Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32342d3234203d3e20323636303736.roa
File:                     34352e342e3234302e302f32342d3234203d3e20323636303736.roa (raw, json)
Hash identifier:          LAg8dATnu1SXFS7SVauNtmCPaC6AL97yaUqyDqEF8xo=
Subject key identifier:   9D:AB:FB:97:0F:C3:DF:BA:FA:FE:08:60:A2:C8:36:EB:E0:BF:90:B5
Certificate issuer:       /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial:       7BCE832E12722FB9D509BD3E04C6438B47AE3BD2
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32342d3234203d3e20323636303736.roa
Signing time:             Mon 03 Apr 2023 18:50:36 +0000
ROA not before:           Mon 03 Apr 2023 18:45:36 +0000
ROA not after:            Mon 01 Apr 2024 18:50:36 +0000
asID:                     266076
IP address blocks:        45.4.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ce:83:2e:12:72:2f:b9:d5:09:bd:3e:04:c6:43:8b:47:ae:3b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
        Validity
            Not Before: Apr  3 18:45:36 2023 GMT
            Not After : Apr  1 18:50:36 2024 GMT
        Subject: CN=9DABFB970FC3DFBAFAFE0860A2C836EBE0BF90B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:fa:cb:66:00:0d:42:c9:a5:8a:46:63:db:
                    6f:17:8c:ed:db:bf:33:af:48:92:e4:a6:cf:9a:64:
                    3a:18:a5:a2:d9:15:43:f7:e9:0d:13:92:1a:03:5c:
                    ab:6c:df:8a:fa:de:85:20:2d:9a:91:05:1b:a7:6e:
                    93:52:cb:9a:3a:64:e6:26:ea:62:4d:0a:fc:76:db:
                    23:86:43:58:86:4d:1f:cc:f6:11:46:45:4e:6c:6a:
                    a3:96:60:26:79:28:17:c0:93:13:4d:ea:31:99:b5:
                    87:67:27:c0:29:af:3d:6e:bb:ba:f2:13:9f:da:94:
                    4f:5f:80:7f:44:65:72:d1:fa:d7:96:b1:23:81:32:
                    9e:cc:f9:9c:94:2c:f0:c6:d1:21:bc:c4:a3:06:53:
                    6a:a5:a2:2b:ae:e5:89:4b:d7:f0:cf:ae:b3:b6:7d:
                    92:75:93:46:16:56:8a:fa:65:83:5b:15:bb:7a:ff:
                    e5:c2:9a:02:37:da:64:1a:6b:e2:f3:06:e0:6c:05:
                    45:a4:00:4e:4d:78:01:6f:03:00:25:96:d6:40:a9:
                    9d:40:c9:b5:ab:d8:9a:d6:50:55:81:cd:46:61:9d:
                    b4:12:ba:0d:b1:8e:b7:1f:41:4c:6d:cc:97:b5:ac:
                    42:6f:dc:1b:bb:52:a1:99:35:9c:57:2a:42:f7:a1:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AB:FB:97:0F:C3:DF:BA:FA:FE:08:60:A2:C8:36:EB:E0:BF:90:B5
            X509v3 Authority Key Identifier:
                keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32342d3234203d3e20323636303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:18:34:af:dd:26:a4:1f:3e:1c:57:33:28:f5:de:35:39:67:
         74:6d:12:26:7c:fe:dd:6a:13:02:76:1d:14:3d:93:7c:01:53:
         a3:83:54:c6:9d:07:ae:af:46:cb:c0:54:a1:d6:ee:6e:39:6c:
         a2:e8:83:8b:38:c3:ec:d4:ec:aa:7f:34:37:48:9d:4c:1a:09:
         bd:db:ee:f7:3c:dd:1c:50:d2:a4:20:0d:a2:a5:29:4e:c6:ca:
         7d:b0:2e:3d:ad:79:2a:27:70:db:1a:28:8d:1f:48:b5:5a:c3:
         02:49:29:32:42:80:0d:0d:36:b5:be:e9:55:13:f5:14:ad:d4:
         75:0f:bd:4f:76:b1:83:a1:26:e2:70:b7:f6:b4:49:35:42:b9:
         ae:fd:a3:4d:f5:46:c7:8f:26:41:66:7c:f1:b8:69:1a:18:b3:
         9d:29:ac:b1:be:00:f4:3c:af:fc:41:93:a5:10:83:f3:55:ab:
         36:fa:54:95:83:1c:0b:56:63:4e:5e:9b:a8:99:2a:02:a1:6a:
         be:e7:ac:02:75:96:89:f5:21:55:ac:b4:2f:3c:f0:de:f0:02:
         f8:27:db:d2:94:e7:c1:8a:12:fd:74:7b:08:1a:68:d1:89:09:
         bf:1f:88:9b:47:fc:6b:cd:36:f1:7b:3d:ca:67:1e:a3:a5:cc:
         4c:69:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org