Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/34352e3138312e372e302f32342d3234203d3e20323639323136.roa
File:                     34352e3138312e372e302f32342d3234203d3e20323639323136.roa (raw, json)
Hash identifier:          6mbX3szooTQck8cncZDf4yd2ZtlhhAopy/9myjtHmPs=
Subject key identifier:   F1:2D:27:8F:4C:43:20:4E:5C:FB:60:A9:49:34:CD:A9:00:52:35:69
Certificate issuer:       /CN=CBBBC79B07882F9E7450A29909CCEB031ABB96D2
Certificate serial:       356075CDEC09923C22E8703E8AD59A59A837E139
Authority key identifier: CB:BB:C7:9B:07:88:2F:9E:74:50:A2:99:09:CC:EB:03:1A:BB:96:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/34352e3138312e372e302f32342d3234203d3e20323639323136.roa
Signing time:             Wed 28 Feb 2024 13:20:52 +0000
ROA not before:           Wed 28 Feb 2024 13:15:52 +0000
ROA not after:            Wed 26 Feb 2025 13:20:52 +0000
asID:                     269216
IP address blocks:        45.181.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:60:75:cd:ec:09:92:3c:22:e8:70:3e:8a:d5:9a:59:a8:37:e1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBBBC79B07882F9E7450A29909CCEB031ABB96D2
        Validity
            Not Before: Feb 28 13:15:52 2024 GMT
            Not After : Feb 26 13:20:52 2025 GMT
        Subject: CN=F12D278F4C43204E5CFB60A94934CDA900523569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:b5:9a:96:18:b8:fa:83:78:09:ad:f6:d2:
                    22:c6:a2:72:0c:f0:8c:4e:59:e6:73:28:ac:48:88:
                    94:aa:07:20:37:cb:46:9a:15:f3:9b:21:2b:a4:39:
                    3d:86:ab:70:73:1d:cb:5f:a7:2c:61:ee:4b:b2:86:
                    0a:19:86:80:b2:fb:86:2e:8f:4d:3e:00:45:9d:ee:
                    9e:55:b8:fe:c4:28:fe:ff:6f:a9:86:91:73:89:ac:
                    f8:0f:84:76:cb:fb:79:76:ca:35:fd:de:af:44:f4:
                    75:47:2b:bd:27:72:c6:d4:63:c4:81:17:32:b4:78:
                    de:bc:db:13:62:11:44:87:cc:e1:89:b7:d1:63:99:
                    23:c8:95:64:c3:d3:ae:ba:1d:c3:d8:2f:e3:87:c9:
                    aa:f5:37:44:b1:de:37:29:cb:f9:9a:3f:41:7d:d5:
                    f3:48:56:0d:7d:dc:26:6b:f1:fd:64:67:41:38:ac:
                    ed:56:19:f6:a8:99:4e:86:bd:c4:95:af:24:44:31:
                    7f:23:a9:79:65:74:7c:e8:b0:97:af:86:36:0d:32:
                    3f:78:94:59:09:12:ce:48:4d:c0:f3:83:2a:69:ea:
                    14:b5:f9:bb:7b:89:d5:03:32:4e:74:7c:4b:8b:0b:
                    8c:29:08:a5:97:18:fd:94:40:1c:ca:0f:d7:11:13:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2D:27:8F:4C:43:20:4E:5C:FB:60:A9:49:34:CD:A9:00:52:35:69
            X509v3 Authority Key Identifier:
                keyid:CB:BB:C7:9B:07:88:2F:9E:74:50:A2:99:09:CC:EB:03:1A:BB:96:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/34352e3138312e372e302f32342d3234203d3e20323639323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:83:1a:30:d7:60:60:86:13:84:e7:21:c7:70:6c:d8:3d:
         f4:68:12:bd:96:0b:df:8f:1c:0f:ff:a3:ef:85:fd:16:f1:c7:
         40:22:ac:a2:89:0e:4e:bc:03:67:a1:ac:af:09:d4:68:c5:d3:
         b1:52:0b:75:b5:f6:e7:c3:5e:f7:71:21:73:78:d9:5c:66:69:
         e8:d8:cf:44:94:21:13:8d:8b:8f:78:0e:b8:0d:f3:36:6f:5b:
         dd:72:65:29:59:d6:8c:7d:b6:e9:c7:74:88:94:cc:98:30:ce:
         08:ee:e1:fb:35:35:7b:63:17:8a:5d:a1:e2:a8:bb:41:83:61:
         60:89:ff:f4:f9:2e:f9:85:83:29:68:08:07:ea:e4:59:a6:6f:
         f7:e6:18:12:e5:60:dd:c5:b1:0a:8c:6a:08:63:ef:10:40:0f:
         7c:32:49:02:a8:71:5e:1c:c0:01:6c:5a:38:3b:d8:38:e5:ee:
         1e:6d:b6:e4:67:93:d8:9c:48:36:84:5d:61:d0:19:19:f9:ab:
         a1:4a:7f:73:56:3c:7f:4a:2d:e4:d6:80:36:00:04:aa:34:28:
         e0:c1:ca:b9:8a:ab:78:6f:6f:e6:9d:9d:28:7f:3b:83:10:96:
         37:2c:d4:8e:fc:86:ca:e2:a2:a4:6f:fe:a7:4e:0c:20:fb:c8:
         47:11:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org