Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa
File:                     34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa (raw, json)
Hash identifier:          pFye5fiq5ShJkCzu9w+L5toNmnOobGiE9cJuOn/VBaA=
Subject key identifier:   61:02:A9:B1:39:C4:87:50:74:CB:A5:BD:D5:C5:19:AC:B2:AE:57:B9
Certificate issuer:       /CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
Certificate serial:       14E6E210CC5767EB77A3E1AB0FC1839CC80A012C
Authority key identifier: 11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa
Signing time:             Thu 07 Mar 2024 17:44:56 +0000
ROA not before:           Thu 07 Mar 2024 17:39:56 +0000
ROA not after:            Thu 06 Mar 2025 17:44:56 +0000
asID:                     267329
IP address blocks:        45.232.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e6:e2:10:cc:57:67:eb:77:a3:e1:ab:0f:c1:83:9c:c8:0a:01:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
        Validity
            Not Before: Mar  7 17:39:56 2024 GMT
            Not After : Mar  6 17:44:56 2025 GMT
        Subject: CN=6102A9B139C4875074CBA5BDD5C519ACB2AE57B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:8a:1c:df:7e:26:2e:fa:17:29:cd:3c:fe:
                    e6:d8:dc:b4:d6:7a:42:e8:d5:b9:5f:22:6f:0c:f0:
                    7c:83:8a:42:af:67:ed:cf:ab:0c:c3:cc:84:6d:1c:
                    94:8c:40:a0:c2:02:b2:bf:6f:dc:0f:8d:4c:44:04:
                    e9:b8:40:6c:07:7a:ba:82:e0:e9:69:45:ff:42:91:
                    7e:6a:57:6a:aa:e1:1b:f6:fb:5a:9d:1c:77:c0:3c:
                    a4:6a:86:eb:49:ab:4a:39:90:9b:73:40:92:3e:6e:
                    a7:b4:db:d3:a0:84:95:dd:e8:f3:c3:49:f3:8b:2a:
                    c9:88:c2:e2:3e:d8:e6:20:34:1f:a0:0f:55:75:c0:
                    f8:0c:30:e0:a7:c7:97:ad:cf:dd:26:6e:c8:db:60:
                    51:43:9b:bf:41:71:aa:78:46:29:5b:65:51:2f:ae:
                    2e:cb:1b:63:87:21:61:04:d6:b5:a8:53:d1:ef:e1:
                    fa:f6:dc:cd:b5:d7:85:96:ef:b6:f9:46:b9:56:45:
                    23:83:3b:23:e8:e7:eb:78:76:b5:e1:6a:73:5e:5b:
                    ed:ad:b7:14:24:b6:21:a7:64:58:88:ce:9c:45:88:
                    1b:f2:05:d4:ab:0c:f8:20:ad:d0:2b:0b:29:7e:f6:
                    72:de:b4:3f:25:f9:d5:68:62:2b:b8:81:5e:82:17:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:02:A9:B1:39:C4:87:50:74:CB:A5:BD:D5:C5:19:AC:B2:AE:57:B9
            X509v3 Authority Key Identifier:
                keyid:11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:1a:02:9c:98:ff:b7:3f:a4:d0:88:ac:b0:f4:50:85:5f:
         bd:13:dc:0c:c5:0e:70:4c:af:e5:0e:e0:12:9e:73:72:c5:72:
         7c:5a:cf:d7:d5:98:8d:85:17:46:ae:5b:c7:f6:36:87:a5:b9:
         15:e1:64:ae:40:b7:b2:bc:80:ce:02:7a:91:39:96:04:24:58:
         e0:85:54:1c:4c:7b:34:b8:9b:0e:d2:03:1b:76:43:7e:8b:ff:
         51:40:db:ea:b9:fc:6f:c5:30:57:9c:fe:c5:a7:be:50:2e:57:
         81:17:21:8c:02:90:01:9b:48:4b:91:bf:bf:9e:82:34:d9:f9:
         92:af:84:01:c7:d3:7c:64:22:16:7c:b2:b4:67:7b:18:0e:4e:
         e0:b1:94:50:21:57:4d:f2:dc:81:5d:5f:09:65:72:b4:9b:99:
         f2:60:f4:c4:11:d9:8a:ac:c8:f8:5e:70:c2:77:00:94:d2:de:
         6c:c5:05:c2:40:a5:18:15:2d:23:0d:5a:d4:e8:96:2f:fb:e3:
         ba:22:7a:ea:73:29:23:a4:26:1d:b2:d4:ac:fd:8b:ca:ad:37:
         0b:48:18:2a:22:19:9a:b6:61:c9:32:87:88:c9:da:0f:ff:93:
         49:13:7d:fc:38:f3:15:d1:dd:d0:fb:79:44:f2:7a:1f:17:13:
         0e:8f:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org