Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/34352e3136332e33322e302f32322d3234203d3e20323638353934.roa
File:                     34352e3136332e33322e302f32322d3234203d3e20323638353934.roa (raw, json)
Hash identifier:          Wp+gp9SDpbGDUGBhE20Q8KWf/D/32rWCF3dxXokt2Gs=
Subject key identifier:   6B:EF:ED:93:B4:11:22:21:39:FC:FF:71:F0:3D:D6:23:62:BC:B2:D2
Certificate issuer:       /CN=EFD87B61404E88F8122A7006405D792CBF3DB6BE
Certificate serial:       206A715CEACFC2994F8D5DBD2EDCC82812DB93D9
Authority key identifier: EF:D8:7B:61:40:4E:88:F8:12:2A:70:06:40:5D:79:2C:BF:3D:B6:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/34352e3136332e33322e302f32322d3234203d3e20323638353934.roa
Signing time:             Wed 03 Apr 2024 20:21:50 +0000
ROA not before:           Wed 03 Apr 2024 20:16:50 +0000
ROA not after:            Wed 02 Apr 2025 20:21:50 +0000
asID:                     268594
IP address blocks:        45.163.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6a:71:5c:ea:cf:c2:99:4f:8d:5d:bd:2e:dc:c8:28:12:db:93:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD87B61404E88F8122A7006405D792CBF3DB6BE
        Validity
            Not Before: Apr  3 20:16:50 2024 GMT
            Not After : Apr  2 20:21:50 2025 GMT
        Subject: CN=6BEFED93B411222139FCFF71F03DD62362BCB2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:48:20:50:db:4f:41:22:f6:a6:30:57:9b:
                    8d:23:a1:ed:3c:de:1b:9c:b0:25:25:a7:89:0e:d5:
                    cb:16:b5:a3:cc:ef:ee:6a:8e:1f:e7:0c:79:e9:1e:
                    d7:5d:0e:e0:31:e7:66:16:3b:16:42:86:c3:fd:1c:
                    0a:cb:fa:aa:11:42:36:a9:46:6b:9b:57:d3:f1:e1:
                    17:76:a2:ae:3a:9c:2f:fa:e0:3f:3a:fd:3d:ab:db:
                    f0:2a:28:fc:94:a3:51:18:6a:3a:a1:6f:d3:c9:be:
                    07:41:70:58:d9:99:c9:9c:be:30:92:eb:e7:c3:68:
                    38:e4:cf:73:4f:1a:e9:ca:23:a3:b9:29:b2:9b:4f:
                    0f:a8:49:4e:42:b1:57:23:2c:d8:7c:de:03:c6:5a:
                    aa:a6:49:10:96:23:34:93:e2:35:b1:f8:81:58:dd:
                    9d:8e:99:87:c0:48:8d:d0:3b:02:28:cb:d5:ca:2a:
                    7f:3e:9a:94:8f:c5:61:5c:a1:27:a3:36:31:76:b6:
                    b8:07:ff:bd:ba:ae:ba:10:e9:ed:bd:11:f8:12:c0:
                    51:aa:a3:e6:6e:39:c1:d8:c9:7e:be:cd:e2:be:a0:
                    60:c4:65:f7:60:da:c4:26:00:af:55:75:08:c5:ee:
                    a7:a6:df:13:98:83:67:ac:32:2b:da:8e:76:d9:32:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EF:ED:93:B4:11:22:21:39:FC:FF:71:F0:3D:D6:23:62:BC:B2:D2
            X509v3 Authority Key Identifier:
                keyid:EF:D8:7B:61:40:4E:88:F8:12:2A:70:06:40:5D:79:2C:BF:3D:B6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/34352e3136332e33322e302f32322d3234203d3e20323638353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:f2:78:ae:3f:60:95:8b:62:97:b7:44:8f:d4:84:da:c8:
         ef:88:a3:d7:07:8c:e6:ec:08:15:e8:b3:9f:f4:57:01:3f:a7:
         6e:99:9b:00:24:67:57:88:b6:61:e0:4f:24:dd:49:b1:ff:31:
         2d:81:67:16:dc:05:f8:18:76:75:cc:04:d9:b0:fe:83:36:1a:
         dd:cd:c6:95:b2:62:f1:38:45:c8:bb:ba:2f:04:3d:b5:39:37:
         58:b4:bf:4d:a2:b8:e2:86:45:be:f2:76:0d:d5:db:f9:60:97:
         c6:df:44:f3:33:e2:11:de:6d:b0:cd:94:22:2d:fc:c0:ae:b5:
         51:74:b5:40:ef:aa:80:c9:c2:f9:b6:ec:89:0e:48:7b:07:e4:
         a4:f8:40:ef:7b:a4:80:11:ef:f7:ee:85:69:d2:bf:7e:26:3a:
         7a:f6:0b:00:63:50:0f:80:8f:ed:77:e4:07:68:53:1e:15:ff:
         52:bc:1e:f4:63:3c:6f:78:51:9f:53:73:60:63:87:d5:44:95:
         e5:de:2b:be:af:17:b6:bf:63:6f:7a:fd:2f:c8:82:c5:1d:7d:
         47:58:6f:da:b3:51:84:07:47:98:d2:47:c7:cc:fc:96:8c:88:
         7f:bd:ba:27:78:c4:70:dd:2e:db:79:41:ca:73:21:ab:1b:a1:
         b9:42:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 06:07:24 2024 by rpki-client on console-fra.rpki-client.org