6b:4a:7b:94:ce:b3:b6:cb:13:63:
                    db:31:aa:da:32:47:b1:45:23:15:e7:2e:cd:9f:26:
                    10:a8:84:e8:e5:71:f2:81:c7:28:1a:08:43:3c:be:
                    23:df:9d:b0:c5:09:80:d1:37:4a:d7:23:b8:76:12:
                    76:14:3e:2e:d7:0c:ff:52:d3:45:5d:6d:2f:5b:f1:
                    94:3c:10:4b:bd:c2:b2:77:85:b5:3c:ec:14:a4:ac:
                    69:29:95:91:50:b2:86:77:19:de:b0:54:d2:a6:27:
                    49:6f:16:52:23:c2:c3:79:39:e3:c7:c7:b5:a5:6a:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B6:48:1A:36:45:5A:00:E1:22:2B:6E:08:87:1E:C4:B8:24:28:A8
            X509v3 Authority Key Identifier:
                keyid:97:07:1F:FF:D8:FB:90:17:80:C3:CD:DC:BF:F0:99:B9:9B:96:14:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97071FFFD8FB901780C3CDDCBFF099B99B961467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/34352e3233362e3230372e302f32342d3234203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:9a:3a:9e:3d:a6:c6:8e:cb:90:91:98:1f:0b:68:c5:0b:
         be:01:6a:1c:95:fd:be:41:a8:2f:35:32:36:36:bf:12:81:84:
         1b:f1:f9:5a:de:f9:93:83:46:b0:01:1c:99:0b:42:31:f7:50:
         f3:fa:e8:16:74:14:28:be:77:32:bf:e5:3a:78:25:7b:ba:fd:
         0d:11:f0:04:1c:a3:92:6a:95:5f:ea:01:52:6c:d2:ba:2c:1e:
         50:1c:ec:54:e4:b0:27:e2:94:41:19:1b:54:fd:0c:fc:3a:e5:
         1a:df:b1:9b:37:04:79:40:d2:0c:fb:85:0d:68:4f:fe:06:2b:
         34:79:c8:dc:31:f6:64:46:9b:23:9b:ec:00:f1:0e:64:96:bd:
         aa:04:81:43:d2:96:48:6e:5d:95:5e:04:5c:d6:9a:b9:08:d9:
         1b:f6:22:b5:33:35:15:00:58:94:42:87:4f:5e:ec:e4:b0:cf:
         19:f4:ab:c7:b7:4b:6e:3e:c0:b9:1f:fc:bd:c7:df:d1:79:c0:
         47:86:80:2c:4a:ce:ac:cf:aa:df:d1:58:f5:80:68:2a:e5:23:
         a4:c5:62:62:df:14:c5:a8:bf:f2:44:44:93:38:d4:75:7b:d4:
         0e:c4:5a:a9:36:4c:54:3b:7e:1a:ee:29:96:11:6e:c8:be:85:
         4e:62:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org