Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa
File:                     34352e3232352e36342e302f32322d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          lAeYpqwhqAO5FUgfdE3vgk8aNiVyuj6qkkt1TeyrQfU=
Subject key identifier:   FC:BF:51:DA:D2:78:57:3E:86:27:29:8C:F6:B5:A1:E6:5D:56:05:17
Certificate issuer:       /CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Certificate serial:       3134614F785B43874F6CCE18F9C1DA8B1C9F970F
Authority key identifier: 7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa
Signing time:             Fri 29 Dec 2023 18:38:38 +0000
ROA not before:           Fri 29 Dec 2023 18:33:38 +0000
ROA not after:            Fri 27 Dec 2024 18:38:38 +0000
asID:                     262847
IP address blocks:        45.225.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:34:61:4f:78:5b:43:87:4f:6c:ce:18:f9:c1:da:8b:1c:9f:97:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
        Validity
            Not Before: Dec 29 18:33:38 2023 GMT
            Not After : Dec 27 18:38:38 2024 GMT
        Subject: CN=FCBF51DAD278573E8627298CF6B5A1E65D560517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:5e:7f:42:e5:4f:b9:46:d7:5e:a1:0d:b5:
                    6a:14:46:a0:78:f9:6e:2e:3a:47:7d:9a:25:d8:26:
                    e8:11:31:78:f9:ae:ac:4f:d7:5f:3a:ff:0f:88:ab:
                    5e:38:d2:1d:d5:23:7d:75:0b:dc:b5:3f:22:02:5e:
                    9d:44:cd:f1:35:f3:68:78:12:4a:6c:d4:85:fb:e1:
                    67:ef:a1:55:98:c8:07:bb:ef:2c:18:9e:07:3e:c7:
                    50:10:9f:25:45:47:ad:e6:44:9b:1b:89:2c:fe:56:
                    60:d8:86:3e:b1:50:c6:1d:a5:cb:21:02:e9:be:78:
                    3c:3e:4b:20:00:4e:18:ef:32:6d:f0:93:7f:9f:f0:
                    a4:2c:4c:70:ff:b5:a6:0f:e1:f3:83:2c:ab:66:a4:
                    d6:46:db:c8:ca:cb:93:f6:0e:68:ad:a4:f5:a6:f9:
                    db:e2:0f:46:2c:1f:40:c5:ff:ff:bd:3f:5d:c5:db:
                    4f:9b:c4:b1:55:b7:46:97:4e:f5:39:81:e5:58:c2:
                    50:cc:a1:e5:1e:01:de:28:f9:d8:be:13:ee:5d:55:
                    cf:e3:86:2a:d3:34:92:be:df:7c:3e:c5:a1:bb:ae:
                    0e:06:91:b5:93:d8:01:23:27:41:d7:78:be:62:2f:
                    47:4a:3e:e1:7f:66:0e:83:6c:2f:d7:c8:4e:f3:d1:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BF:51:DA:D2:78:57:3E:86:27:29:8C:F6:B5:A1:E6:5D:56:05:17
            X509v3 Authority Key Identifier:
                keyid:7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/7E89C742D551BF248E147A7AC13D94D12B15C8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:d4:17:0f:6c:74:45:a0:fa:9d:43:f0:ca:36:a6:5c:10:
         4d:6b:cf:f7:c1:f9:6b:37:e3:86:76:4d:ac:fc:af:db:7b:90:
         30:4d:7f:e2:5d:0f:9d:40:b0:1d:f1:39:a2:99:c9:38:c7:41:
         37:3c:99:37:b5:d8:b6:cf:6c:6b:5d:2d:a6:59:11:d6:54:9b:
         92:14:22:a8:63:bb:6c:c0:4b:24:d9:ed:60:b1:f7:52:29:1c:
         ea:aa:5f:60:3c:eb:8f:a5:1d:6e:e7:51:83:5c:4b:cd:97:c9:
         69:10:04:47:ce:e5:ff:c4:45:ba:0c:42:c8:2e:a4:47:b7:f5:
         05:63:f5:da:71:cb:0a:37:15:f5:40:80:0c:45:c7:4a:9a:53:
         e9:4e:64:75:a2:cf:53:a8:7f:ad:41:79:db:ce:33:1b:88:42:
         d0:d0:b5:82:81:91:a4:90:5a:e0:ac:c7:81:43:d7:ed:db:1b:
         95:18:d2:c4:82:c4:c2:a4:ec:7e:fd:a1:1f:14:3b:21:27:1d:
         be:27:89:4f:2c:7c:2d:42:6c:88:f1:24:78:5d:01:2c:6d:f6:
         94:d4:00:49:50:8a:48:a0:b2:e4:d2:c1:23:3a:a1:fc:ac:0d:
         c0:48:e4:56:e8:a3:06:60:63:db:fb:14:eb:41:8d:d4:c4:a0:
         52:27:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org