Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32332d3234203d3e20323636303731.roa
File:                     34352e342e3132302e302f32332d3234203d3e20323636303731.roa (raw, json)
Hash identifier:          zgduyalpWz76MlL1l4z4cwiIi07CbcS61FagxOs2qmc=
Subject key identifier:   EC:08:74:A0:C1:50:CE:76:57:F5:51:A4:2A:ED:97:A7:F2:F6:5E:AB
Certificate issuer:       /CN=ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8
Certificate serial:       7F1C669249DE5729FCE0178DA76A1827E572E172
Authority key identifier: ED:7A:0E:B2:24:47:D8:F1:BE:FF:36:A9:85:EF:7C:59:91:74:CE:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32332d3234203d3e20323636303731.roa
Signing time:             Thu 10 Aug 2023 21:08:04 +0000
ROA not before:           Thu 10 Aug 2023 21:03:04 +0000
ROA not after:            Thu 08 Aug 2024 21:08:04 +0000
asID:                     266071
IP address blocks:        45.4.120.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1c:66:92:49:de:57:29:fc:e0:17:8d:a7:6a:18:27:e5:72:e1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8
        Validity
            Not Before: Aug 10 21:03:04 2023 GMT
            Not After : Aug  8 21:08:04 2024 GMT
        Subject: CN=EC0874A0C150CE7657F551A42AED97A7F2F65EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:53:6a:06:7b:40:8a:e6:75:74:c0:c3:00:
                    c2:24:f8:2d:ff:b0:dc:35:d1:0e:54:1d:7a:a1:36:
                    02:7f:fb:41:42:70:bb:3a:5d:75:ae:f2:b3:9b:1f:
                    b5:bb:fc:0e:f9:80:2e:81:af:bf:83:c3:3e:e6:1c:
                    b5:b5:0d:38:f8:09:69:a3:13:ea:a0:d4:74:96:4e:
                    d7:cb:68:21:a2:c3:f0:58:9a:9f:61:b5:e3:59:bb:
                    4e:07:b4:0b:06:e5:7f:9b:81:8b:ca:50:94:63:bd:
                    87:a3:f1:75:36:cc:bc:77:16:96:9e:93:b6:f6:f9:
                    19:6b:24:98:0b:a8:85:5e:8a:d8:29:c7:bd:0e:0b:
                    8a:9d:04:dd:f9:db:c5:da:e2:c4:cf:be:fc:d1:fa:
                    8c:3a:80:53:f8:90:7f:74:1b:c7:9d:c6:83:1c:52:
                    53:7d:d6:94:98:5b:cd:8b:42:f7:6c:ad:24:6f:2d:
                    60:49:5d:a2:b4:28:41:ee:ba:37:af:b4:63:96:0f:
                    85:0e:be:62:6d:c1:13:4c:9b:d3:a7:13:43:cf:b9:
                    57:1c:bc:fa:cb:12:bf:78:97:fd:df:50:a0:83:47:
                    0f:40:54:fa:6a:a4:12:ab:ad:a7:91:17:49:63:06:
                    7c:5e:62:e1:b1:2d:c3:09:59:22:ab:2c:6d:26:b2:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:74:A0:C1:50:CE:76:57:F5:51:A4:2A:ED:97:A7:F2:F6:5E:AB
            X509v3 Authority Key Identifier:
                keyid:ED:7A:0E:B2:24:47:D8:F1:BE:FF:36:A9:85:EF:7C:59:91:74:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32332d3234203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:e3:55:a7:22:6e:38:92:06:77:4c:85:a9:30:8e:64:7f:8b:
