Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e362e302f32342d3234203d3e20323638393235.roa
File:                     34352e3137362e362e302f32342d3234203d3e20323638393235.roa (raw, json)
Hash identifier:          xXa/+P7ibbftov59oi3M6iBOlyHEYip1fUxbpGb9XZ0=
Subject key identifier:   19:72:AB:B5:8B:EB:11:E5:61:6E:1E:AB:B2:01:D3:2E:02:6B:99:06
Certificate issuer:       /CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
Certificate serial:       38762119FB8FC818A2A06C3668E331E3695795EF
Authority key identifier: E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e362e302f32342d3234203d3e20323638393235.roa
Signing time:             Thu 01 Feb 2024 14:27:02 +0000
ROA not before:           Thu 01 Feb 2024 14:22:02 +0000
ROA not after:            Thu 30 Jan 2025 14:27:02 +0000
asID:                     268925
IP address blocks:        45.176.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:76:21:19:fb:8f:c8:18:a2:a0:6c:36:68:e3:31:e3:69:57:95:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
        Validity
            Not Before: Feb  1 14:22:02 2024 GMT
            Not After : Jan 30 14:27:02 2025 GMT
        Subject: CN=1972ABB58BEB11E5616E1EABB201D32E026B9906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:e7:87:fb:26:b1:8f:4d:43:a5:4a:24:d2:
                    64:5b:44:91:92:a1:98:5c:65:ee:b3:35:59:51:de:
                    c6:b6:4c:66:4d:10:99:5b:4c:18:90:2a:9b:9f:eb:
                    e4:7a:86:cd:f4:c8:ab:a6:48:4c:3c:6f:9a:51:bb:
                    df:e0:a1:b8:70:26:a7:d9:b7:ba:f8:bb:af:85:70:
                    1c:d7:f3:c1:e5:58:97:a1:00:0d:bb:eb:b1:19:67:
                    cd:47:06:c5:3e:56:94:77:37:96:69:a2:27:8d:d1:
                    fb:2a:1e:37:12:cc:3a:28:e2:7d:06:3e:94:60:4a:
                    b4:0a:90:f3:0a:51:3b:2a:58:81:64:9f:54:d9:3a:
                    9d:1f:58:ca:02:08:14:23:d7:81:2a:f3:f7:71:29:
                    a2:62:ff:e6:c5:e6:6d:c5:87:88:7a:b5:07:1d:38:
                    96:46:fa:f5:67:63:d1:34:d6:3c:e0:77:c4:26:46:
                    44:fb:40:5b:16:63:3a:3c:de:ee:69:12:d2:2a:96:
                    ab:71:59:f8:6a:89:38:b4:45:ef:dd:15:ca:c1:05:
                    a9:a4:32:5b:44:56:fe:73:e1:76:ea:f8:75:a3:50:
                    96:59:84:14:3e:b9:be:6b:df:5e:85:9d:39:73:20:
                    da:93:c0:8c:cc:37:ed:ca:d3:d4:bc:4d:b7:e5:aa:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:72:AB:B5:8B:EB:11:E5:61:6E:1E:AB:B2:01:D3:2E:02:6B:99:06
            X509v3 Authority Key Identifier:
                keyid:E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e362e302f32342d3234203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:ec:90:92:8b:75:33:56:b3:5d:38:0b:5c:0f:32:eb:2a:ab:
         12:18:81:9c:be:82:d5:7e:3c:4e:6b:af:a4:ae:a1:ab:5e:b3:
         a7:34:31:77:65:76:4e:11:f9:c6:c2:97:f9:3a:fb:c6:65:49:
         1c:eb:89:72:e6:0f:7e:48:4c:6b:34:b4:46:ed:3e:9a:3e:3e:
         3f:49:ce:06:0b:74:de:1a:b1:1a:6a:48:f9:ad:fe:3a:4f:b7:
         6c:5a:a6:78:4b:d8:99:b6:5e:af:dc:28:0e:0d:41:35:8c:9a:
         18:f4:f9:7b:30:a7:10:bc:d4:62:7c:6d:25:e3:23:48:ef:eb:
         ed:6f:53:71:25:42:bb:0b:8c:75:e0:88:b0:91:ae:57:c4:be:
         02:32:26:02:98:c6:79:ee:3f:43:67:2c:18:a3:dd:b8:19:f1:
         c9:4d:8c:df:f0:63:91:f3:bd:31:55:3a:df:61:47:7a:a3:fa:
         a7:ce:c1:21:2e:44:a2:fe:45:03:3a:1a:b2:27:c1:05:d8:7d:
         6b:bc:29:2e:cf:a7:6e:76:9a:a4:d1:31:a1:f4:b2:76:00:00:
         9c:44:51:72:61:a1:cf:c8:72:76:2a:40:f1:6d:fc:b8:34:6e:
         80:10:b1:e3:8b:85:73:7e:7e:cf:58:63:be:d8:01:38:0d:35:
         87:23:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org