Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa
File:                     34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa (raw, json)
Hash identifier:          R2pD1KzKleHKEjnYm64sF2+RJQBI0IcAPEdkkWyy7bA=
Subject key identifier:   2B:1F:00:E7:DC:DC:5F:E3:7D:3B:01:80:6A:3A:89:CB:9B:CA:61:31
Certificate issuer:       /CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
Certificate serial:       5F9403D9246AFE0CFE421466E7AE72FAFE330CAA
Authority key identifier: 7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa
Signing time:             Mon 22 Jan 2024 13:01:53 +0000
ROA not before:           Mon 22 Jan 2024 12:56:53 +0000
ROA not after:            Mon 20 Jan 2025 13:01:53 +0000
asID:                     268134
IP address blocks:        45.169.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:94:03:d9:24:6a:fe:0c:fe:42:14:66:e7:ae:72:fa:fe:33:0c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC82F21C44E0FEBEB7E517156B48828DE283378
        Validity
            Not Before: Jan 22 12:56:53 2024 GMT
            Not After : Jan 20 13:01:53 2025 GMT
        Subject: CN=2B1F00E7DCDC5FE37D3B01806A3A89CB9BCA6131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:c8:d8:c3:55:11:dd:04:93:25:a0:80:ab:
                    b3:22:3a:3d:8a:4b:85:e3:9f:bb:8a:4a:4a:74:64:
                    af:b7:ec:72:aa:80:6a:87:4b:2f:15:80:7a:97:b4:
                    0b:f3:67:f5:a5:02:13:f3:73:3f:2d:84:c6:a5:9c:
                    4b:f2:0b:d2:57:aa:05:b9:9b:6c:36:20:45:25:5e:
                    36:28:dd:ba:10:36:0f:0a:8e:ce:6b:ee:66:d3:c5:
                    67:e4:0e:d5:2f:2f:07:c2:97:ce:d6:21:91:cb:fb:
                    d2:4e:ac:8b:b3:ba:d7:a6:d1:0d:34:8f:03:39:8e:
                    df:97:e2:24:39:ec:fc:4d:e7:99:3d:4e:61:8b:e7:
                    ed:3e:eb:cc:ec:2b:37:79:5e:00:27:09:97:3a:43:
                    2f:3b:8c:07:94:9b:6b:b5:ba:95:2b:ac:90:83:25:
                    44:42:cd:bd:21:5b:29:0b:94:06:34:76:e5:b8:75:
                    b8:16:6c:e0:43:ad:cd:a9:5a:30:d0:3e:02:fa:d1:
                    19:23:12:1a:59:63:b8:43:c9:37:46:56:a8:8c:bd:
                    7c:3f:d9:dd:78:ee:37:00:18:bb:b9:d6:15:91:80:
                    9b:ee:95:48:89:30:fe:81:88:fb:d3:23:15:1a:9c:
                    d7:29:4b:68:12:e8:fb:be:7d:3b:c9:e6:3c:98:e4:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:00:E7:DC:DC:5F:E3:7D:3B:01:80:6A:3A:89:CB:9B:CA:61:31
            X509v3 Authority Key Identifier:
                keyid:7C:C8:2F:21:C4:4E:0F:EB:EB:7E:51:71:56:B4:88:28:DE:28:33:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CC82F21C44E0FEBEB7E517156B48828DE283378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:36:46:4e:3d:21:98:59:16:1b:6f:66:0c:ca:62:87:d5:e7:
         9b:6c:5d:2c:c4:b1:4b:3a:22:95:63:26:b2:61:a6:fa:ea:6f:
         ec:8f:06:90:e8:fe:97:aa:9b:cd:5e:34:9b:a8:68:93:b2:42:
         95:d9:f8:70:fb:42:70:ca:05:c6:d5:01:a1:fe:df:02:cf:39:
         7e:c3:99:4d:ce:99:13:77:ac:5e:be:ae:72:2e:25:6e:47:4c:
         a7:27:09:99:b6:e4:b6:6b:b6:38:c1:0e:98:23:9a:a2:cd:c7:
         02:4a:7f:ce:76:38:35:32:28:95:74:f6:15:60:3f:d3:8d:a3:
         c5:b3:be:33:d9:9a:a8:c5:f7:14:59:b1:1e:3c:ae:6f:d5:74:
         a8:05:e6:27:cb:a5:2a:ee:6f:5c:f3:bb:6e:8f:ab:b7:0f:c6:
         b1:36:3d:3b:9d:bb:c9:24:b3:c8:76:7c:39:d2:7f:4c:af:41:
         df:2c:01:85:3e:1e:68:99:b0:a0:4c:94:be:95:6f:4d:3d:7d:
         0c:17:76:f1:d1:6a:e7:ed:9a:d2:10:27:66:e9:ed:9f:b5:b4:
         93:f8:1c:6b:83:e2:2a:4d:4b:51:0c:69:8a:8b:fb:8e:db:70:
         8f:45:8f:e2:1c:e6:2b:22:ab:2f:c4:b3:f3:4b:77:31:96:0d:
         bc:d6:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org