Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa
File:                     34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa (raw, json)
Hash identifier:          13UEiwBylqADA3RquCJHuR34N7dASg2Jhdvl1wqMTvQ=
Subject key identifier:   99:9F:26:44:0A:8C:8A:6B:04:44:06:FB:CC:09:9D:8F:E7:AE:4C:8D
Certificate issuer:       /CN=715D32717252B9A5CD6DCE2AFC78FA3A3E0E944C
Certificate serial:       7433EAA2CB65D336DFDDDB171AF60A82735CF1BA
Authority key identifier: 71:5D:32:71:72:52:B9:A5:CD:6D:CE:2A:FC:78:FA:3A:3E:0E:94:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/715D32717252B9A5CD6DCE2AFC78FA3A3E0E944C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa
Signing time:             Wed 28 Feb 2024 17:54:33 +0000
ROA not before:           Wed 28 Feb 2024 17:49:33 +0000
ROA not after:            Wed 26 Feb 2025 17:54:33 +0000
asID:                     268787
IP address blocks:        45.172.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:33:ea:a2:cb:65:d3:36:df:dd:db:17:1a:f6:0a:82:73:5c:f1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715D32717252B9A5CD6DCE2AFC78FA3A3E0E944C
        Validity
            Not Before: Feb 28 17:49:33 2024 GMT
            Not After : Feb 26 17:54:33 2025 GMT
        Subject: CN=999F26440A8C8A6B044406FBCC099D8FE7AE4C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:b9:1e:9c:a1:69:f4:e0:f9:4f:e2:af:9b:
                    34:15:e1:ee:33:49:b1:d7:bb:17:4a:4f:fc:06:18:
                    e0:e2:26:8f:e8:31:80:8e:9d:09:8d:20:8f:78:4b:
                    e2:af:05:23:aa:6b:70:ed:56:2a:25:88:eb:62:31:
                    c3:ba:f2:48:bd:b2:d6:7e:33:5d:ec:b3:26:7e:eb:
                    29:34:0c:b9:e7:fe:e8:6b:df:72:e7:4d:aa:d8:3c:
                    4c:d4:91:0b:02:8e:56:77:bd:c9:9c:48:63:f4:ec:
                    bf:db:de:63:97:ed:15:5a:85:c5:b7:f1:21:81:fc:
                    c2:93:62:49:9d:c0:58:79:53:45:04:42:d9:2b:90:
                    17:79:23:90:8d:8c:77:8d:0c:52:71:50:1d:35:9e:
                    a3:04:58:af:a3:99:82:36:f8:87:f2:28:d6:e8:0d:
                    35:e4:cf:51:ad:02:8d:ef:b6:53:42:cd:ea:c6:d2:
                    50:6b:1d:57:a5:ab:4c:3a:5a:ff:4e:5e:f3:74:88:
                    b3:44:40:4b:8c:27:4e:05:a6:e9:4a:53:f8:9c:db:
                    1f:a1:b6:f1:ea:0f:99:0f:7a:a3:dc:80:f3:2e:20:
                    76:52:9f:9d:b8:1b:bc:54:72:98:a1:69:40:c7:44:
                    c2:d7:49:db:92:a8:45:5a:75:b9:f8:e8:db:84:22:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:26:44:0A:8C:8A:6B:04:44:06:FB:CC:09:9D:8F:E7:AE:4C:8D
            X509v3 Authority Key Identifier:
                keyid:71:5D:32:71:72:52:B9:A5:CD:6D:CE:2A:FC:78:FA:3A:3E:0E:94:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/715D32717252B9A5CD6DCE2AFC78FA3A3E0E944C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/715D32717252B9A5CD6DCE2AFC78FA3A3E0E944C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230342e302f32322d3234203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c7:e8:d2:3e:29:69:ef:79:0b:a1:fa:a6:44:3b:f3:cf:ea:
         f7:7d:91:3f:e8:a3:24:0b:be:32:81:ec:bf:de:ac:53:b7:0a:
         b9:a7:ea:c4:fb:f9:33:ca:0c:2f:1a:88:87:c3:b0:6c:15:e8:
         59:bc:22:e3:70:cc:b1:a3:20:3f:c9:71:89:5f:53:38:1f:c5:
         49:52:51:be:83:1c:76:ba:de:f6:da:ae:01:ce:34:a1:52:92:
         df:d5:9b:b6:f7:5f:21:f0:d8:a7:b6:81:d5:90:78:d7:25:80:
         84:92:b6:17:b8:94:a6:6b:16:d2:62:5d:12:6c:24:2b:75:cb:
         fd:5a:2f:86:df:ea:8e:24:02:dd:82:20:8a:a7:62:07:d0:e9:
         55:88:57:fa:6e:60:ca:10:b3:42:f7:47:41:61:be:80:df:a3:
         d5:3e:c1:b7:df:8a:c7:0c:a8:a0:c4:86:d0:d2:0b:b9:91:9f:
         3e:fe:49:5f:85:94:73:3e:d3:d4:d1:ab:01:8d:69:70:02:c9:
         40:c1:25:d7:e6:ea:e3:69:08:55:1f:5a:38:c9:aa:4c:c6:aa:
         d8:cd:5b:71:77:eb:ce:00:4e:64:76:f8:a4:2b:60:f9:1b:0f:
         4b:0a:df:45:c6:3f:3f:fd:dd:a1:47:81:5f:dd:60:dd:24:5d:
         fb:e8:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org