Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132312e302f32342d3234203d3e20323636303731.roa
File:                     34352e342e3132312e302f32342d3234203d3e20323636303731.roa (raw, json)
Hash identifier:          Ds4e3X3xuznWRmUwJZtIFCnef92eBramICb1yO2iTlU=
Subject key identifier:   FD:E4:A9:55:4A:71:A4:52:EF:A5:15:C8:51:77:FA:B7:35:D8:AC:D5
Certificate issuer:       /CN=1C0D57B6A3245283DC081118F5FA77723813EFED
Certificate serial:       7C0F8466688FB86729A5EBB13D0FF14A1EE5484F
Authority key identifier: 1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132312e302f32342d3234203d3e20323636303731.roa
Signing time:             Thu 11 Jan 2024 12:28:31 +0000
ROA not before:           Thu 11 Jan 2024 12:23:31 +0000
ROA not after:            Thu 09 Jan 2025 12:28:31 +0000
asID:                     266071
IP address blocks:        45.4.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0f:84:66:68:8f:b8:67:29:a5:eb:b1:3d:0f:f1:4a:1e:e5:48:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0D57B6A3245283DC081118F5FA77723813EFED
        Validity
            Not Before: Jan 11 12:23:31 2024 GMT
            Not After : Jan  9 12:28:31 2025 GMT
        Subject: CN=FDE4A9554A71A452EFA515C85177FAB735D8ACD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:02:ab:47:d0:4b:47:42:15:f2:c1:61:06:
                    67:7c:da:0c:20:c7:93:75:7c:e5:7a:51:0c:b6:60:
                    c7:3a:78:35:23:76:e1:de:a1:5a:50:76:14:f3:f2:
                    4c:5a:71:3c:b9:61:ea:fe:06:19:1d:03:83:8d:a5:
                    78:3b:d6:0f:c2:ce:d4:1a:14:8a:b7:02:f3:1e:b0:
                    3e:d6:3a:33:bc:33:e6:dc:12:67:32:c2:5e:8a:fa:
                    4d:e7:31:83:4d:2c:f3:e3:18:10:66:1a:89:10:e5:
                    63:c4:be:ef:d6:57:4e:06:69:d1:8c:3d:61:73:7a:
                    5b:ce:e6:ad:02:94:8d:dc:fe:d6:bf:df:24:85:67:
                    39:5d:1d:1f:00:6a:f0:4d:85:9f:aa:06:f8:10:87:
                    6a:dd:4d:91:a0:47:e5:c7:ee:46:3b:bf:ea:02:1c:
                    78:d2:7a:ac:dd:86:44:c8:c1:eb:5e:d3:b1:d0:93:
                    d8:33:a9:db:54:bd:68:32:f8:de:db:46:c2:f3:cf:
                    36:46:6e:78:af:e1:7b:ab:98:dd:c0:42:67:dd:6c:
                    1c:28:d5:3e:62:09:da:5f:2c:22:50:8e:51:89:6c:
                    1d:b0:2e:56:d2:cc:c7:cc:7d:f7:5c:aa:dd:1a:88:
                    25:d3:e2:19:cc:20:be:af:9c:51:ce:ba:ff:f9:1d:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E4:A9:55:4A:71:A4:52:EF:A5:15:C8:51:77:FA:B7:35:D8:AC:D5
            X509v3 Authority Key Identifier:
                keyid:1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/1C0D57B6A3245283DC081118F5FA77723813EFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132312e302f32342d3234203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:fe:9d:be:4f:d7:33:1c:8a:df:7b:d9:09:f2:64:80:73:
         e6:56:9f:59:28:1f:bd:65:09:f0:75:44:d0:57:19:e4:68:2e:
         d5:f5:42:58:29:7e:2f:e4:40:d9:b3:31:f6:7f:05:9e:96:ae:
         8a:1a:d0:f4:2b:8a:8b:87:26:98:ad:01:64:89:13:9c:58:1b:
         13:c7:03:49:2a:e7:8b:6b:63:64:f7:07:b0:9a:05:fd:b6:6e:
         f3:99:42:ff:c3:af:d9:9e:ce:fd:87:3c:e2:d7:01:04:ab:15:
         17:15:f4:0f:a6:d0:c2:04:90:f9:44:c9:7d:8e:06:64:4c:b7:
         36:d6:88:59:bc:43:1f:d1:41:75:05:2f:ad:39:05:71:c6:92:
         ac:1b:cf:11:a7:60:c6:8f:d6:9c:68:b8:bf:db:2b:74:be:26:
         ba:6c:44:94:2f:10:59:aa:29:72:dd:23:09:20:2f:d9:0e:67:
         5e:d3:dd:54:c3:5c:b6:14:c7:0e:ce:da:9c:e7:15:41:85:f3:
         94:f3:70:78:60:35:ae:ed:7e:46:25:46:94:04:68:9c:0d:b9:
         9b:b3:0d:6c:8f:f8:59:48:96:de:56:4a:6e:4b:d9:4e:65:6b:
         d5:9b:77:fc:43:4c:f5:d1:9c:c7:d3:26:f0:35:ce:24:28:81:
         d8:3e:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org