Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa
File:                     34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa (raw, json)
Hash identifier:          iYuyP712wnzvSFuZR4/XxbFucOVDhdJKSr6eX8S3WcU=
Subject key identifier:   7B:36:5E:C2:C3:DE:87:80:57:75:87:F3:4A:95:CF:2A:FC:F1:CA:97
Certificate issuer:       /CN=549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3
Certificate serial:       2740B79DFF141A74F6F66C371AD5DCF974FD64BF
Authority key identifier: 54:9E:8C:D6:E2:0F:EE:E8:E6:9B:6A:65:BB:F5:C6:90:AB:74:CB:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa
Signing time:             Fri 14 Apr 2023 16:37:39 +0000
ROA not before:           Fri 14 Apr 2023 16:32:39 +0000
ROA not after:            Fri 12 Apr 2024 16:37:39 +0000
asID:                     268459
IP address blocks:        45.161.128.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:40:b7:9d:ff:14:1a:74:f6:f6:6c:37:1a:d5:dc:f9:74:fd:64:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3
        Validity
            Not Before: Apr 14 16:32:39 2023 GMT
            Not After : Apr 12 16:37:39 2024 GMT
        Subject: CN=7B365EC2C3DE8780577587F34A95CF2AFCF1CA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:9d:6d:d6:b7:65:82:a2:0b:0b:63:8d:00:
                    72:e6:1c:89:5f:46:02:4f:63:df:9c:4e:47:42:ae:
                    09:be:2c:46:50:98:a5:cd:92:59:7c:0f:ea:e0:fe:
                    3d:b0:be:af:bb:29:d5:ae:02:f1:72:0d:a6:ca:f2:
                    28:5a:df:88:be:eb:a0:e0:70:b9:1b:69:64:d8:e4:
                    6e:26:bc:9c:b6:03:25:f0:0a:01:07:af:74:bc:6e:
                    c3:80:56:d4:28:80:37:14:1a:ed:0a:63:1b:11:9a:
                    be:90:f8:63:fe:c8:d9:5e:81:c8:82:a1:b1:33:58:
                    b2:85:f7:4b:35:b8:d3:00:34:7c:d4:db:25:f3:4f:
                    f8:0d:71:00:9d:b2:2a:0d:f9:6d:69:a6:bf:0b:67:
                    61:33:c8:56:41:ff:16:8b:f9:65:1d:dc:3e:db:14:
                    59:15:8b:68:87:1a:a2:60:5e:db:4b:18:89:c1:ce:
                    3b:2f:41:8e:d6:92:d0:78:0e:98:fc:c9:d3:5d:00:
                    8d:8e:68:30:85:a1:4e:c7:ef:e2:72:a0:90:b0:e0:
                    09:b3:ad:83:e8:61:c5:51:a7:63:17:65:f0:a8:9e:
                    b2:b1:dc:41:4f:f2:00:cc:fd:d3:91:c2:b8:0d:6e:
                    60:f2:fd:f4:e2:bf:7c:53:b6:65:90:76:bd:ac:2b:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:36:5E:C2:C3:DE:87:80:57:75:87:F3:4A:95:CF:2A:FC:F1:CA:97
            X509v3 Authority Key Identifier:
                keyid:54:9E:8C:D6:E2:0F:EE:E8:E6:9B:6A:65:BB:F5:C6:90:AB:74:CB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:38:13:8e:76:58:b4:66:ef:1f:d2:9d:91:66:80:a0:94:d7:
         68:d6:53:25:66:9d:03:a4:ab:c8:7d:c6:99:f4:44:75:c4:c3:
         29:77:12:ee:ee:74:71:84:10:6f:df:dd:1f:d1:1c:75:90:41:
         37:b0:a6:51:70:aa:91:bc:5d:66:36:d1:5a:1e:ac:6e:31:f9:
         85:45:51:c7:61:64:c0:cd:b1:79:83:0a:76:fd:02:93:67:c9:
         cf:43:ac:90:61:80:65:96:a0:c0:1d:74:94:35:d0:ce:f8:36:
         50:6a:cd:91:66:98:ad:ff:f0:c7:a8:73:43:7c:f3:ea:cb:2e:
         e3:92:9a:61:9f:84:b5:b8:83:bb:fc:6b:8c:29:ab:17:ad:8b:
         c8:26:7a:ee:24:ef:b4:f9:a5:05:c8:2f:a3:e6:3a:99:51:f1:
         c6:29:d5:87:6e:98:e7:9b:c9:df:8b:b3:ac:30:04:97:75:68:
         18:e0:d0:79:4b:22:cf:c9:88:62:43:d7:b4:fb:82:ca:22:3f:
         23:d5:57:f3:b9:62:8f:8d:23:3d:04:87:b3:d4:ec:18:24:d0:
         8a:86:34:3c:aa:c8:88:1f:9a:6f:7b:b3:26:f9:e1:38:e2:74:
         25:f3:67:b6:5e:80:93:95:fd:db:80:c9:5b:5c:50:54:43:ee:
         1c:e8:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org