Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32322d3234203d3e20323637333734.roa
File:                     34352e3233342e3132342e302f32322d3234203d3e20323637333734.roa (raw, json)
Hash identifier:          PqGq+kErsgtyBrf7+s0aUKZnKrrmUB/GBBI0xTykMng=
Subject key identifier:   EC:DF:85:7C:50:51:D7:91:09:4D:DA:60:17:B6:47:B7:69:95:6B:70
Certificate issuer:       /CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
Certificate serial:       705B73738D144F777E4DB68A718FA63D7685AF45
Authority key identifier: 4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32322d3234203d3e20323637333734.roa
Signing time:             Tue 12 Mar 2024 20:53:15 +0000
ROA not before:           Tue 12 Mar 2024 20:48:15 +0000
ROA not after:            Tue 11 Mar 2025 20:53:15 +0000
asID:                     267374
IP address blocks:        45.234.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5b:73:73:8d:14:4f:77:7e:4d:b6:8a:71:8f:a6:3d:76:85:af:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
        Validity
            Not Before: Mar 12 20:48:15 2024 GMT
            Not After : Mar 11 20:53:15 2025 GMT
        Subject: CN=ECDF857C5051D791094DDA6017B647B769956B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:ca:bf:29:f9:fc:1d:de:4a:fa:a0:0e:b4:
                    41:dd:60:0a:9c:62:7d:b9:5b:07:21:94:03:5e:d1:
                    78:56:d1:d9:aa:63:eb:e7:aa:eb:65:cf:52:a0:6b:
                    71:1f:d3:20:6d:fe:b7:ae:db:65:24:0c:f7:3b:8e:
                    63:6b:b6:df:69:31:51:2c:3e:cc:f6:24:3c:3d:48:
                    01:f4:70:cc:86:e5:2d:50:5f:36:2a:9a:e5:5c:6a:
                    34:f0:2c:7f:51:e5:9e:16:59:bf:3c:2f:d6:4b:ff:
                    54:1b:1a:95:5c:40:80:63:1c:73:05:8a:c6:b1:c9:
                    67:44:7e:a7:2a:b7:3e:30:68:25:0e:d8:3a:a6:19:
                    97:cf:ee:b4:80:0d:c2:d3:73:07:e6:d7:59:7c:04:
                    c7:aa:a7:49:cf:c4:01:c0:fb:42:c6:5e:a0:e3:75:
                    f4:ef:b1:8a:3e:e2:1a:8e:57:d6:b4:62:36:19:2f:
                    41:15:74:f7:aa:1c:1f:c3:0a:60:25:60:5d:63:9f:
                    aa:ae:a8:2c:7c:fd:47:a2:4e:03:d3:54:20:95:d2:
                    b5:77:4c:13:f6:c9:d4:02:b2:03:97:b8:cc:34:47:
                    c3:85:31:24:55:fc:9f:79:7e:9d:6e:3e:e3:1f:f3:
                    7b:d5:c3:13:23:1e:8b:53:c2:ac:42:ae:df:e5:3a:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DF:85:7C:50:51:D7:91:09:4D:DA:60:17:B6:47:B7:69:95:6B:70
            X509v3 Authority Key Identifier:
                keyid:4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32322d3234203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:9a:77:11:c3:ca:71:b1:49:6e:32:06:45:d2:a8:9f:fd:
         e5:6b:25:fe:2d:c9:06:cf:6f:a2:b1:bf:30:6c:e5:fe:c5:c3:
         d8:83:af:fc:45:7d:14:03:5d:64:64:d2:e5:87:7e:af:5a:4e:
         53:f0:69:b6:ef:2d:90:5b:ad:a7:6e:24:21:c5:5c:18:0b:48:
         04:e4:67:86:30:24:2d:a6:23:be:30:77:9b:83:af:e4:04:ec:
         7d:33:a1:72:8e:2c:38:bc:7e:8b:e2:45:e5:7a:97:df:c2:0d:
         d2:30:71:aa:b2:85:74:53:99:14:8f:68:12:df:76:a8:3c:24:
         34:d1:66:f4:30:df:24:d8:b4:47:3a:d9:f4:20:3f:e6:05:ab:
         1b:59:55:f2:c2:14:91:96:ee:c6:04:0e:55:c2:06:1f:7e:24:
         76:95:03:65:57:ff:40:1a:44:9d:3b:e5:49:39:b0:25:55:e9:
         de:fa:43:64:eb:2f:3a:1d:53:c0:33:1f:49:08:71:df:25:05:
         6e:24:19:cb:80:78:39:eb:a6:7a:bb:9b:95:25:a7:be:00:7d:
         e2:fa:2d:1f:2c:7c:ff:a3:57:ff:b4:fb:77:8b:75:79:6d:13:
         e6:d8:40:1d:10:07:79:52:39:5f:24:f9:4c:33:53:50:ae:b6:
         16:a8:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org