Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138342e302f32342d3234203d3e20323638353132.roa
File:                     34352e3136312e3138342e302f32342d3234203d3e20323638353132.roa (raw, json)
Hash identifier:          janPOh6O4PM3HQpnra8G5OhACXh7T6WpdqPLHT8TFc8=
Subject key identifier:   96:B0:2F:F6:60:F9:0D:7E:F9:17:DE:C7:5A:9C:9B:1A:88:A1:45:31
Certificate issuer:       /CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
Certificate serial:       210FF906111A903F4E57F122E3F284D758C2BA32
Authority key identifier: EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138342e302f32342d3234203d3e20323638353132.roa
Signing time:             Wed 08 Mar 2023 17:00:02 +0000
ROA not before:           Wed 08 Mar 2023 16:55:02 +0000
ROA not after:            Wed 06 Mar 2024 17:00:02 +0000
asID:                     268512
IP address blocks:        45.161.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0f:f9:06:11:1a:90:3f:4e:57:f1:22:e3:f2:84:d7:58:c2:ba:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
        Validity
            Not Before: Mar  8 16:55:02 2023 GMT
            Not After : Mar  6 17:00:02 2024 GMT
        Subject: CN=96B02FF660F90D7EF917DEC75A9C9B1A88A14531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:23:5e:97:28:de:9b:e3:36:95:64:26:f2:
                    56:15:27:d0:60:a0:13:22:30:93:5f:e0:46:ee:fa:
                    b6:8c:b7:39:ca:7b:f2:b7:0b:27:00:4a:4e:14:0d:
                    79:92:52:40:8d:f2:6e:7f:7f:2d:62:d9:8c:55:84:
                    af:3a:c2:26:38:a6:f0:8e:cd:02:a4:ca:71:1c:c4:
                    49:63:5a:cc:8c:0b:c5:46:b8:24:1e:3f:a1:1d:0a:
                    8e:15:05:16:67:f5:87:16:40:9e:b6:a9:6c:86:26:
                    a5:a7:ac:09:5a:d7:86:46:5d:24:a9:dc:54:e8:cd:
                    9c:20:bb:f0:07:f5:34:b9:3d:0d:15:2e:e1:51:af:
                    41:e8:a1:02:49:ed:fa:d4:3a:0a:8f:59:75:18:a6:
                    3a:7f:f8:f6:51:41:55:8d:ac:d4:75:48:81:3a:8f:
                    e7:69:f1:53:e8:e6:73:e2:d7:0a:c2:34:d0:13:43:
                    89:72:e2:62:10:7e:46:64:20:52:bc:81:4c:7e:8c:
                    3f:ad:0f:9b:e2:0a:72:3f:85:8b:da:0f:fd:fd:a7:
                    cd:23:f1:a1:92:6c:f3:d8:72:eb:a4:91:df:ed:39:
                    1f:27:35:44:6a:ed:e3:7d:fd:be:fe:80:d5:a1:6e:
                    bd:8b:ac:74:00:25:06:6c:39:b9:38:9d:71:81:fc:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B0:2F:F6:60:F9:0D:7E:F9:17:DE:C7:5A:9C:9B:1A:88:A1:45:31
            X509v3 Authority Key Identifier:
                keyid:EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138342e302f32342d3234203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:9e:50:5e:e0:6f:d8:c7:81:cd:41:2b:a9:11:72:7e:69:26:
         c3:4e:96:be:de:3c:b2:63:45:73:a0:fe:20:e5:52:61:f7:2f:
         b0:f7:fd:1e:1f:27:15:1d:df:20:c9:43:cd:00:47:5a:a4:42:
         04:3a:89:28:27:7b:86:2c:ae:86:0b:1a:be:ff:c1:53:03:e5:
         73:cd:61:74:e7:51:b9:c9:25:2f:83:97:b7:c4:ea:56:28:c8:
         b1:fb:c1:55:59:0c:b9:57:7a:c8:e0:43:85:20:d1:bb:66:59:
         c5:69:77:84:d5:cf:40:4a:5c:f7:91:5b:e9:a6:fb:0a:2d:37:
         27:d4:c0:91:c0:e7:99:5b:9c:6f:99:d0:3a:c1:52:81:e0:ee:
         9a:80:b5:af:ef:f6:1d:06:cf:94:b9:af:5a:ba:b4:1d:4b:30:
         0b:a6:ba:58:27:bb:50:fe:ad:6c:ec:21:e7:6b:4e:9f:91:8c:
         67:fe:fa:b6:23:09:47:83:30:b0:77:96:13:6e:0d:c0:cc:b6:
         9b:4f:4c:53:68:14:62:bd:1f:2a:e0:b9:05:62:f6:0a:35:37:
         f2:c5:e2:ce:21:37:96:da:94:1b:bf:a0:25:cf:89:25:04:89:
         12:a9:b7:94:39:bc:a0:51:36:11:c3:61:4b:87:0a:bf:43:85:
         97:fe:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org