Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230372e302f32342d3234203d3e20323632343831.roa
File:                     34352e3136362e3230372e302f32342d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          eVv06byNdX8rfg4wlgDH1LoxG3MjICG49PQwmoMedWQ=
Subject key identifier:   4F:85:22:11:89:8A:A2:12:25:AB:49:61:4B:C4:F2:73:64:76:09:4C
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       1175149C5C581BB6EA7DADEFF850D3A6E89113A0
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230372e302f32342d3234203d3e20323632343831.roa
Signing time:             Tue 21 Jun 2022 12:56:00 +0000
ROA not before:           Tue 21 Jun 2022 12:51:00 +0000
ROA not after:            Tue 20 Jun 2023 12:56:00 +0000
asID:                     262481
IP address blocks:        45.166.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:75:14:9c:5c:58:1b:b6:ea:7d:ad:ef:f8:50:d3:a6:e8:91:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Jun 21 12:51:00 2022 GMT
            Not After : Jun 20 12:56:00 2023 GMT
        Subject: CN=3082010A0282010100A5602BF3B57176045B41786757B294EA6DE5598FEAC2298EA1AD316894115C7BFA84D320A463BEB3A2257AECD77F3356E9D1DBAEEA35F4251EEF20A47DE201180A1CFEC5D8F13660F1EC8708FBD879C643C2D7B2C6940EA379708202409AA0B81E7E86D142EC23199259A977D7169DCD1C7367D22D24969A347EC417A655A18911B1EEE60F31E0EFD1223295505FE4D2E4C69B1AB5563483CFC85859AFAD643BFDED3936AA90A3A84821CC2239ED01F9605AEB695B36B5DC88C2FB329DAD1396806FE4E3E8A9187A5B6D6748A2923179F9923698BADE0C314D7B94C44B698B340A6E7E05E905486314F6B3FE1B927F37C9BA2754937162462D82DC061556CF790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:2b:f3:b5:71:76:04:5b:41:78:67:57:b2:
                    94:ea:6d:e5:59:8f:ea:c2:29:8e:a1:ad:31:68:94:
                    11:5c:7b:fa:84:d3:20:a4:63:be:b3:a2:25:7a:ec:
                    d7:7f:33:56:e9:d1:db:ae:ea:35:f4:25:1e:ef:20:
                    a4:7d:e2:01:18:0a:1c:fe:c5:d8:f1:36:60:f1:ec:
                    87:08:fb:d8:79:c6:43:c2:d7:b2:c6:94:0e:a3:79:
                    70:82:02:40:9a:a0:b8:1e:7e:86:d1:42:ec:23:19:
                    92:59:a9:77:d7:16:9d:cd:1c:73:67:d2:2d:24:96:
                    9a:34:7e:c4:17:a6:55:a1:89:11:b1:ee:e6:0f:31:
                    e0:ef:d1:22:32:95:50:5f:e4:d2:e4:c6:9b:1a:b5:
                    56:34:83:cf:c8:58:59:af:ad:64:3b:fd:ed:39:36:
                    aa:90:a3:a8:48:21:cc:22:39:ed:01:f9:60:5a:eb:
                    69:5b:36:b5:dc:88:c2:fb:32:9d:ad:13:96:80:6f:
                    e4:e3:e8:a9:18:7a:5b:6d:67:48:a2:92:31:79:f9:
                    92:36:98:ba:de:0c:31:4d:7b:94:c4:4b:69:8b:34:
                    0a:6e:7e:05:e9:05:48:63:14:f6:b3:fe:1b:92:7f:
                    37:c9:ba:27:54:93:71:62:46:2d:82:dc:06:15:56:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:22:11:89:8A:A2:12:25:AB:49:61:4B:C4:F2:73:64:76:09:4C
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230372e302f32342d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:15:9e:04:26:a3:f9:7e:4a:4d:f3:1b:9a:5f:65:d4:7d:a4:
         33:4b:39:04:b0:de:af:43:e0:3c:86:e6:25:fe:f8:6d:05:4c:
         e8:a7:7c:b5:bf:3b:e1:2a:75:e9:3e:69:1e:47:a0:21:78:09:
         3a:be:df:3a:e1:b1:4f:99:e2:55:e5:55:5e:01:81:44:84:67:
         bb:3b:7e:14:94:74:13:9a:c7:35:5c:e6:a5:01:6f:72:35:5c:
         66:b4:2b:b8:4f:bf:bd:4d:08:21:b8:c9:31:53:c6:74:7d:fc:
         13:47:a3:c7:cb:31:e2:ea:3e:d4:b9:9d:97:13:1c:73:ce:fe:
         02:d4:97:f5:ce:03:3e:ab:21:86:82:a0:27:33:be:d9:d8:de:
         2b:e0:62:18:a4:94:92:85:99:eb:7e:44:2b:85:b9:f6:bb:c4:
         27:70:ab:71:97:b7:fe:a0:23:f6:7a:f2:c3:49:10:b0:be:d0:
         b7:a7:89:26:90:e1:7a:db:cc:06:d8:f1:16:0a:29:24:2d:67:
         fc:54:08:b1:73:cb:a5:33:1d:8e:17:d5:ec:f0:de:17:84:8b:
         c9:ce:c4:51:33:c2:7e:cd:48:31:62:8a:d0:dd:45:90:73:f6:
         61:12:44:fc:51:b2:59:91:fb:31:36:b8:71:12:5f:d3:81:42:
         82:5a:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org