Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa
File:                     34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (raw, json)
Hash identifier:          wuAoRAaw6nlGf/wZpFvygFtWs9O0cBK6FxIMIk7IIr4=
Subject key identifier:   6F:83:13:FE:78:C4:BD:A9:71:D4:F2:10:AE:40:27:76:6F:57:A4:C1
Certificate issuer:       /CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
Certificate serial:       43D016F478140A574B75EF88AE971772CBD11214
Authority key identifier: 4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa
Signing time:             Fri 09 Feb 2024 17:00:02 +0000
ROA not before:           Fri 09 Feb 2024 16:55:02 +0000
ROA not after:            Fri 07 Feb 2025 17:00:02 +0000
asID:                     269471
IP address blocks:        45.187.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d0:16:f4:78:14:0a:57:4b:75:ef:88:ae:97:17:72:cb:d1:12:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
        Validity
            Not Before: Feb  9 16:55:02 2024 GMT
            Not After : Feb  7 17:00:02 2025 GMT
        Subject: CN=6F8313FE78C4BDA971D4F210AE4027766F57A4C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:f1:6c:2a:83:10:77:b5:d4:8c:a2:10:b4:
                    f1:10:08:57:0d:64:79:5b:9b:53:11:07:ab:7a:49:
                    44:15:87:a3:72:60:d6:d7:c7:f7:ac:47:bf:f4:25:
                    36:84:df:bd:59:9f:1f:5a:c7:fd:20:7f:9d:63:16:
                    2d:76:2d:0d:a7:6f:b7:87:96:9e:1d:97:cf:5d:21:
                    b3:f6:f0:8d:6f:db:67:c4:c4:eb:ac:b5:48:45:74:
                    f9:01:a5:12:00:a8:ca:c9:f3:28:ee:db:ec:e6:82:
                    9b:c8:3c:f6:0c:34:fc:24:a0:9c:b8:11:52:cd:d2:
                    c9:4f:f0:83:24:ec:47:89:fd:02:ee:77:6f:8b:83:
                    75:17:c3:45:61:ca:0a:d0:21:34:f5:a4:ae:e0:e6:
                    e7:4e:48:62:43:98:be:fc:ec:9f:70:ec:7a:40:29:
                    61:59:da:3a:d9:70:30:07:c3:51:95:e3:6f:95:60:
                    0f:0b:2c:6e:ad:93:9d:bb:4f:4b:26:39:e7:aa:7e:
                    ce:1c:c0:8f:e1:77:f2:0a:98:db:76:30:7d:7c:00:
                    6f:ef:3f:7f:d8:d8:f6:5f:66:f1:95:03:70:3d:b2:
                    86:dc:22:80:b8:36:fd:a2:4e:99:67:df:f5:59:1f:
                    04:60:26:18:e9:e4:b9:7a:e4:22:ad:93:48:e3:9d:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:83:13:FE:78:C4:BD:A9:71:D4:F2:10:AE:40:27:76:6F:57:A4:C1
            X509v3 Authority Key Identifier:
                keyid:4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:18:11:f5:cc:45:ff:6c:c7:f8:5a:61:5c:18:a1:1c:3d:
         25:01:42:d2:18:8c:29:89:81:e7:01:1c:78:e8:7e:4b:75:d9:
         40:9a:8b:4d:51:19:97:dc:b5:22:c7:77:6a:ef:35:c9:db:08:
         89:db:dc:15:2c:e4:ce:58:ba:2e:47:f2:8c:69:75:40:7b:39:
         32:57:a8:c5:60:3f:ba:a0:a7:77:25:0e:fe:45:c0:15:72:4d:
         28:78:32:e6:2a:3f:2b:a7:d8:a5:f6:d3:70:c1:45:a9:71:c9:
         1e:c1:7f:62:c7:89:f0:e3:a3:ac:74:23:34:7e:53:9d:db:be:
         08:99:a6:6c:d7:68:b3:ca:bf:af:43:b4:1b:c2:c4:97:2b:0c:
         62:76:8e:6c:f8:dd:a3:d4:a2:87:8d:6d:3d:3a:42:b4:53:97:
         34:de:aa:17:13:dd:6a:4d:76:e5:d6:d3:33:f0:a2:56:c5:c7:
         16:5b:2a:3c:1b:1a:24:14:36:b3:7e:64:f0:b1:98:9d:2c:26:
         cd:3d:e4:db:01:7e:a0:ae:9b:51:a5:aa:10:c4:7b:ed:a6:da:
         29:5d:74:c9:d4:f6:5f:e2:44:83:16:7b:45:39:a7:cf:46:e2:
         fc:2e:00:76:26:7c:f2:e4:0c:ec:bc:2c:86:b3:b5:0b:51:c1:
         26:53:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org