         22:6d:b3:96:ee:7e:1c:4e:b6:bf:52:34:a3:6c:8b:5f:fd:6b:
         8c:44:be:ab:24:0d:43:cb:c5:0a:e7:1b:06:f0:7a:2c:fe:2b:
         d0:89:1e:92:f3:a0:1d:d7:d7:ce:3f:33:82:72:f3:5d:7b:1b:
         d8:4a:dd:74:8f:b5:5a:11:e1:2d:b5:96:3c:3d:f7:c6:b4:5f:
         46:2a:de:c8:81:1f:6b:83:2d:d6:15:d6:54:65:b6:f5:52:c4:
         8b:49:18:e0:91:60:ef:3b:11:66:df:61:f7:4a:4f:18:6a:08:
         fe:64:4a:93:93:3e:f8:24:ff:75:58:a4:ae:23:14:8a:b4:98:
         23:54:48:32:5d:58:c3:5c:01:d0:87:30:57:91:7d:0d:cc:3c:
         fd:15:1f:d9:cf:9e:2f:5a:9f:35:5c:0c:2b:9d:c4:ae:2d:09:
         76:f5:ee:9c:99:c7:94:04:fe:ae:f8:db:ea:22:d0:e0:3a:35:
         e1:a2:52:4b:ed:4f:01:76:9a:11:08:3d:be:82:d5:47:ef:f4:
         88:08:0c:b0:87:79:8d:68:51:fc:e1:be:bd:32:03:76:ac:49:
         7a:65:3b:0f:fd:56:cb:ab:d5:58:c3:74:13:50:de:f0:85:d2:
         28:5d:03:25
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfxxmkkneVyn84BeNp2oYJ+Vy4XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ3QTBFQjIyNDQ3RDhGMUJFRkYzNkE5ODVFRjdDNTk5
MTc0Q0VFODAeFw0yMzA4MTAyMTAzMDRaFw0yNDA4MDgyMTA4MDRaMDMxMTAvBgNV
BAMTKEVDMDg3NEEwQzE1MENFNzY1N0Y1NTFBNDJBRUQ5N0E3RjJGNjVFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdlNqBntAiuZ1dMDDAMIk+C3/
sNw10Q5UHXqhNgJ/+0FCcLs6XXWu8rObH7W7/A75gC6Br7+Dwz7mHLW1DTj4CWmj
E+qg1HSWTtfLaCGiw/BYmp9hteNZu04HtAsG5X+bgYvKUJRjvYej8XU2zLx3Fpae
k7b2+RlrJJgLqIVeitgpx70OC4qdBN3528Xa4sTPvvzR+ow6gFP4kH90G8edxoMc
UlN91pSYW82LQvdsrSRvLWBJXaK0KEHuujevtGOWD4UOvmJtwRNMm9OnE0PPuVcc
vPrLEr94l/3fUKCDRw9AVPpqpBKrraeRF0ljBnxeYuGxLcMJWSKrLG0msjNNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7Ah0oMFQznZX9VGkKu2Xp/L2XqswHwYDVR0j
BBgwFoAU7XoOsiRH2PG+/zaphe98WZF0zugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2ZFVjNHUngyQU5OY2lWOVJoTXhiUlM5YU5VdXBwTkdmV0htbmoycWhy
dlcvMC9FRDdBMEVCMjI0NDdEOEYxQkVGRjM2QTk4NUVGN0M1OTkxNzRDRUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VEN0EwRUIyMjQ0N0Q4RjFC
RUZGMzZBOTg1RUY3QzU5OTE3NENFRTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdmRVYzR1J4MkFOTmNpVjlSaE14YlJTOWFOVXVwcE5HZldIbW5qMnFocnZXLzAv
MzQzNTJlMzQyZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNjMw
MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0EeDANBgkqhkiG9w0BAQsFAAOCAQEAe+NVpyJuOJIG
d0yFqTCOZH+LIm2zlu5+HE62v1I0o2yLX/1rjES+qyQNQ8vFCucbBvB6LP4r0Ike
kvOgHdfXzj8zgnLzXXsb2ErddI+1WhHhLbWWPD33xrRfRireyIEfa4Mt1hXWVGW2
9VLEi0kY4JFg7zsRZt9h90pPGGoI/mRKk5M++CT/dVikriMUirSYI1RIMl1Yw1wB
0IcwV5F9Dcw8/RUf2c+eL1qfNVwMK53Eri0JdvXunJnHlAT+rvjb6iLQ4Do14aJS
S+1PAXaaEQg9voLVR+/0iAgMsId5jWhR/OG+vTIDdqxJemU7D/1Wy6vVWMN0E1De
8IXSKF0DJQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org