Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138362e302f32342d3234203d3e20323638353132.roa
File:                     34352e3136312e3138362e302f32342d3234203d3e20323638353132.roa (raw, json)
Hash identifier:          vyB9eFR1SXj73ibHPWc9G4KMbCtUzazYGTIpMbx9NTk=
Subject key identifier:   40:6F:D7:1A:F5:DE:9A:9C:51:C0:1B:FA:02:97:72:B4:44:3F:D1:E8
Certificate issuer:       /CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
Certificate serial:       02F186EDD0BA092976B3ABD853B084D86B325BFC
Authority key identifier: EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138362e302f32342d3234203d3e20323638353132.roa
Signing time:             Wed 08 Mar 2023 17:00:03 +0000
ROA not before:           Wed 08 Mar 2023 16:55:03 +0000
ROA not after:            Wed 06 Mar 2024 17:00:03 +0000
asID:                     268512
IP address blocks:        45.161.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f1:86:ed:d0:ba:09:29:76:b3:ab:d8:53:b0:84:d8:6b:32:5b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
        Validity
            Not Before: Mar  8 16:55:03 2023 GMT
            Not After : Mar  6 17:00:03 2024 GMT
        Subject: CN=406FD71AF5DE9A9C51C01BFA029772B4443FD1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:72:09:cf:5b:da:1d:62:30:2c:80:52:cf:
                    98:1f:fa:14:d3:72:9e:d2:1e:08:b4:41:d5:7f:48:
                    5d:c3:88:90:40:aa:74:c0:00:52:00:4e:eb:6c:b2:
                    64:0f:d6:4a:7c:c4:11:33:53:49:4d:8d:0d:ba:06:
                    77:c8:c9:05:3c:a6:1f:4e:31:db:c0:9d:a7:c0:a0:
                    74:5f:db:c5:62:6a:c8:f4:34:13:1a:83:d0:cf:a0:
                    a5:43:f8:f3:a9:a3:56:63:d7:15:6f:39:6a:98:23:
                    61:6a:4b:bd:40:7d:67:26:c6:50:47:5d:84:b0:c7:
                    0a:85:3d:a0:73:b5:e9:4f:6e:89:a2:d9:d1:74:84:
                    e1:96:a7:01:90:26:88:36:3b:66:99:85:dc:5b:ff:
                    20:d7:ba:8d:df:16:e5:ed:a4:50:50:2a:16:93:7d:
                    97:97:0d:43:cd:e5:10:d2:f9:d0:55:a1:d6:41:76:
                    95:eb:22:a0:85:d0:af:70:1d:8b:ff:9e:26:59:98:
                    eb:77:e2:b6:a5:5c:65:74:c3:52:80:38:85:63:e7:
                    06:53:fa:43:40:88:7d:bf:b9:5e:07:cd:01:b4:7d:
                    9a:8e:8e:b9:cf:78:a0:90:92:a0:85:1d:6a:bd:95:
                    86:ad:c5:6f:b1:d5:f6:be:01:2c:a0:e6:95:60:a7:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6F:D7:1A:F5:DE:9A:9C:51:C0:1B:FA:02:97:72:B4:44:3F:D1:E8
            X509v3 Authority Key Identifier:
                keyid:EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138362e302f32342d3234203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f3:0c:8e:2a:a4:d3:b8:4d:f0:71:3d:d5:f3:7a:79:d5:f8:
         33:35:5c:46:d6:3a:d9:be:c7:32:03:96:d3:77:1a:a2:32:3a:
         ed:8b:61:57:96:7e:42:dc:83:47:d2:0b:05:bd:66:95:33:82:
         16:01:29:6f:3c:b7:73:b0:bd:ac:b8:45:26:f9:3d:9a:fe:27:
         b9:a3:f5:c4:18:b5:f9:7c:5f:e2:a0:bb:1e:50:b4:54:ad:e9:
         ce:90:e5:87:98:c8:c8:74:09:e6:9b:74:42:e5:0a:fc:ba:19:
         82:89:1e:de:61:1c:c4:7c:82:fd:8a:f8:7c:bf:12:38:c3:2f:
         2b:02:09:9a:ba:53:a9:52:94:10:a8:dd:94:63:44:ae:95:b6:
         19:aa:7b:fd:5d:be:f9:e7:f3:3a:61:5b:ea:f9:13:85:77:6b:
         ba:76:a8:63:56:aa:bc:d9:3f:73:ad:41:96:d6:2a:a5:51:95:
         75:e6:9e:c4:43:07:fc:95:4e:5c:25:9a:29:33:8a:e7:1c:55:
         98:08:fb:fd:45:6c:6b:f4:99:42:f7:8b:c7:81:50:50:a0:b1:
         76:6d:70:1e:f8:a2:79:65:33:3b:20:d4:5b:f4:d2:65:e6:62:
         ea:95:3d:90:ef:2e:96:6a:fb:cf:0a:91:82:c6:fd:f7:dc:ee:
         9d:16:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org