Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/34352e3232342e3138372e302f32342d3234203d3e20323637363730.roa
File:                     34352e3232342e3138372e302f32342d3234203d3e20323637363730.roa (raw, json)
Hash identifier:          9TGOa1v/i88jVs1cH/RAF0xZaYQr72SAWz8w8lgJ4mI=
Subject key identifier:   73:A6:3E:3E:D2:C0:62:D3:46:F0:20:7D:5D:A5:7A:77:24:7F:10:19
Certificate issuer:       /CN=7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29
Certificate serial:       3B0F18F4B4DE989399CD6280F488ECBCC0E0C388
Authority key identifier: 7E:ED:A2:F6:FE:8D:4F:BB:2F:D1:E1:F0:A8:0A:6C:B5:09:56:AB:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/34352e3232342e3138372e302f32342d3234203d3e20323637363730.roa
Signing time:             Fri 26 Jan 2024 21:42:15 +0000
ROA not before:           Fri 26 Jan 2024 21:37:15 +0000
ROA not after:            Fri 24 Jan 2025 21:42:15 +0000
asID:                     267670
IP address blocks:        45.224.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0f:18:f4:b4:de:98:93:99:cd:62:80:f4:88:ec:bc:c0:e0:c3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29
        Validity
            Not Before: Jan 26 21:37:15 2024 GMT
            Not After : Jan 24 21:42:15 2025 GMT
        Subject: CN=73A63E3ED2C062D346F0207D5DA57A77247F1019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:f4:b2:42:25:ca:81:0e:c6:e5:f3:36:a6:
                    25:0f:4c:53:c0:f9:45:ff:24:2c:d4:06:80:19:c0:
                    75:b7:1a:f1:44:e5:51:72:f3:a9:69:13:1e:11:b1:
                    45:3f:32:73:c1:38:c9:42:01:f5:36:68:4b:dd:b5:
                    f7:95:bb:cb:d2:11:9d:65:68:cf:8a:b9:b3:59:38:
                    13:c8:70:32:21:6d:21:19:87:82:c0:07:9e:17:92:
                    88:50:e7:66:b7:f7:01:0f:2a:ad:68:2d:5a:ea:8c:
                    74:5b:03:55:48:b4:5d:e9:6a:41:87:9b:d0:24:06:
                    be:89:bb:45:f6:1c:32:a4:10:ff:ea:0b:b0:f9:e7:
                    42:f6:14:ef:65:2d:c1:28:b6:a9:6c:11:7e:35:f6:
                    02:52:7f:78:f6:47:56:af:78:f5:34:25:c6:bb:63:
                    44:b4:42:2a:b3:97:0b:48:70:af:59:98:49:32:29:
                    10:c8:3a:de:e2:f4:27:f2:4b:3d:36:65:cd:33:11:
                    c1:31:a6:e0:f5:03:e6:1b:b7:04:29:63:62:ae:a1:
                    d0:01:6c:ae:9d:2b:f1:a4:60:7c:90:85:91:d4:7e:
                    58:64:1b:93:f5:8d:77:51:d1:1a:42:98:0d:a0:1e:
                    1d:d1:b0:72:ce:b2:a7:b4:de:b6:55:f9:44:77:d6:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A6:3E:3E:D2:C0:62:D3:46:F0:20:7D:5D:A5:7A:77:24:7F:10:19
            X509v3 Authority Key Identifier:
                keyid:7E:ED:A2:F6:FE:8D:4F:BB:2F:D1:E1:F0:A8:0A:6C:B5:09:56:AB:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/34352e3232342e3138372e302f32342d3234203d3e20323637363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:6c:ad:de:6a:73:5c:27:bc:7c:0c:d2:ba:98:6b:6f:bb:d6:
         49:fb:c0:67:59:37:a0:21:d4:ea:8c:7c:62:61:cb:25:8a:4a:
         59:27:69:bd:97:6e:21:50:c5:34:fd:ec:5b:40:f4:78:c4:a3:
         dc:d2:07:1a:04:2f:be:08:0e:07:ef:78:fd:60:ca:78:62:fc:
         55:4a:ef:23:f1:15:c9:c3:9d:f8:8a:a9:37:f7:40:03:f6:d7:
         dd:96:de:b6:30:ef:de:a0:b2:96:3e:5f:61:72:01:7f:8a:e4:
         a5:db:a5:de:21:66:3d:11:0c:db:14:39:10:4b:7a:7b:40:50:
         6e:04:7b:34:df:ab:4b:c2:58:8f:f9:38:77:d9:13:63:5a:8b:
         31:51:ae:8d:7e:bd:b9:5d:7e:b1:49:b4:98:3a:f4:f4:e1:d7:
         af:8b:11:42:1e:28:29:f6:ea:41:4e:b8:9f:cf:79:bc:71:2b:
         02:bc:c7:ca:a2:e3:77:6d:31:43:fb:14:74:90:7c:8d:62:9b:
         d8:94:c1:58:7a:9a:b1:60:c6:a1:6a:81:38:11:24:94:e0:ec:
         d5:a1:c3:24:b4:3e:31:98:7c:26:6b:9a:49:10:4e:83:57:f9:
         ec:a8:dc:ba:b4:25:41:66:10:77:3f:63:54:ac:29:28:90:75:
         c4:13:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org