Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3234203d3e20323639303335.roa
File:                     34352e3137362e3131322e302f32322d3234203d3e20323639303335.roa (raw, json)
Hash identifier:          4LkrXFmg3M3wf7lo6rqcTVdSpM/NV0qQy+mif02+t8E=
Subject key identifier:   C1:AD:2C:91:CC:37:DE:2D:F2:03:02:9E:D2:85:92:78:70:BF:4C:CD
Certificate issuer:       /CN=4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4
Certificate serial:       502A023877139A48FEA7D3ACD12B4D15CDFCA8D3
Authority key identifier: 4E:EC:2C:A8:96:56:09:D2:BD:3D:84:A6:EC:A8:A2:32:C3:B8:07:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3234203d3e20323639303335.roa
Signing time:             Thu 15 Feb 2024 20:47:20 +0000
ROA not before:           Thu 15 Feb 2024 20:42:20 +0000
ROA not after:            Thu 13 Feb 2025 20:47:20 +0000
asID:                     269035
IP address blocks:        45.176.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2a:02:38:77:13:9a:48:fe:a7:d3:ac:d1:2b:4d:15:cd:fc:a8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4
        Validity
            Not Before: Feb 15 20:42:20 2024 GMT
            Not After : Feb 13 20:47:20 2025 GMT
        Subject: CN=3082010A0282010100B9F474929BB0484C2674A7DE1E7C8FBA191B6D79C96D8D9646F02F8EC417B422EB1A223774132F59EBBA31E1D962F67A76438FEBDA730A98C9ED08071D6FF584B70296B44224C074B12842086DCA3763418D99ADB88C03D8D4F7D08DBD9D4F752436CB86BE3ED7494221392B21A0B1F2583AF1124B2BD8AF51F220FF034898C20CE0BC130D55ED7A017D67CDD142020C24DC5924CBA8CB1B9961D10BC7514A31FACB07A2FEC383D2EB193DCA45F2BBD8AF9F4B8CF889A51E8A35EC764293A089AB5975049881EC350670BE7E359C24A9BE0C2DB96CFD3D8805115DB8B709A6941CC59569A4F0B59A57414BD3B3EADA6ADBC2E27AAD99AAB7F0DF1D982D2F0D050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:74:92:9b:b0:48:4c:26:74:a7:de:1e:7c:
                    8f:ba:19:1b:6d:79:c9:6d:8d:96:46:f0:2f:8e:c4:
                    17:b4:22:eb:1a:22:37:74:13:2f:59:eb:ba:31:e1:
                    d9:62:f6:7a:76:43:8f:eb:da:73:0a:98:c9:ed:08:
                    07:1d:6f:f5:84:b7:02:96:b4:42:24:c0:74:b1:28:
                    42:08:6d:ca:37:63:41:8d:99:ad:b8:8c:03:d8:d4:
                    f7:d0:8d:bd:9d:4f:75:24:36:cb:86:be:3e:d7:49:
                    42:21:39:2b:21:a0:b1:f2:58:3a:f1:12:4b:2b:d8:
                    af:51:f2:20:ff:03:48:98:c2:0c:e0:bc:13:0d:55:
                    ed:7a:01:7d:67:cd:d1:42:02:0c:24:dc:59:24:cb:
                    a8:cb:1b:99:61:d1:0b:c7:51:4a:31:fa:cb:07:a2:
                    fe:c3:83:d2:eb:19:3d:ca:45:f2:bb:d8:af:9f:4b:
                    8c:f8:89:a5:1e:8a:35:ec:76:42:93:a0:89:ab:59:
                    75:04:98:81:ec:35:06:70:be:7e:35:9c:24:a9:be:
                    0c:2d:b9:6c:fd:3d:88:05:11:5d:b8:b7:09:a6:94:
                    1c:c5:95:69:a4:f0:b5:9a:57:41:4b:d3:b3:ea:da:
                    6a:db:c2:e2:7a:ad:99:aa:b7:f0:df:1d:98:2d:2f:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AD:2C:91:CC:37:DE:2D:F2:03:02:9E:D2:85:92:78:70:BF:4C:CD
            X509v3 Authority Key Identifier:
                keyid:4E:EC:2C:A8:96:56:09:D2:BD:3D:84:A6:EC:A8:A2:32:C3:B8:07:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3234203d3e20323639303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:06:8d:06:c6:dd:b9:a5:e7:d8:32:6a:d5:e5:3a:d1:99:
         95:c2:c1:e4:aa:40:d8:39:23:09:36:4c:77:8d:68:97:b1:4f:
         8c:a9:28:df:20:54:18:63:b2:30:7b:71:20:60:e6:a8:b9:3b:
         23:27:74:c4:d6:53:cc:91:88:cf:d9:05:4b:b3:53:8d:48:c8:
         be:cf:aa:88:d8:13:2c:c1:c2:83:2b:19:7e:70:98:4c:f1:3e:
         0e:7f:c2:2e:2e:0c:69:ce:43:64:e8:1d:22:aa:d8:d8:23:39:
         12:39:bb:47:37:7e:23:f3:44:10:73:3d:43:56:0b:de:ac:75:
         56:0e:47:95:8b:85:86:3b:72:50:1f:43:32:70:36:4c:03:aa:
         e3:b0:4d:e6:62:c5:c0:8b:4a:7c:ca:cd:db:a2:bb:43:cd:cd:
         ea:a2:10:7d:12:a8:81:7e:10:fb:20:89:84:b5:00:ff:e1:7e:
         e5:fb:09:d5:ae:e7:dc:f3:de:1d:4a:1b:30:70:ee:19:fb:fc:
         e0:d9:6f:b2:27:0b:30:49:20:8f:61:a5:f2:8b:f7:b0:cb:df:
         83:de:cd:8f:06:e7:aa:0b:83:5a:5d:fd:10:50:01:f5:5a:97:
         35:da:46:3a:f3:0d:9a:8e:c0:38:2f:4c:77:e3:ba:bf:1b:94:
         a4:5b:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org