Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa
File:                     34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa (raw, json)
Hash identifier:          ra0tbMhETeD5+5oUeBDfJE467fDpPvA910Tg64hFWmc=
Subject key identifier:   56:B9:0B:85:CA:60:04:76:30:46:01:44:A1:22:AC:04:69:3C:0E:34
Certificate issuer:       /CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
Certificate serial:       3F4DB286F442ACB741FE3B0DC1DD137B1026C8F7
Authority key identifier: 11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa
Signing time:             Thu 07 Mar 2024 17:45:49 +0000
ROA not before:           Thu 07 Mar 2024 17:40:49 +0000
ROA not after:            Thu 06 Mar 2025 17:45:49 +0000
asID:                     267329
IP address blocks:        45.232.142.0/24 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4d:b2:86:f4:42:ac:b7:41:fe:3b:0d:c1:dd:13:7b:10:26:c8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
        Validity
            Not Before: Mar  7 17:40:49 2024 GMT
            Not After : Mar  6 17:45:49 2025 GMT
        Subject: CN=56B90B85CA60047630460144A122AC04693C0E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:e5:57:90:8a:f6:49:76:34:c9:8e:3b:07:
                    9f:dc:98:4f:9d:87:db:d4:6c:22:d9:37:c7:6c:6a:
                    b7:00:bf:d9:43:9e:e1:72:a5:dd:da:7f:2b:3e:e9:
                    6a:fe:28:78:e2:2d:32:9c:0d:ef:45:99:29:b9:96:
                    1b:49:68:06:e7:40:cf:81:b7:20:01:02:e7:29:c6:
                    fc:9e:46:23:37:f7:4d:e4:e5:9e:ee:a9:62:ad:78:
                    10:12:e8:f6:bc:5c:c7:06:e3:29:a8:34:f2:47:16:
                    3e:be:84:4c:c3:a2:bf:5f:d8:f1:6e:c1:1b:6c:90:
                    11:f2:ea:98:d2:39:a3:e4:8e:55:e6:f7:72:0c:59:
                    80:ed:91:96:ff:fc:f3:d4:c2:59:42:67:51:56:6f:
                    dc:86:ea:d5:54:76:50:d8:00:46:9f:d0:49:22:32:
                    68:dc:e8:60:2b:75:cd:8d:0b:59:89:b6:54:28:a0:
                    29:f8:bd:d5:c1:87:71:5b:ad:e5:a2:6f:1b:7e:b2:
                    2b:ef:25:39:26:e7:73:f5:cb:6c:69:8d:f6:21:e7:
                    3b:51:7e:88:f9:54:14:59:b9:c6:b5:08:9f:c0:b7:
                    9a:df:a6:6d:a5:98:57:e5:d7:63:7e:ae:6d:95:b0:
                    58:5e:9d:d6:b0:0c:e0:c0:56:19:f7:8b:8e:27:53:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B9:0B:85:CA:60:04:76:30:46:01:44:A1:22:AC:04:69:3C:0E:34
            X509v3 Authority Key Identifier:
                keyid:11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:86:95:bb:62:b1:03:b6:a3:33:8e:c2:28:08:b3:b7:4c:21:
         ac:22:86:73:fb:94:32:a4:a5:be:ad:0f:02:52:ca:a5:24:48:
         89:14:69:fe:84:ca:69:76:a5:4a:3e:0c:9f:ad:38:08:ab:93:
         2f:f3:5e:ce:8c:32:2b:05:55:b0:55:f1:7f:3d:92:0d:fc:69:
         00:55:69:ad:60:66:d3:74:ef:b8:0d:27:01:b3:f4:e2:42:d4:
         a8:22:b5:10:f7:07:b5:e6:d3:57:6a:4f:e9:2c:a0:98:0c:d6:
         39:3b:a3:13:38:7b:e4:b7:1e:d2:f7:40:5c:38:d0:99:e5:7b:
         0c:46:4e:00:28:c2:ae:a8:2a:88:ca:82:d2:32:47:6d:9c:e4:
         4b:6a:42:3d:b7:37:f9:66:a8:74:5a:7f:02:3d:03:30:a1:8b:
         89:a4:a4:88:84:c2:60:17:f8:0e:da:45:a9:81:4d:7a:05:e3:
         dc:ee:88:07:0b:04:98:35:0a:ce:d6:b0:8e:f4:ea:a3:ae:a0:
         f3:88:14:cf:59:27:c4:05:5b:73:e9:5e:d8:fc:96:9d:0a:e8:
         51:1e:f8:21:43:7f:8f:20:d2:39:f9:6e:5c:65:e4:8e:57:0c:
         99:82:41:ac:46:7f:fe:4e:20:1a:78:f5:02:66:57:27:ae:11:
         40:dc:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org