Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa
File:                     34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa (raw, json)
Hash identifier:          WZ5jkcc7sJsxjD6ooRbksNzfXftJCHpbv0WWgw4sQiU=
Subject key identifier:   B3:F2:F1:0E:A2:16:3D:4C:68:0D:D7:25:9F:6A:80:33:EC:C1:46:9F
Certificate issuer:       /CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
Certificate serial:       2DE652374B57D0EC3E038AF0C5330B5C0E467E52
Authority key identifier: 7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa
Signing time:             Mon 22 Jan 2024 13:01:53 +0000
ROA not before:           Mon 22 Jan 2024 12:56:53 +0000
ROA not after:            Mon 20 Jan 2025 13:01:53 +0000
asID:                     268134
IP address blocks:        45.169.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e6:52:37:4b:57:d0:ec:3e:03:8a:f0:c5:33:0b:5c:0e:46:7e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
        Validity
            Not Before: Jan 22 12:56:53 2024 GMT
            Not After : Jan 20 13:01:53 2025 GMT
        Subject: CN=B3F2F10EA2163D4C680DD7259F6A8033ECC1469F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8c:03:c3:3a:c6:a4:a2:08:ee:e8:1a:ff:f7:
                    3d:4b:dc:fb:c3:19:e8:09:2a:91:05:2c:78:9b:d3:
                    b6:93:01:9e:5a:a3:4d:f6:2c:3a:c2:e3:12:38:b2:
                    b7:bf:c8:63:13:db:bd:13:23:5e:08:87:a7:ac:80:
                    da:db:12:92:e4:8d:90:e6:79:b1:6b:ba:21:5e:96:
                    82:d2:20:20:1d:be:fb:a7:a1:e8:5e:98:4a:2b:7f:
                    30:a9:28:4c:8c:89:15:d9:c6:70:50:e8:26:77:88:
                    f0:00:0f:96:ac:cd:2f:dc:5d:32:0b:b4:48:44:96:
                    14:1c:c9:74:b4:40:60:0b:87:be:4d:ea:9c:83:a3:
                    98:1a:a5:e7:5b:7d:e7:56:3f:0b:c7:79:3b:b4:88:
                    3d:dd:df:30:a6:82:ca:23:f7:a4:b4:e7:41:f0:ee:
                    08:17:84:fb:7a:c5:b2:de:27:3c:bc:36:80:78:94:
                    9a:31:6b:a7:73:8e:39:cc:b6:4b:76:b5:49:d0:ca:
                    ca:c7:a2:f4:d9:02:e4:4d:ea:ec:ce:5a:ef:8b:9c:
                    9a:1f:9b:1f:8f:63:10:e9:58:a4:05:6d:cf:2b:44:
                    13:09:a1:4a:50:05:a0:39:ac:dc:f7:e9:12:33:50:
                    2a:dd:f9:91:13:11:3b:dc:a2:d5:a6:e5:01:38:66:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F2:F1:0E:A2:16:3D:4C:68:0D:D7:25:9F:6A:80:33:EC:C1:46:9F
            X509v3 Authority Key Identifier:
                keyid:7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:ab:e4:42:86:14:8d:c7:15:d1:0a:f8:be:68:6f:4c:19:
         a5:7a:72:c6:2a:ed:bc:8a:b2:c6:58:ec:c1:93:01:e7:96:54:
         0c:85:72:b3:76:a2:d2:21:71:54:b9:06:d4:02:4e:a9:d8:62:
         61:2e:2f:f3:9e:3f:4b:09:e9:8e:35:89:06:24:e4:a2:53:52:
         e8:e6:3b:46:2a:c2:35:8c:45:39:40:57:bd:32:be:b2:8f:e9:
         18:a2:7f:b2:1b:64:4f:58:fb:a4:08:b4:67:cb:94:db:2b:b7:
         ca:4b:58:4e:62:75:73:5f:36:cd:c2:6b:df:1f:a7:3d:f2:bc:
         ef:b3:1c:e8:2c:6d:60:0a:44:3a:d9:4a:05:90:38:38:c5:ec:
         2b:b1:77:45:a7:4d:24:51:14:b7:46:86:da:40:2e:8d:f8:a2:
         96:35:ed:82:86:30:24:c6:28:2d:9f:36:07:66:3e:a7:4e:6b:
         f0:74:2a:4a:45:03:0f:61:fe:c4:00:0c:f1:f0:3c:a3:1f:b4:
         83:32:f7:63:b4:05:82:d3:1d:87:3e:5e:f7:0c:1f:d2:29:4f:
         50:e3:f3:f0:23:c4:91:66:9e:05:b6:5d:9e:41:bb:9c:c6:1f:
         78:18:61:91:d3:ab:f2:35:38:4d:a2:35:85:77:ee:6f:f6:fb:
         74:b4:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org