Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32332d3233203d3e20323638393235.roa
File:                     34352e3137362e342e302f32332d3233203d3e20323638393235.roa (raw, json)
Hash identifier:          ucesESg8aatI4X3W3oO4qjEx3b3JD3I9E7KCyduQR0w=
Subject key identifier:   7F:26:F4:BE:B2:D3:34:C4:C4:A9:18:4E:E0:F7:D6:7B:AF:40:CA:32
Certificate issuer:       /CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
Certificate serial:       4F2A962B1DDC0E6B669D5C985524F970C6087619
Authority key identifier: E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32332d3233203d3e20323638393235.roa
Signing time:             Thu 01 Feb 2024 14:27:02 +0000
ROA not before:           Thu 01 Feb 2024 14:22:02 +0000
ROA not after:            Thu 30 Jan 2025 14:27:02 +0000
asID:                     268925
IP address blocks:        45.176.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2a:96:2b:1d:dc:0e:6b:66:9d:5c:98:55:24:f9:70:c6:08:76:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
        Validity
            Not Before: Feb  1 14:22:02 2024 GMT
            Not After : Jan 30 14:27:02 2025 GMT
        Subject: CN=7F26F4BEB2D334C4C4A9184EE0F7D67BAF40CA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:56:2a:9d:74:5b:34:19:9d:6b:ec:fd:78:
                    1c:2d:ab:4c:6e:c2:2f:ec:a6:62:b3:d3:dd:f0:a9:
                    94:9d:f4:22:c1:27:55:77:d4:52:bd:04:f3:5b:08:
                    99:e8:6c:ad:53:9c:8f:10:fa:f9:15:21:05:7f:ed:
                    59:6b:31:d6:93:44:cd:f3:8a:b8:cf:8f:5b:9d:12:
                    cd:22:7f:71:1b:02:a8:84:b0:e0:9d:a0:18:e5:44:
                    cc:98:70:37:67:6e:45:18:09:c0:f5:24:73:63:bc:
                    b5:a7:66:5a:9a:9c:99:47:f2:7d:34:19:05:70:5d:
                    3c:69:ab:96:ce:33:58:52:e5:50:c4:9d:ce:98:29:
                    49:02:f1:d5:11:26:14:06:c4:d9:58:ce:57:8b:ed:
                    f9:4d:81:eb:3e:8d:5a:6e:0e:f4:26:54:dd:cd:c0:
                    b1:89:6f:d1:e9:46:68:d9:69:aa:eb:d3:5c:89:de:
                    10:27:4c:b8:61:00:5e:ec:c8:d3:83:01:25:ea:9d:
                    f4:34:96:f6:ed:0f:62:df:35:87:04:3d:c0:59:50:
                    99:49:4f:6d:64:5e:37:11:5e:7b:a6:2d:ca:07:9f:
                    c9:e6:ca:cc:5e:62:a8:41:23:28:52:ab:18:e7:83:
                    61:33:27:b4:e6:be:5a:38:90:28:0e:81:d7:3d:e4:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:26:F4:BE:B2:D3:34:C4:C4:A9:18:4E:E0:F7:D6:7B:AF:40:CA:32
            X509v3 Authority Key Identifier:
                keyid:E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32332d3233203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:34:62:87:9c:87:a9:b1:10:62:7b:93:61:50:a8:8a:f5:d6:
         a2:82:92:16:28:36:93:93:25:a6:d3:40:d3:dc:74:12:3e:11:
         28:ec:7d:6e:fa:60:f4:7f:01:0f:18:53:e4:f4:90:17:79:6f:
         66:71:35:54:2d:21:d0:d2:c8:d1:1f:72:91:6a:45:21:90:89:
         2e:27:95:9c:52:5a:1f:f3:2c:cd:b0:c0:56:2b:92:a1:e2:f2:
         b8:3e:ba:5a:4f:dd:ff:62:8e:98:f6:32:d1:37:9d:95:ba:ac:
         8c:99:c4:77:c9:6a:7d:28:58:a6:05:cd:d9:4d:98:01:4b:6f:
         5a:ed:af:4a:48:82:7d:1c:b4:9c:7f:1e:5a:35:1b:e6:52:fe:
         c0:6d:8c:a5:a9:11:64:eb:21:03:a4:96:78:61:ed:67:a0:15:
         3e:a3:fe:cd:22:ee:6f:35:17:81:7c:7f:d6:76:cb:53:86:3e:
         37:bd:78:33:80:eb:70:ea:ff:20:df:e2:19:d4:8f:03:98:08:
         9b:da:8b:eb:c6:8b:3f:c2:f0:e7:b2:93:29:9d:5e:54:36:4b:
         1b:ae:eb:b5:48:37:19:19:8a:6f:8f:e6:24:cc:7f:24:06:32:
         7f:6e:79:a8:47:24:6b:53:63:ba:f2:ca:df:08:fe:6a:97:1a:
         74:5d:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org