Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/34352e3233332e37392e302f32342d3234203d3e20323637323936.roa
File:                     34352e3233332e37392e302f32342d3234203d3e20323637323936.roa (raw, json)
Hash identifier:          PRlbGS+tG6fozKldKnWHHiJXXmEkY2l8v/n8qA6woxc=
Subject key identifier:   8C:F9:67:5C:9D:67:E9:4D:C4:A4:15:6E:83:69:54:47:AA:3F:38:86
Certificate issuer:       /CN=942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663
Certificate serial:       2939FFB465A171B0D366DE403041D51422723725
Authority key identifier: 94:2A:D0:AA:1A:2F:AD:0F:14:46:F7:93:06:49:E8:CF:DE:8F:F6:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/34352e3233332e37392e302f32342d3234203d3e20323637323936.roa
Signing time:             Thu 04 Apr 2024 20:14:48 +0000
ROA not before:           Thu 04 Apr 2024 20:09:48 +0000
ROA not after:            Thu 03 Apr 2025 20:14:48 +0000
asID:                     267296
IP address blocks:        45.233.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:39:ff:b4:65:a1:71:b0:d3:66:de:40:30:41:d5:14:22:72:37:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663
        Validity
            Not Before: Apr  4 20:09:48 2024 GMT
            Not After : Apr  3 20:14:48 2025 GMT
        Subject: CN=8CF9675C9D67E94DC4A4156E83695447AA3F3886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:f4:39:78:ab:ae:9e:a7:6d:98:e2:d0:d4:
                    6a:c7:80:40:e8:64:75:0b:f3:2c:61:f7:5c:22:6e:
                    7c:8a:d5:84:3c:56:52:22:02:10:2f:90:9c:23:03:
                    76:c9:78:07:f2:b3:8f:5f:2a:11:c4:58:c1:27:c1:
                    a0:d4:30:56:88:47:8b:3e:6d:09:c1:5c:68:25:a4:
                    aa:60:c3:ad:82:cc:d6:e0:e6:d9:a2:7c:4a:fd:56:
                    b7:1f:a3:22:8a:45:82:52:d7:0e:ed:b9:ca:22:3b:
                    f6:86:64:d1:e2:fc:c6:fa:cf:8c:06:28:4b:87:c9:
                    07:22:4c:91:8c:dc:e7:af:af:c9:bd:3f:b9:a2:3c:
                    7c:32:94:f7:c2:63:ed:62:3c:13:88:e7:10:66:14:
                    ec:0f:24:b4:b4:aa:d1:70:3e:46:6e:b0:e5:f3:84:
                    79:87:fe:95:09:e9:66:02:f3:a6:33:99:d2:ce:4c:
                    ae:18:f7:66:dd:a9:9c:f5:c0:92:f6:f5:37:b7:43:
                    5d:1a:87:a1:4f:71:ec:3c:0e:dd:c5:5d:15:23:c0:
                    de:0e:1e:b4:68:71:6f:fc:02:aa:43:5b:bf:35:ed:
                    3f:fc:91:8a:be:41:63:c8:c2:bf:46:47:ad:8f:54:
                    a3:63:3c:7b:d8:e9:bd:7a:c2:16:15:7f:f1:b9:83:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F9:67:5C:9D:67:E9:4D:C4:A4:15:6E:83:69:54:47:AA:3F:38:86
            X509v3 Authority Key Identifier:
                keyid:94:2A:D0:AA:1A:2F:AD:0F:14:46:F7:93:06:49:E8:CF:DE:8F:F6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/34352e3233332e37392e302f32342d3234203d3e20323637323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:b5:a0:52:c6:40:22:1f:f8:0c:e5:50:f3:35:b5:45:ac:fd:
         a1:cc:57:02:99:8a:09:95:c1:7c:e7:e7:33:e6:dd:4e:05:34:
         88:99:f8:ed:78:a2:ee:0b:de:d0:f4:d6:1d:44:8c:5f:68:2a:
         38:f2:98:cb:ae:ff:05:01:82:99:b6:7c:11:b1:36:08:93:d7:
         08:db:8a:0c:24:32:0a:93:b2:bc:0d:51:1f:92:73:dd:09:cb:
         84:59:76:50:49:e6:d3:db:cf:14:7d:d1:4e:d3:c6:34:34:42:
         34:4a:08:79:79:b4:2a:5d:a7:66:f1:e4:32:30:7b:b0:75:cd:
         af:84:42:5d:00:15:27:aa:dc:e0:0d:d7:e6:61:1c:90:58:ad:
         6b:3c:67:e9:70:7a:8f:5e:32:40:64:48:bd:d2:1d:a8:3b:00:
         ae:47:11:73:cf:3e:8b:51:6a:30:f2:f3:5d:d0:46:dd:9c:bf:
         f0:b6:5a:fc:08:de:e3:19:3d:f8:c0:f1:72:68:ed:35:48:95:
         4b:55:06:4f:43:23:72:9a:04:2b:1e:0d:8e:b4:50:3b:8a:e8:
         0c:07:7b:53:58:e5:93:72:c4:1c:b3:d3:ff:7e:4c:3e:7b:05:
         b3:08:75:63:21:ed:28:6e:f2:65:a4:7c:fa:a8:c2:bf:c1:cd:
         e5:c6:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 14:56:17 2024 by rpki-client on console-fra.rpki-client.org