Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34332e302f32342d3234203d3e20323636303534.roa
File:                     34352e342e34332e302f32342d3234203d3e20323636303534.roa (raw, json)
Hash identifier:          0FlHpKy7QIH1HLhpSI6DolvOh+wWLz3+5qtzjGkPCcM=
Subject key identifier:   50:7B:06:9B:87:7F:7E:35:7A:99:4F:F4:3F:DA:E1:7B:EB:4F:1E:4E
Certificate issuer:       /CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
Certificate serial:       3F7A57DBB31446D588B0E9E466F9B62573805FCD
Authority key identifier: EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34332e302f32342d3234203d3e20323636303534.roa
Signing time:             Thu 15 Feb 2024 14:56:49 +0000
ROA not before:           Thu 15 Feb 2024 14:51:49 +0000
ROA not after:            Thu 13 Feb 2025 14:56:49 +0000
asID:                     266054
IP address blocks:        45.4.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7a:57:db:b3:14:46:d5:88:b0:e9:e4:66:f9:b6:25:73:80:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
        Validity
            Not Before: Feb 15 14:51:49 2024 GMT
            Not After : Feb 13 14:56:49 2025 GMT
        Subject: CN=507B069B877F7E357A994FF43FDAE17BEB4F1E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:3a:dc:0f:64:82:e9:1d:39:f4:06:7f:03:
                    69:b5:42:68:56:22:52:9f:3e:e5:fb:3c:ea:ac:15:
                    8d:3a:3a:4e:68:ca:30:72:5d:32:87:8e:ab:98:c7:
                    1e:5f:34:8b:8d:04:9d:29:1e:aa:35:68:0f:c9:d9:
                    82:ca:0f:60:f1:da:5f:1a:12:ae:82:74:f0:cb:c1:
                    97:09:83:e5:d9:5f:76:fd:5f:6a:6a:2e:20:b0:92:
                    35:a8:d2:f6:76:68:60:31:86:d8:71:e6:b2:8e:b7:
                    fa:25:fc:10:62:22:52:8f:0e:b6:b7:92:97:71:92:
                    45:3c:dc:ca:0a:f8:9b:ed:02:dd:8c:35:70:bb:21:
                    0c:cc:53:ef:34:d1:b4:21:0f:f9:de:aa:c0:88:63:
                    eb:ec:9e:31:37:a9:46:4a:9d:60:a5:d7:a7:1d:49:
                    36:f9:d3:57:87:f9:be:55:7d:5d:27:77:99:9a:88:
                    c3:6a:51:33:e2:ea:6d:37:93:6b:fe:27:b7:36:d9:
                    47:90:69:57:4c:8c:21:14:d0:4a:dc:0e:2a:a5:28:
                    ce:af:e4:43:ee:d8:8a:93:c0:e0:dd:1e:f6:82:86:
                    41:4d:9f:de:a9:64:e7:24:45:0d:f6:08:f8:57:93:
                    e5:a8:87:4b:4f:1e:4d:6d:27:d0:09:9b:76:91:87:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7B:06:9B:87:7F:7E:35:7A:99:4F:F4:3F:DA:E1:7B:EB:4F:1E:4E
            X509v3 Authority Key Identifier:
                keyid:EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34332e302f32342d3234203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:da:89:8c:2b:00:0c:5b:4e:bd:09:70:07:59:a3:4a:41:
         e6:e9:33:7e:14:f5:43:e9:34:2a:86:75:ea:50:37:2a:c0:ad:
         08:12:80:7a:48:29:51:4f:28:f9:72:15:6c:b2:b3:4f:7f:e4:
         87:dc:13:05:e2:39:d2:c1:2e:24:d3:63:f4:6b:bd:46:33:7c:
         d8:0b:5c:59:56:1c:f0:3a:ce:40:f0:53:ac:73:27:bc:7c:aa:
         12:eb:39:11:5e:b3:ed:00:59:d5:09:e6:36:63:8d:52:22:11:
         bf:5f:16:04:45:71:95:4c:ff:fb:98:a0:34:c6:2b:c5:1f:14:
         bf:d0:9d:38:20:c9:8b:f4:ec:2a:f9:53:e8:63:2b:45:07:c2:
         c5:54:93:7c:08:b5:92:6d:0d:30:8a:4e:cc:69:fa:bf:7f:a3:
         99:b3:8a:ec:4b:fb:67:48:d7:14:69:c2:fd:76:ea:7c:23:74:
         f1:55:ba:a9:1f:52:b1:b0:d0:a2:8f:e8:0d:9d:7a:e8:2e:0c:
         c1:28:60:58:d5:7b:fb:3a:67:fe:70:41:31:f0:56:ed:80:9f:
         5d:d5:ab:d6:2d:44:57:67:47:73:c1:15:61:2f:31:0c:b3:22:
         30:34:64:54:1b:34:1e:d8:0e:77:7e:03:a3:bf:6e:48:0d:d7:
         73:6c:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org