Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3233203d3e20323639323635.roa
File:                     34352e3138322e33322e302f32322d3233203d3e20323639323635.roa (raw, json)
Hash identifier:          LMpz7hTFREat7ywiu5pPr7Gb1/jwgnbQxFzGso/s040=
Subject key identifier:   71:AE:B4:5B:DE:36:3A:DC:EB:80:F3:72:AB:6E:48:E0:55:08:89:4C
Certificate issuer:       /CN=4F3EB243264337757AE7C38836C74B2C1E84AFB3
Certificate serial:       4949DC0B463860CCE3C5EA016875D90F44CDE30E
Authority key identifier: 4F:3E:B2:43:26:43:37:75:7A:E7:C3:88:36:C7:4B:2C:1E:84:AF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3233203d3e20323639323635.roa
Signing time:             Mon 18 Mar 2024 16:15:26 +0000
ROA not before:           Mon 18 Mar 2024 16:10:26 +0000
ROA not after:            Mon 17 Mar 2025 16:15:26 +0000
asID:                     269265
IP address blocks:        45.182.32.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:49:dc:0b:46:38:60:cc:e3:c5:ea:01:68:75:d9:0f:44:cd:e3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3EB243264337757AE7C38836C74B2C1E84AFB3
        Validity
            Not Before: Mar 18 16:10:26 2024 GMT
            Not After : Mar 17 16:15:26 2025 GMT
        Subject: CN=71AEB45BDE363ADCEB80F372AB6E48E05508894C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:62:45:c2:29:e9:82:7b:0b:de:34:f6:30:
                    62:f5:e3:6a:a0:d6:d9:42:16:6d:cd:28:f6:63:12:
                    04:c8:08:b2:73:f9:3b:9c:00:9e:d4:75:b3:2d:7f:
                    f3:b3:3c:fa:d9:24:91:d2:c3:0d:af:0f:9d:6b:2a:
                    02:f7:ea:e0:a6:41:63:c7:23:cf:94:00:f0:70:e4:
                    6e:84:e3:95:04:24:ee:5f:47:2b:6c:e9:fe:1d:43:
                    23:e3:e3:a0:c0:78:4a:6e:ee:b5:fa:7a:65:a3:5b:
                    ca:4d:24:81:8a:ef:9b:6b:3a:15:f6:da:04:cf:91:
                    db:77:d2:9f:d9:6c:e9:93:40:26:d1:a0:f8:87:bd:
                    a9:f9:aa:db:f8:3f:d1:22:38:6e:52:1d:90:35:2d:
                    77:c6:f1:92:ba:33:19:5a:b3:f3:1d:55:23:66:eb:
                    be:20:de:41:61:22:58:0b:33:07:cc:c4:1e:be:29:
                    b2:c1:0a:32:2a:7c:e2:b4:44:16:ca:e2:1b:18:ef:
                    43:f6:1b:17:21:a0:93:18:23:9f:a3:ad:3f:ef:b6:
                    c3:95:19:90:4f:6a:c1:90:87:9b:34:93:3b:72:65:
                    f0:fb:69:d0:64:5a:62:a2:e9:a6:94:a0:a0:14:7a:
                    c4:85:7b:f3:7a:1c:ca:00:56:54:52:49:32:69:ea:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:B4:5B:DE:36:3A:DC:EB:80:F3:72:AB:6E:48:E0:55:08:89:4C
            X509v3 Authority Key Identifier:
                keyid:4F:3E:B2:43:26:43:37:75:7A:E7:C3:88:36:C7:4B:2C:1E:84:AF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32322d3233203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:fd:d2:6f:3a:10:c1:02:5b:c1:50:c3:7a:4d:30:a0:c6:a9:
         56:d7:1b:15:bd:74:e2:73:f3:90:54:f7:64:45:50:41:d6:c2:
         b3:ac:cf:a9:1b:dd:c7:80:0b:b0:7c:bb:53:36:62:d5:7f:c3:
         49:73:37:48:05:81:30:ec:02:45:48:d4:e0:23:60:fd:c2:2d:
         2b:5c:ad:d1:57:b0:38:7e:26:ff:2f:88:57:a5:48:32:31:aa:
         53:df:47:4e:bd:e2:bb:4c:2f:af:5e:13:1b:82:f9:1b:04:6d:
         4b:a1:46:4a:db:5f:e3:8c:62:16:74:94:f1:16:e6:45:ba:e9:
         d8:1f:3c:69:2d:3a:dc:dc:60:a9:f6:ff:04:ff:27:4e:67:77:
         a7:4b:a7:27:a4:36:47:00:e4:b9:1b:e9:b5:a6:41:9a:e2:23:
         84:e4:66:00:a0:f4:9c:05:4a:4b:00:d7:cc:c4:56:aa:ee:23:
         98:27:2e:56:19:fd:8a:17:7b:7d:b7:6c:72:61:1d:8e:3f:8c:
         ef:02:cb:67:2e:aa:f7:bd:f1:be:f6:38:c4:0b:9a:5d:1d:a2:
         9b:cf:94:cf:a6:d6:1b:c0:fb:37:3c:cf:81:4c:75:79:9d:f8:
         99:aa:02:e6:32:50:22:34:e2:ac:75:9d:8d:58:65:89:4d:20:
         0b:c1:86:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org