Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa
File:                     34352e3232342e37322e302f32322d3232203d3e20323637363638.roa (raw, json)
Hash identifier:          1cYv/TPrQQmKUQosDj6gXlt+rfnHihqEMNFZxWINlcE=
Subject key identifier:   40:7F:90:4F:9A:58:7D:5F:59:3A:8F:1A:37:7B:CB:BA:B9:77:F8:F6
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       478357749D07D9CA833E9C0C27482E1A74FF6635
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:03 +0000
ROA not before:           Tue 13 Feb 2024 19:12:03 +0000
ROA not after:            Tue 11 Feb 2025 19:17:03 +0000
asID:                     267668
IP address blocks:        45.224.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:83:57:74:9d:07:d9:ca:83:3e:9c:0c:27:48:2e:1a:74:ff:66:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:03 2024 GMT
            Not After : Feb 11 19:17:03 2025 GMT
        Subject: CN=407F904F9A587D5F593A8F1A377BCBBAB977F8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:b4:2b:bf:a0:7c:8e:b9:d1:eb:b5:7b:86:
                    8e:64:41:5c:0e:41:b1:8a:8a:d8:e1:f3:70:c3:d2:
                    ce:0d:e7:1b:bc:38:44:7a:de:19:4f:d0:80:66:9a:
                    57:98:fd:31:67:5a:e4:5d:3e:39:49:ee:eb:07:77:
                    f2:32:17:80:8f:1b:63:2c:c0:3f:96:57:2a:fa:d1:
                    75:16:17:91:e1:81:5e:1f:0d:2e:21:c6:78:ea:88:
                    41:a2:ef:4b:a1:0c:3e:2a:e8:2b:92:70:f7:57:29:
                    c4:36:27:22:12:33:08:b3:e7:f6:03:4c:9e:07:cf:
                    bd:1c:ab:09:0f:44:f2:93:56:2d:0a:8b:73:9e:c7:
                    1b:53:5b:ad:4a:86:4a:0f:d5:17:30:9e:e3:0b:ff:
                    60:23:dd:ca:7d:81:73:35:dc:6b:30:4f:59:5d:42:
                    70:ce:a7:8e:2f:7a:a2:23:98:fb:94:35:e3:64:be:
                    15:4d:e8:c1:74:bc:28:f8:5e:87:1c:e7:d3:82:e9:
                    9a:3c:ae:d7:fb:18:1a:a7:27:70:07:71:77:1d:90:
                    db:d3:94:d7:6e:81:19:6e:8e:97:df:1b:6c:44:a5:
                    23:62:d1:c4:02:2f:7a:fd:7a:37:52:72:8f:9c:59:
                    69:00:ce:be:e2:04:29:c3:78:bf:f6:44:34:18:59:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7F:90:4F:9A:58:7D:5F:59:3A:8F:1A:37:7B:CB:BA:B9:77:F8:F6
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:b3:37:3e:8c:ea:e8:30:e8:39:08:02:31:4d:cf:2e:5a:
         25:04:72:45:36:95:f4:26:ff:5d:69:fe:d5:ce:e7:db:32:a5:
         e8:1a:f6:c8:89:36:71:41:7e:ed:17:c4:5d:a5:28:47:1c:d4:
         87:75:8d:19:02:a7:ca:65:fa:9b:da:7f:52:60:1b:dd:ab:96:
         dc:b5:65:a6:a5:2d:f5:d5:b8:9b:a0:d9:37:04:f3:c6:91:4b:
         42:9c:05:20:84:3a:64:3b:4f:2d:53:d3:1b:e9:76:29:91:aa:
         cf:e3:bb:91:84:d4:59:19:5f:1b:d0:f3:a7:5c:20:57:b5:8f:
         12:2e:ae:25:56:df:eb:e8:d9:03:07:c1:71:a3:3b:b1:bb:4c:
         8c:f6:5a:f7:50:75:0f:9a:3a:c3:1a:29:17:e4:12:e1:68:eb:
         60:4a:2a:ac:4b:4c:6c:8f:c7:ed:e3:03:ca:fe:d6:71:7a:6b:
         ed:43:14:fb:3a:2a:60:7e:cf:9e:33:ee:f2:c2:28:1a:60:2f:
         bd:a8:83:cd:41:3a:18:fe:c8:d4:63:b1:36:ce:a6:59:8a:fb:
         24:70:b8:2a:f1:dc:10:9e:7b:3d:4b:6d:27:81:3d:a3:50:5a:
         c7:f2:10:f3:23:ca:d6:09:16:bd:0c:b7:79:5a:07:cf:00:bf:
         30:7a:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org