Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138352e302f32342d3234203d3e20323638353132.roa
File:                     34352e3136312e3138352e302f32342d3234203d3e20323638353132.roa (raw, json)
Hash identifier:          5ZDI80nAEkF6GRYhfQoav4Fp2xv6zOSs3VE0qOgyh2Q=
Subject key identifier:   76:C2:84:D7:9A:E3:66:37:37:13:A0:05:43:7B:B7:F0:57:39:68:1D
Certificate issuer:       /CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
Certificate serial:       62D8ECA913C7924C36F1C404ADC94700CA5D70EF
Authority key identifier: EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138352e302f32342d3234203d3e20323638353132.roa
Signing time:             Wed 08 Mar 2023 17:00:03 +0000
ROA not before:           Wed 08 Mar 2023 16:55:03 +0000
ROA not after:            Wed 06 Mar 2024 17:00:03 +0000
asID:                     268512
IP address blocks:        45.161.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d8:ec:a9:13:c7:92:4c:36:f1:c4:04:ad:c9:47:00:ca:5d:70:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
        Validity
            Not Before: Mar  8 16:55:03 2023 GMT
            Not After : Mar  6 17:00:03 2024 GMT
        Subject: CN=76C284D79AE366373713A005437BB7F05739681D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:64:1c:77:c8:39:9d:0a:cb:0e:42:9e:37:
                    1a:72:31:55:73:c7:d0:04:85:fe:d6:65:56:ec:2e:
                    c9:86:64:bb:ed:15:d2:b6:54:19:93:f5:86:bf:a4:
                    f4:d5:b9:66:97:9f:68:de:4c:b4:c4:e4:ea:b8:59:
                    13:7c:32:ef:a4:76:4b:c1:10:c9:4b:60:ac:94:92:
                    81:61:82:98:a0:0f:f1:a2:8f:f0:6e:38:11:eb:22:
                    53:c8:2a:fe:70:b9:b8:dc:5c:5f:8a:e0:98:79:56:
                    93:e9:26:6c:85:07:28:29:9a:68:c4:da:20:52:1a:
                    fe:09:ba:46:80:c3:30:09:32:d2:21:c8:f4:58:3f:
                    09:e7:23:4b:27:5b:ca:9a:b6:c6:99:bb:2e:2f:3e:
                    77:e0:aa:7b:c1:12:1d:50:f5:0c:db:e7:7c:b7:02:
                    ac:32:07:63:5c:39:c3:e4:e7:4e:4e:60:36:71:1a:
                    52:df:cb:af:c2:70:b1:3c:05:55:e3:3b:0d:20:9a:
                    b2:29:01:78:62:d7:1e:13:b2:7d:e6:ea:0f:68:90:
                    05:25:b5:a9:80:77:27:25:38:e4:53:68:89:7d:fc:
                    0b:19:ed:93:ba:dc:38:b9:cb:fb:c7:e0:55:e1:2a:
                    37:42:91:c9:9d:f6:8e:92:6c:3d:a0:d4:f0:02:20:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C2:84:D7:9A:E3:66:37:37:13:A0:05:43:7B:B7:F0:57:39:68:1D
            X509v3 Authority Key Identifier:
                keyid:EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138352e302f32342d3234203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3f:d1:61:48:f4:51:57:5a:37:7e:be:aa:65:42:72:51:1c:
         90:49:4b:51:e0:01:c9:8c:b9:45:f3:0e:b9:9c:1c:4f:05:f2:
         3f:36:e3:a3:c8:c7:5a:dd:55:6f:c8:64:c9:e5:26:5d:a9:76:
         7e:96:86:90:d9:32:1a:90:ec:4e:e1:00:18:6b:e0:9a:40:be:
         e6:6d:2a:32:61:03:76:b0:74:93:0d:64:70:a1:31:3e:82:6d:
         11:1c:b6:8d:ed:0f:6e:18:60:15:a9:db:ea:26:b6:9e:ac:85:
         b8:36:ec:b0:9c:d6:00:7f:44:d2:25:ee:37:9d:d6:69:55:c0:
         b7:62:90:50:ec:b4:aa:44:d5:73:61:23:49:47:82:6b:a2:79:
         c4:c0:58:04:b0:90:d8:72:42:96:79:c5:e8:51:28:2f:fc:8a:
         7b:17:84:e3:2d:22:e2:b9:19:f3:9a:c0:ea:7b:0f:13:bd:f0:
         3e:04:e2:33:ab:76:30:85:c4:96:4a:c6:32:f3:63:29:eb:ad:
         7b:c5:50:2f:e4:6f:3f:aa:c3:8a:4d:05:11:92:3a:07:01:ba:
         6f:49:dc:7a:05:45:a7:77:79:fc:1e:e9:f3:de:8c:5e:6e:4c:
         48:91:9e:89:8d:65:24:02:e6:15:a7:01:85:18:29:72:25:e3:
         c4:33:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org