Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139322e302f32322d3232203d3e20323636363037.roa
File:                     34352e372e3139322e302f32322d3232203d3e20323636363037.roa (raw, json)
Hash identifier:          6lGAVxOOKlrq683qWjlo2DJIG15v9MP6UEGReTB2cuE=
Subject key identifier:   A8:C2:0D:86:8E:B9:B7:E5:7C:B8:79:B9:E2:C9:AF:BE:91:F8:1E:4A
Certificate issuer:       /CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
Certificate serial:       264E3E88CB3665F6849FDBB76BB1F015920C12A6
Authority key identifier: 52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139322e302f32322d3232203d3e20323636363037.roa
Signing time:             Thu 23 Nov 2023 00:34:48 +0000
ROA not before:           Thu 23 Nov 2023 00:29:48 +0000
ROA not after:            Thu 21 Nov 2024 00:34:48 +0000
asID:                     266607
IP address blocks:        45.7.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4e:3e:88:cb:36:65:f6:84:9f:db:b7:6b:b1:f0:15:92:0c:12:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
        Validity
            Not Before: Nov 23 00:29:48 2023 GMT
            Not After : Nov 21 00:34:48 2024 GMT
        Subject: CN=A8C20D868EB9B7E57CB879B9E2C9AFBE91F81E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:ed:2b:0f:f5:2a:a9:db:44:f4:0d:97:43:
                    e5:2b:9c:1b:c3:03:14:aa:fd:07:d1:9e:84:0b:33:
                    f9:ee:4d:07:95:c9:cb:4d:ba:75:4c:1c:42:b0:0b:
                    7b:90:9b:1e:2b:82:5f:f1:3a:1d:ba:72:d2:b1:82:
                    cd:02:39:ea:4f:75:71:fd:45:6a:f7:82:b6:1b:9d:
                    b1:3b:48:52:9f:de:13:17:6d:50:d8:64:50:e7:4d:
                    24:e2:15:b6:66:ca:84:d2:6f:08:03:c4:72:c1:2a:
                    14:f0:f5:5b:82:7d:fc:0e:4a:e6:e7:9b:d3:e4:4c:
                    89:6c:c7:2b:ec:01:f4:dc:8f:6e:d6:8c:eb:66:14:
                    e3:b7:b5:8c:c7:31:e1:07:8a:93:fe:5d:fb:86:ce:
                    75:f3:04:2a:b4:f2:26:36:30:9a:71:f8:e9:da:55:
                    3e:e4:41:1a:34:24:c6:82:49:1f:3c:77:99:71:e3:
                    98:36:35:6b:51:69:a3:3e:d3:3c:b5:a1:fe:cb:50:
                    80:85:d9:52:44:1a:33:32:96:91:1d:df:2b:83:3e:
                    6c:a3:74:62:84:b8:fd:09:13:22:af:ba:25:72:72:
                    49:72:d2:ca:f5:3a:2a:02:f4:2d:4c:ed:a4:26:4b:
                    41:48:32:82:86:69:02:a2:08:d7:8b:a9:55:ca:96:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C2:0D:86:8E:B9:B7:E5:7C:B8:79:B9:E2:C9:AF:BE:91:F8:1E:4A
            X509v3 Authority Key Identifier:
                keyid:52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139322e302f32322d3232203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:02:cd:b8:50:da:8c:c0:c5:f1:01:e8:51:91:62:78:82:ef:
         2b:95:68:11:83:ba:13:75:1a:55:b4:30:06:25:43:a4:ba:84:
         a5:0b:aa:93:c4:c5:d4:e0:8c:21:54:20:67:8e:35:35:75:75:
         4e:58:f8:0f:37:78:8b:b1:c9:7c:1a:ca:b2:8a:4f:de:36:1c:
         b6:77:4a:d8:5f:be:58:c6:54:d5:a0:ab:6d:a2:b2:2a:6b:56:
         29:b7:ee:f2:21:12:7f:7b:57:bd:b5:fd:f6:bd:84:6b:bd:cb:
         bb:ee:71:cd:08:9a:89:14:b0:82:15:8b:ca:e6:66:a5:8c:39:
         ff:98:72:b1:c6:12:03:02:80:3a:56:72:88:b6:14:5c:8c:eb:
         22:2f:f9:6c:37:ba:09:69:ec:b9:8e:e1:50:00:e7:f0:d9:09:
         75:b0:e1:3a:2f:f5:b4:74:25:38:22:2f:e1:a2:44:64:57:66:
         06:c1:65:46:4f:9a:c6:00:bb:7f:0d:b9:69:40:2a:72:56:f5:
         6c:54:9c:d9:55:6c:af:df:a3:7e:0a:01:39:7f:30:5b:3c:24:
         a3:f3:e2:8f:c7:fd:2f:6a:9c:b5:df:14:ef:f6:92:0e:02:05:
         8b:17:21:17:10:78:63:8d:1e:62:52:f4:dc:42:9f:ad:8d:20:
         a9:47:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org