Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132362e302f32342d3234203d3e20323638373030.roa
File:                     34352e3136352e3132362e302f32342d3234203d3e20323638373030.roa (raw, json)
Hash identifier:          PuiFUAkiJUroOFEixgtpJYqFMRiaygnVD/huuCVfQ6s=
Subject key identifier:   C6:05:AC:37:DD:C9:37:82:8C:27:FC:F7:FA:A4:B7:18:58:F4:0A:57
Certificate issuer:       /CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
Certificate serial:       2A30CD4AEB0B00D3A4B0695A9340141F58904F86
Authority key identifier: 07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132362e302f32342d3234203d3e20323638373030.roa
Signing time:             Fri 12 Apr 2024 17:00:00 +0000
ROA not before:           Fri 12 Apr 2024 16:55:00 +0000
ROA not after:            Fri 11 Apr 2025 17:00:00 +0000
asID:                     268700
IP address blocks:        45.165.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:30:cd:4a:eb:0b:00:d3:a4:b0:69:5a:93:40:14:1f:58:90:4f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
        Validity
            Not Before: Apr 12 16:55:00 2024 GMT
            Not After : Apr 11 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:06:cb:38:1a:aa:01:13:3a:44:6e:eb:32:
                    43:f8:87:3b:89:a9:24:2f:6b:c1:09:83:db:49:b7:
                    43:ea:e5:d2:95:d2:a5:01:52:74:da:40:b6:f0:39:
                    01:01:20:dd:e3:e7:41:80:b3:40:d8:9a:b6:da:21:
                    0a:49:8b:7d:9a:a1:41:61:e8:85:51:b6:70:62:f6:
                    c1:e1:3f:c8:30:28:75:13:e6:58:85:bc:46:60:d4:
                    47:ed:09:95:16:14:ac:19:35:d9:67:7f:e0:9a:c2:
                    f2:54:4c:2b:63:5b:07:b1:44:9d:ad:2d:70:c4:25:
                    ea:30:d0:12:04:ee:79:e5:fc:16:0d:81:5b:f2:e4:
                    79:16:2e:cf:b7:1b:97:3c:a8:fd:b2:ef:83:a8:86:
                    d0:cc:03:81:2e:c3:31:67:fb:61:dc:69:b6:44:00:
                    c7:c7:bc:58:39:45:18:2d:c0:bb:4c:3b:bf:01:b3:
                    d3:5f:0a:43:c7:4c:0d:ce:fd:c2:f0:78:33:77:d2:
                    ae:2e:4a:90:c6:ed:d4:38:cc:c7:85:ba:b5:a7:4a:
                    51:3b:a7:6f:07:86:a4:b9:03:7e:12:a0:fe:a9:40:
                    d2:e8:16:ff:b3:db:a9:e8:a8:62:64:ad:a7:fa:c8:
                    5c:4c:fb:50:fc:83:57:07:60:ba:42:6b:45:5a:05:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:05:AC:37:DD:C9:37:82:8C:27:FC:F7:FA:A4:B7:18:58:F4:0A:57
            X509v3 Authority Key Identifier:
                keyid:07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132362e302f32342d3234203d3e20323638373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:23:a4:5f:ee:00:0f:5d:b8:bc:e8:70:dc:0f:c6:94:c3:
         f1:01:5f:eb:7d:12:f6:d3:c9:f5:04:38:6a:d3:64:09:82:97:
         f1:38:74:97:52:6b:6e:8a:4d:13:21:ed:c7:76:e3:7c:c6:bc:
         aa:e2:d7:f3:42:e0:36:89:72:21:c5:13:3e:0d:b2:51:55:e3:
         fe:b6:f6:1e:53:71:9a:02:41:62:fb:20:32:d7:19:00:a7:a3:
         8e:da:00:d0:ab:d8:73:e3:8d:75:ee:42:d9:c1:37:9e:45:e1:
         e1:d7:4f:f1:53:c1:cc:2e:b3:b9:2f:1f:44:99:ed:6e:11:8f:
         62:50:77:08:d5:62:2c:1f:f8:e0:f4:f3:71:76:0b:9f:61:99:
         d3:63:61:cc:59:3f:71:9b:e1:4c:f9:52:ef:b8:00:c4:90:d1:
         93:ca:19:99:ae:72:60:0d:5f:7d:da:73:ef:68:0c:85:b4:b2:
         64:8a:32:2f:27:92:0b:2a:99:5f:d0:95:2a:d0:82:41:70:8b:
         0c:ca:a9:2b:cf:7a:b9:6e:a8:5c:72:4e:c6:8e:74:b8:14:9f:
         af:0a:f2:47:7d:1c:75:bf:1f:04:e8:e1:34:4e:72:e2:9d:27:
         e5:b5:ee:87:3a:ad:7b:89:28:c1:a3:3a:62:26:86:07:8c:0d:
         85:57:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org