Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/1/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa
File:                     34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa (raw, json)
Hash identifier:          kuFXiD05lnDIErKi5ZiYsPQhmFx0HYFQNyJKkzfw/i8=
Subject key identifier:   8F:8D:44:50:2D:C8:AF:47:A1:CA:2B:DB:14:78:05:DD:F1:93:7C:10
Certificate issuer:       /CN=7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96
Certificate serial:       1D093B736618299EC4EFF19F6ECBA54676B5F2C5
Authority key identifier: 7B:A0:1F:BB:A6:AD:0B:EA:E3:37:4B:8C:E7:05:99:32:E3:14:AB:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/1/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa
Signing time:             Thu 04 Apr 2024 08:09:05 +0000
ROA not before:           Thu 04 Apr 2024 08:04:05 +0000
ROA not after:            Thu 03 Apr 2025 08:09:05 +0000
asID:                     268763
IP address blocks:        45.172.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:3b:73:66:18:29:9e:c4:ef:f1:9f:6e:cb:a5:46:76:b5:f2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96
        Validity
            Not Before: Apr  4 08:04:05 2024 GMT
            Not After : Apr  3 08:09:05 2025 GMT
        Subject: CN=8F8D44502DC8AF47A1CA2BDB147805DDF1937C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:a6:d9:41:bf:90:54:a7:72:f2:f0:ab:56:
                    6c:d4:73:6b:92:27:90:d8:0a:32:bc:48:fe:12:7a:
                    44:f6:ef:f1:76:6b:f3:d1:97:23:f9:ce:04:5d:c8:
                    7c:f0:01:bd:db:83:40:61:ad:60:ff:16:12:e0:11:
                    b9:f3:86:f4:28:88:d8:ff:fa:19:19:f4:5a:75:d0:
                    01:69:e3:47:7f:12:69:69:37:70:06:34:a8:f8:e5:
                    b9:d7:05:9e:92:ff:97:06:aa:d5:ba:f8:e6:9c:14:
                    38:a3:bb:52:d0:e9:b7:95:d6:6b:3e:7e:8a:9d:d5:
                    00:99:d5:11:30:6f:89:a3:21:4d:a3:fb:78:37:b2:
                    da:f0:d6:7a:19:e5:57:d9:a5:8e:5b:4f:f3:37:d4:
                    41:5b:06:c5:d4:f6:85:cc:9f:4d:dd:d1:80:f6:83:
                    ee:ff:e2:bf:82:73:b3:76:8b:5d:1a:dd:b2:ef:47:
                    8d:7b:54:6a:6f:14:b7:dd:1b:21:d5:26:ae:ce:af:
                    18:65:0e:af:13:24:29:b3:1b:72:13:95:31:d6:e8:
                    27:00:47:25:0d:60:cd:89:c5:c7:a0:43:00:98:c7:
                    9e:f8:f5:c8:39:b4:3c:e9:e8:0c:f1:79:70:c7:9a:
                    0a:a0:a1:50:88:31:93:b6:cf:2f:4a:21:cc:48:98:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:44:50:2D:C8:AF:47:A1:CA:2B:DB:14:78:05:DD:F1:93:7C:10
            X509v3 Authority Key Identifier:
                keyid:7B:A0:1F:BB:A6:AD:0B:EA:E3:37:4B:8C:E7:05:99:32:E3:14:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/1/7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BA01FBBA6AD0BEAE3374B8CE7059932E314AB96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/1/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:4a:eb:ef:d7:c3:82:0c:2f:e4:b8:00:b5:46:0b:be:e3:
         40:a3:3d:cf:ae:c6:b5:0a:e9:72:48:a8:58:ac:cd:d2:b2:4c:
         62:da:ed:3f:62:05:c1:05:5b:f9:f8:5d:10:32:98:97:c5:3d:
         64:cf:9f:70:4a:0d:2a:92:48:c5:2d:86:c3:50:db:a2:a6:83:
         a4:3e:10:ec:1e:2e:0c:69:75:ee:8f:c3:97:b5:33:8e:de:76:
         d4:19:eb:e4:e4:20:1e:e7:0f:95:00:73:05:32:f3:d5:63:3f:
         cb:0a:c8:2b:ff:58:5a:51:52:06:0c:7f:a3:9e:5c:e0:10:96:
         aa:6b:26:5f:b2:9a:98:ec:53:67:c8:85:30:33:b0:34:9b:4b:
         65:84:1f:24:e2:93:0d:3a:52:53:38:98:45:7a:ed:43:f3:56:
         b9:6d:6f:90:e8:fa:d5:09:15:90:20:3e:63:d8:66:c1:8a:9b:
         ae:65:63:4a:1b:12:ec:37:0e:6c:20:8f:22:f1:86:1c:05:e3:
         0e:f3:b2:b0:fa:08:ff:e3:44:b2:c4:6f:a9:17:7c:bb:52:1d:
         f4:5d:ec:2c:fa:04:bb:bb:45:e4:59:dc:b1:17:7b:f9:a1:e3:
         95:7d:35:72:5f:46:5e:b3:dc:5b:72:f2:59:1f:7e:7c:31:bf:
         59:bc:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org