Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138362e302f32332d3233203d3e20323638353132.roa
File:                     34352e3136312e3138362e302f32332d3233203d3e20323638353132.roa (raw, json)
Hash identifier:          lkux/20tCQCrWLPYz2vmK5nZAfgShLKy6TbBAQihmRU=
Subject key identifier:   EE:67:75:03:4E:91:0F:02:5A:51:5E:53:DF:41:17:1F:25:41:9F:4E
Certificate issuer:       /CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
Certificate serial:       3918D348D07F95FBFBB770D71ADBE9BF915B50A9
Authority key identifier: EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138362e302f32332d3233203d3e20323638353132.roa
Signing time:             Wed 08 Mar 2023 17:00:02 +0000
ROA not before:           Wed 08 Mar 2023 16:55:02 +0000
ROA not after:            Wed 06 Mar 2024 17:00:02 +0000
asID:                     268512
IP address blocks:        45.161.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:18:d3:48:d0:7f:95:fb:fb:b7:70:d7:1a:db:e9:bf:91:5b:50:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
        Validity
            Not Before: Mar  8 16:55:02 2023 GMT
            Not After : Mar  6 17:00:02 2024 GMT
        Subject: CN=EE6775034E910F025A515E53DF41171F25419F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:c5:fc:75:4f:f3:85:a6:40:6f:cf:f7:cd:
                    8d:65:e7:fd:e3:3f:9c:21:c6:a9:d8:6e:90:1c:33:
                    8c:95:05:07:9f:3c:29:ef:69:c1:49:b9:97:16:3c:
                    2d:61:0b:97:a8:db:ef:a4:c1:e2:2b:a5:f5:9c:b5:
                    e1:55:76:b4:b6:90:7e:2f:cd:38:94:10:be:ec:52:
                    13:31:28:92:de:47:23:52:e9:ce:ec:37:e0:2c:54:
                    42:7d:13:b5:36:6a:ff:72:34:78:84:fb:5f:c7:9c:
                    6c:63:a2:fb:ec:e4:7a:2e:68:56:3f:75:da:77:be:
                    1e:22:0e:7e:a6:d8:d2:ca:b2:3f:0d:ca:6f:47:82:
                    0f:d8:86:c5:a6:27:8f:2a:f0:48:f3:bc:f5:2d:80:
                    fc:32:33:0b:b0:1a:1f:92:71:f9:3c:9f:c2:73:37:
                    4c:82:76:0a:9e:d2:eb:21:b1:7e:66:05:35:28:9b:
                    ef:0a:a1:ff:56:81:d3:32:13:71:87:2e:df:63:48:
                    30:7a:ac:88:c0:c2:d0:c2:b4:94:01:2c:6d:07:7b:
                    62:78:e8:cc:f5:22:70:6e:e4:7f:0e:8c:d0:9f:28:
                    a1:bc:13:a8:b6:25:5e:0f:0f:03:69:33:90:23:94:
                    e6:fe:b5:f4:f3:53:75:df:11:f7:6e:36:7a:15:91:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:67:75:03:4E:91:0F:02:5A:51:5E:53:DF:41:17:1F:25:41:9F:4E
            X509v3 Authority Key Identifier:
                keyid:EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138362e302f32332d3233203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:2f:cc:3e:d5:12:12:20:7f:8f:97:4a:c8:ba:05:de:05:0d:
         91:61:79:8f:93:59:f0:e0:b9:45:54:67:4a:6b:6d:fd:8b:a3:
         29:bc:27:5a:13:ef:7e:7c:86:15:c9:51:eb:b7:87:0e:22:86:
         0b:80:0f:c7:c0:84:24:78:4d:28:7c:63:29:8e:e5:29:79:bc:
         8e:a6:61:bf:7f:8a:3a:5f:f4:cd:89:03:f1:cd:db:0a:89:a4:
         a5:c3:aa:46:78:55:c7:c3:d7:0c:3e:a8:d6:ea:35:71:6b:8b:
         c0:70:15:1a:2b:c1:28:3e:aa:37:5b:c0:ab:24:cc:a8:fb:51:
         e1:cc:0a:91:d2:37:ca:e1:aa:34:d2:e8:0c:29:b1:86:30:47:
         94:05:4a:be:34:05:22:9f:e4:cd:9b:c1:5d:fc:4c:e1:de:aa:
         0c:16:ae:aa:75:96:88:52:c7:e1:48:81:a2:b6:43:a4:64:bb:
         cb:f0:4e:a4:b4:00:1a:25:6c:19:bc:7e:01:3b:42:53:18:80:
         49:ee:8d:1e:be:1b:11:4f:9d:6e:b6:be:b8:10:d5:16:84:40:
         f7:d9:2c:dd:41:74:bd:ce:26:af:0c:b9:dd:11:1f:14:5b:1f:
         e9:af:3c:ab:66:13:46:a0:ce:87:9c:a7:6e:58:d2:c6:2c:38:
         14:7d:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org