Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3133312e302f32342d3234203d3e20323638343539.roa
File:                     34352e3136312e3133312e302f32342d3234203d3e20323638343539.roa (raw, json)
Hash identifier:          SAw/aKjaZ9WGdztGJLjhCJasPKM3SEdp2xv2girVUCk=
Subject key identifier:   E8:4F:31:6D:8D:71:19:2F:5D:32:C7:B4:FA:6C:FC:0E:EA:97:C8:7E
Certificate issuer:       /CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
Certificate serial:       3F28A2E93161CF0941B43CD9AFF1DF44EFE66F39
Authority key identifier: 4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3133312e302f32342d3234203d3e20323638343539.roa
Signing time:             Wed 21 Dec 2022 12:39:20 +0000
ROA not before:           Wed 21 Dec 2022 12:34:20 +0000
ROA not after:            Wed 20 Dec 2023 12:39:20 +0000
asID:                     268459
IP address blocks:        45.161.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:28:a2:e9:31:61:cf:09:41:b4:3c:d9:af:f1:df:44:ef:e6:6f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
        Validity
            Not Before: Dec 21 12:34:20 2022 GMT
            Not After : Dec 20 12:39:20 2023 GMT
        Subject: CN=E84F316D8D71192F5D32C7B4FA6CFC0EEA97C87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:ca:49:87:bb:57:fb:17:58:a3:ea:51:eb:
                    a8:6b:d1:3c:48:42:82:09:e0:16:46:1b:02:15:15:
                    79:f8:ba:85:e7:97:ff:1a:73:1f:97:69:bc:4f:39:
                    fb:f9:73:94:9d:9a:53:22:62:22:47:63:bf:a3:79:
                    fc:8f:d9:f5:08:69:95:08:32:a0:a4:43:e8:90:d2:
                    b4:1b:49:7c:7c:77:19:9c:ba:45:dd:47:02:1b:28:
                    76:4b:e5:02:a9:8f:21:70:b0:d7:ca:e3:92:3b:0c:
                    d8:b3:16:4e:92:1e:26:6e:98:75:6b:49:07:46:12:
                    7d:2c:60:f0:51:22:7a:e2:0c:61:4e:a4:06:22:9a:
                    bf:95:48:fb:bf:9b:4b:99:e8:0e:98:75:d8:07:d8:
                    46:4c:77:e4:fc:cd:27:67:15:2a:7c:4d:e0:89:10:
                    d8:05:27:d3:2d:25:62:aa:ed:52:15:78:9e:cc:bc:
                    23:f1:64:20:b9:f2:6a:ad:9d:ef:51:4e:65:8f:77:
                    81:6c:10:68:64:a0:e7:ca:50:cb:7a:28:48:8b:89:
                    76:63:4c:d9:7a:4d:6d:62:4f:9c:8f:90:ea:75:4e:
                    7c:d7:d7:7b:0d:9c:af:33:6d:15:29:ff:26:68:3b:
                    9e:68:50:50:cc:69:b1:8b:45:70:0e:bc:c9:1d:ed:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4F:31:6D:8D:71:19:2F:5D:32:C7:B4:FA:6C:FC:0E:EA:97:C8:7E
            X509v3 Authority Key Identifier:
                keyid:4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3133312e302f32342d3234203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:53:38:4a:70:5f:c6:57:e6:8f:84:ca:68:29:8b:b0:d3:8e:
         79:74:52:a7:98:83:5d:2a:96:d3:26:59:a2:e0:9f:52:29:27:
         1c:6a:a0:a9:db:7a:71:79:31:2a:7e:f7:8c:43:73:4a:7a:0f:
         58:3d:07:80:9a:38:5a:4e:6b:a0:42:34:cb:f1:4b:05:99:99:
         cc:13:dc:e0:83:d0:d6:f1:41:3d:62:91:49:0d:4f:36:b2:a6:
         9d:74:ee:1d:62:9d:37:5a:30:df:1c:b3:61:97:3d:b0:b2:34:
         78:10:5a:e0:f5:61:cc:b2:91:f0:8f:ec:29:1d:17:b7:08:fa:
         13:6a:62:2f:a2:9e:81:d9:1c:ba:c1:5c:ac:86:63:b4:22:ed:
         ab:f0:f4:6e:ff:95:e7:08:db:f0:e2:37:2c:36:cb:c6:95:f9:
         66:08:6d:20:bf:f1:03:c4:2a:34:34:38:3a:08:46:d6:c2:99:
         09:30:f5:f2:fb:2e:da:77:56:ba:db:e2:37:85:22:fe:07:45:
         62:ae:b9:12:83:51:a9:0c:61:d5:ff:95:0d:81:93:87:ab:5c:
         ec:36:bc:6f:0c:ca:77:0c:c0:3c:9a:3c:f6:3a:3c:71:b5:b4:
         3a:2e:63:db:00:df:6e:e4:bd:44:12:92:82:a7:33:cc:05:7a:
         83:cb:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org