Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/1/34352e3136392e32342e302f32322d3234203d3e20323638303931.roa
File:                     34352e3136392e32342e302f32322d3234203d3e20323638303931.roa (raw, json)
Hash identifier:          d8FF23okoJ1sAu/VOQrZnvKZsmy4VmdSfrlJlkCpHWU=
Subject key identifier:   1B:80:7D:4B:98:00:B1:86:6C:E3:C4:4C:F6:7C:3A:BE:FF:2A:23:A0
Certificate issuer:       /CN=2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961
Certificate serial:       4E2D1FA35F10C70168BC0AA0E816B65152B4526F
Authority key identifier: 2E:E9:60:8C:E3:44:58:A0:C4:A2:E8:7C:A6:EC:F6:5A:AD:D4:D9:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/1/34352e3136392e32342e302f32322d3234203d3e20323638303931.roa
Signing time:             Mon 28 Aug 2023 05:15:43 +0000
ROA not before:           Mon 28 Aug 2023 05:10:43 +0000
ROA not after:            Mon 26 Aug 2024 05:15:43 +0000
asID:                     268091
IP address blocks:        45.169.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2d:1f:a3:5f:10:c7:01:68:bc:0a:a0:e8:16:b6:51:52:b4:52:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961
        Validity
            Not Before: Aug 28 05:10:43 2023 GMT
            Not After : Aug 26 05:15:43 2024 GMT
        Subject: CN=1B807D4B9800B1866CE3C44CF67C3ABEFF2A23A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ea:b1:a9:c4:f8:1c:f3:32:40:94:cb:cc:fc:
                    8c:8a:0e:94:2a:ca:3d:33:79:cc:46:73:8d:9a:86:
                    f5:91:cf:9f:0c:dc:e6:0f:72:4c:a7:80:66:4f:b7:
                    c4:9a:25:51:f8:37:ec:a8:a1:ff:47:12:cd:57:dd:
                    16:94:12:87:4b:7f:41:75:2b:a4:5c:14:f6:a0:5d:
                    5f:cc:01:ea:57:58:ff:28:52:59:e0:5b:d7:79:33:
                    ab:6e:6b:b3:d2:71:c9:04:19:df:a0:f8:bd:f0:1c:
                    0f:81:77:22:9b:cc:45:6f:5f:2c:b7:ae:76:85:c6:
                    83:c6:80:ff:b8:eb:c6:ca:b5:37:f9:cd:2a:6c:92:
                    1e:e4:42:38:f7:94:f3:fe:0d:e6:9b:a9:cd:b7:91:
                    4c:a7:75:7d:45:c0:15:76:67:0a:0b:9a:27:ab:59:
                    26:6c:e0:8c:31:c7:fb:19:5a:b2:eb:ce:d7:6f:b3:
                    92:80:ac:b8:44:0f:34:c5:e4:56:8a:90:b7:a0:a7:
                    55:a0:0a:67:65:09:97:c9:d8:9c:4d:39:0a:d6:c5:
                    62:14:c6:de:77:5c:38:d8:c6:16:be:b8:d3:2a:f0:
                    00:28:76:5f:26:a4:b2:7e:24:5a:d4:a7:a0:cf:5d:
                    c2:7b:24:6a:1d:46:f5:f8:b3:d0:b9:b5:8a:5d:68:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:80:7D:4B:98:00:B1:86:6C:E3:C4:4C:F6:7C:3A:BE:FF:2A:23:A0
            X509v3 Authority Key Identifier:
                keyid:2E:E9:60:8C:E3:44:58:A0:C4:A2:E8:7C:A6:EC:F6:5A:AD:D4:D9:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/1/2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/1/34352e3136392e32342e302f32322d3234203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:5c:d3:71:29:b0:5d:15:dc:4a:c2:3e:ce:c9:66:8a:09:2f:
         43:31:ac:c3:23:49:e2:a0:bc:4c:9e:de:62:b1:a2:e6:34:a6:
         13:a6:52:f7:03:46:f1:4a:61:9e:35:c9:2e:bb:10:f8:3f:16:
         e1:e1:0b:64:70:81:9d:1d:4c:38:d4:76:f5:c2:8a:22:e5:59:
         25:ff:f0:3d:a3:d5:18:a8:b7:5b:8c:72:49:af:58:20:a1:b0:
         dc:82:40:fc:cf:b9:02:d6:80:1d:2c:48:a1:96:8e:53:c5:45:
         c2:d0:9f:f1:81:8f:08:df:4f:5a:af:e7:66:3a:79:e7:f7:ea:
         b8:3d:2a:8d:14:7e:30:3d:6e:2c:87:9b:e6:87:10:fd:77:ec:
         4e:5e:3a:24:16:5c:9f:31:c9:99:f8:19:22:d1:79:b1:0d:21:
         16:b9:3f:c0:e1:8c:16:bb:f5:51:d4:40:a2:c1:a8:90:3a:74:
         90:d9:bc:1c:55:14:3a:bc:1b:84:cf:86:ce:11:86:2f:7d:65:
         47:0a:b3:95:57:4c:a7:de:91:1f:ef:93:ce:e7:28:b0:f9:f8:
         ce:df:0f:3b:47:e1:a5:c6:b5:30:82:3b:04:d5:c6:eb:c9:18:
         3c:b0:74:01:e1:f3:79:29:59:6d:25:ea:48:77:7e:a3:84:34:
         f1:8f:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org