Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37352e302f32342d3234203d3e20323637363638.roa
File:                     34352e3232342e37352e302f32342d3234203d3e20323637363638.roa (raw, json)
Hash identifier:          Ij0QAqOzreJ8QXqVaxoBL9Qo3M3mStLSczg8n/AXBN0=
Subject key identifier:   3F:4A:29:08:3F:93:30:48:D0:64:A4:2B:9F:E9:23:7A:DC:38:C7:8D
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       3AEA638E70D78C28BA4CFF08876C1D9DD2979496
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37352e302f32342d3234203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:03 +0000
ROA not before:           Tue 13 Feb 2024 19:12:03 +0000
ROA not after:            Tue 11 Feb 2025 19:17:03 +0000
asID:                     267668
IP address blocks:        45.224.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ea:63:8e:70:d7:8c:28:ba:4c:ff:08:87:6c:1d:9d:d2:97:94:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:03 2024 GMT
            Not After : Feb 11 19:17:03 2025 GMT
        Subject: CN=3F4A29083F933048D064A42B9FE9237ADC38C78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:d7:25:22:a5:78:2b:77:5d:fd:ab:cc:bf:
                    32:64:44:53:2e:83:f5:fb:32:b4:92:a8:e0:40:d7:
                    b1:80:01:6f:c7:e6:4a:1d:28:59:e7:10:6e:9e:40:
                    d2:a2:3f:51:ce:bf:e7:92:84:17:c8:be:24:18:6d:
                    b0:00:fc:df:d5:65:c1:40:06:e1:b3:45:f8:e2:dd:
                    d4:56:73:bd:51:b7:23:7e:d0:03:f9:2e:b6:df:fe:
                    ef:ad:f9:89:8e:2f:78:0b:25:02:71:fd:6e:c1:2f:
                    33:c2:7b:7d:5e:c1:59:22:11:e7:23:79:e8:3f:f7:
                    0f:07:8f:a8:eb:4b:34:4d:43:d8:3b:1b:57:dd:75:
                    8c:a1:45:2d:0f:b4:8d:af:8d:37:33:4c:3d:63:06:
                    25:63:c6:9a:06:eb:b4:af:28:92:d0:1c:81:ac:56:
                    ed:b0:04:f7:1a:3b:0f:97:98:90:c2:8b:5c:17:b8:
                    ee:fd:74:ac:67:52:a4:90:ec:41:c8:fc:cf:90:ed:
                    91:64:11:fc:7d:d3:08:f8:69:8e:90:50:17:c1:71:
                    cb:da:b2:18:60:e7:01:6d:eb:54:1f:15:e9:36:1b:
                    ab:15:ca:26:6c:89:e4:c6:01:d5:c1:a1:08:11:b4:
                    20:d8:ca:1d:42:fe:88:37:21:f3:e4:3d:18:67:f6:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4A:29:08:3F:93:30:48:D0:64:A4:2B:9F:E9:23:7A:DC:38:C7:8D
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37352e302f32342d3234203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:52:89:e5:2f:03:b3:11:3a:a5:6e:5d:13:41:dc:50:37:
         0c:43:d8:dd:b3:66:89:a8:cc:db:d8:89:9b:96:6c:97:b3:7f:
         1b:bb:25:76:f8:c0:ab:45:76:90:f0:78:23:0f:51:bf:e0:0d:
         71:6d:30:8b:21:18:b9:24:8f:d3:13:df:4b:99:df:ea:39:d1:
         83:64:cf:a5:0c:f2:eb:a2:d7:ba:d8:5c:63:f1:df:1d:fa:bf:
         50:50:8d:66:9f:e3:85:7f:8f:b7:16:77:16:65:16:21:e9:1a:
         06:34:54:8a:74:e2:1b:47:d1:1c:29:c8:5b:c8:ca:f5:b8:a0:
         ea:9f:4c:47:ba:b5:6c:9d:fd:b3:41:3f:eb:6a:c6:98:d5:85:
         ba:a5:05:11:b1:b1:84:55:a8:5e:cf:a7:fe:93:2c:a1:00:ef:
         26:e4:01:df:4b:9a:30:df:da:b9:a3:86:2b:33:91:7a:3c:06:
         5f:1a:21:57:f1:5b:5d:a1:e9:3b:09:02:08:fe:b7:df:e8:63:
         1a:d9:93:42:10:45:42:af:23:8e:f3:22:3d:a2:ea:1a:8c:1e:
         73:f8:d6:58:84:d0:8f:f8:f6:42:09:b1:1b:0f:b0:ad:39:d3:
         0b:79:43:16:71:0f:a0:ef:9b:14:10:87:d2:8c:41:a4:20:23:
         53:0c:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org