Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa
File:                     34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa (raw, json)
Hash identifier:          I8iCQhgTOB4o0KXuuGuEzlU4Sub8+b3W82vcAwrhLDY=
Subject key identifier:   E6:8B:F2:F2:5C:5F:C0:6A:4D:1B:9A:41:E1:89:30:39:A4:ED:F1:22
Certificate issuer:       /CN=7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29
Certificate serial:       3C4818526A39A1981F7405DBD2C56EF8D073C92F
Authority key identifier: 7E:ED:A2:F6:FE:8D:4F:BB:2F:D1:E1:F0:A8:0A:6C:B5:09:56:AB:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa
Signing time:             Fri 26 Jan 2024 21:42:18 +0000
ROA not before:           Fri 26 Jan 2024 21:37:18 +0000
ROA not after:            Fri 24 Jan 2025 21:42:18 +0000
asID:                     267670
IP address blocks:        45.224.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:48:18:52:6a:39:a1:98:1f:74:05:db:d2:c5:6e:f8:d0:73:c9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29
        Validity
            Not Before: Jan 26 21:37:18 2024 GMT
            Not After : Jan 24 21:42:18 2025 GMT
        Subject: CN=E68BF2F25C5FC06A4D1B9A41E1893039A4EDF122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:39:a7:ca:f2:0b:d5:4b:a5:46:e8:5e:a8:
                    0d:98:84:3a:8a:22:56:b9:4f:ea:2e:32:54:0c:6e:
                    fa:42:0e:b7:3f:6b:4d:d0:2c:5d:27:54:18:ec:e6:
                    34:0c:f1:13:ff:58:e4:ae:e1:34:dc:cf:dc:7b:da:
                    9f:95:5e:87:14:07:3c:09:1e:34:aa:38:41:da:b3:
                    67:d5:8e:b3:cd:5f:0f:e1:2b:93:f3:3a:65:0d:37:
                    62:7d:6e:0a:c5:84:6d:b6:ef:ce:f8:92:29:c8:27:
                    a0:dd:a3:5b:b1:95:cb:03:5e:3c:81:4e:27:9d:9f:
                    0c:19:2d:8e:34:f1:c2:3c:7d:6a:c8:7f:87:ba:c5:
                    1d:99:5f:a9:04:1d:08:eb:ba:f0:dc:cb:8d:b8:38:
                    a2:4f:a6:75:b6:89:19:b0:14:3f:84:18:a3:6e:5d:
                    46:4b:8a:6f:f0:08:07:9d:5f:e0:bf:a9:58:73:b0:
                    d1:7b:1f:f1:72:4f:4b:3f:8e:21:bd:58:27:f8:4e:
                    e9:2a:25:29:d2:2a:ae:94:f9:03:69:05:e3:0d:c0:
                    7e:60:c7:79:12:8c:3d:23:0c:f0:37:0a:26:58:19:
                    12:b9:7e:0b:04:65:79:f5:9c:94:17:a1:9b:8d:8c:
                    ed:42:98:4c:93:fe:c8:c8:06:c4:3e:7e:c4:e9:da:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8B:F2:F2:5C:5F:C0:6A:4D:1B:9A:41:E1:89:30:39:A4:ED:F1:22
            X509v3 Authority Key Identifier:
                keyid:7E:ED:A2:F6:FE:8D:4F:BB:2F:D1:E1:F0:A8:0A:6C:B5:09:56:AB:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EEDA2F6FE8D4FBB2FD1E1F0A80A6CB50956AB29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/0/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:c0:c0:d1:23:ac:fa:1a:18:8c:d4:57:0b:21:83:ec:f7:
         39:77:f1:dc:93:ee:51:50:a5:22:24:34:e9:53:98:4f:ee:30:
         c2:73:26:56:41:f6:98:3a:57:7f:94:1a:9b:6a:02:fe:ec:ab:
         c0:4f:91:17:bd:8d:45:e9:ef:6d:b7:65:b2:89:62:72:d8:ee:
         7a:e5:a1:4c:e4:f2:ac:ef:9c:79:14:22:63:1c:71:35:ec:ee:
         70:95:86:f3:9c:3b:fa:95:ef:41:a6:13:14:44:58:74:a9:e2:
         e2:0c:e6:c1:50:9d:a5:29:a2:11:3d:9e:d3:df:6c:bc:29:c1:
         3c:49:f0:cc:7c:2e:1e:9d:e7:5a:bd:dc:e7:f2:65:83:b8:03:
         9a:82:ca:a6:3f:a7:30:9b:fb:92:b3:35:82:ee:4e:d5:be:61:
         df:b4:c3:1e:72:bc:02:71:e9:25:11:ee:22:a2:4e:99:6e:99:
         e8:1b:e7:45:26:55:dd:e2:2e:c8:00:3c:c7:cc:e5:de:92:6c:
         15:a0:51:65:a9:e4:17:b8:6a:c5:2c:d8:ef:38:df:36:f4:82:
         84:f4:16:fa:db:15:e5:b9:ae:7c:11:33:6c:e0:4a:96:00:9b:
         50:a8:9b:1b:93:0f:ea:24:f4:56:86:b5:41:51:8a:32:fd:84:
         be:4d:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org