Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32332d3233203d3e20323637333734.roa
File:                     34352e3233342e3132342e302f32332d3233203d3e20323637333734.roa (raw, json)
Hash identifier:          jGaDdPXSR3A8u3i87IQ2Rtug01WZ/ijqGWHou9A0rjc=
Subject key identifier:   21:EC:02:6B:9B:D7:23:54:7A:74:25:B3:29:69:8D:90:53:00:25:D8
Certificate issuer:       /CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
Certificate serial:       7D94B68065D5C092928C85A79BDE0B57DCB3E2E0
Authority key identifier: 4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32332d3233203d3e20323637333734.roa
Signing time:             Tue 19 Mar 2024 13:53:15 +0000
ROA not before:           Tue 19 Mar 2024 13:48:15 +0000
ROA not after:            Tue 18 Mar 2025 13:53:15 +0000
asID:                     267374
IP address blocks:        45.234.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:94:b6:80:65:d5:c0:92:92:8c:85:a7:9b:de:0b:57:dc:b3:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
        Validity
            Not Before: Mar 19 13:48:15 2024 GMT
            Not After : Mar 18 13:53:15 2025 GMT
        Subject: CN=21EC026B9BD723547A7425B329698D90530025D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:3b:e5:a8:75:37:9a:1a:a0:24:56:89:7d:
                    46:b3:bf:9b:7e:b6:64:60:35:9f:53:6a:79:67:80:
                    cd:29:c3:4a:c3:2a:c9:b8:a7:29:52:e9:fd:94:d0:
                    f4:af:0b:9c:9a:26:01:c5:6c:96:35:ab:e0:66:d8:
                    74:b4:b1:eb:bd:2d:01:9c:52:2f:36:5b:e9:27:01:
                    a9:84:79:ff:a1:51:ec:8f:a4:35:f8:66:21:36:84:
                    54:9f:07:74:e9:ad:9d:25:43:55:78:cd:ba:1b:d3:
                    a0:39:40:92:ad:c8:66:22:45:fd:3b:ea:86:c7:5a:
                    4e:0d:98:8d:af:b3:9a:16:cf:80:eb:76:88:d3:36:
                    6c:4a:45:93:c8:8c:a7:2c:1a:fe:05:62:37:30:4b:
                    39:06:4b:49:6c:50:fd:cc:e2:6f:fe:20:ff:dd:4d:
                    60:60:11:23:ce:9f:bd:93:5f:a2:f7:f5:0e:7e:2c:
                    63:f5:99:2a:7d:89:f0:db:8f:78:11:61:b3:35:92:
                    6b:cc:df:a4:5c:fd:b0:a8:5c:19:ff:24:f1:75:74:
                    a7:25:86:ed:63:15:a9:5f:42:99:57:63:77:5a:37:
                    ab:72:65:4d:19:75:31:bd:33:4c:f1:fc:60:8b:17:
                    3e:07:25:a3:48:f4:8c:f9:29:52:41:63:91:ab:86:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EC:02:6B:9B:D7:23:54:7A:74:25:B3:29:69:8D:90:53:00:25:D8
            X509v3 Authority Key Identifier:
                keyid:4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32332d3233203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:c1:cb:4b:42:52:13:eb:dd:de:b1:5b:3e:3a:21:38:1a:96:
         c7:22:66:04:4b:42:a2:88:d2:20:20:33:6e:07:46:30:3a:6e:
         5f:90:ee:e2:1c:a2:fe:70:dc:3a:15:0a:45:9c:f8:fc:af:13:
         53:1d:3f:b4:d2:93:61:e4:7d:22:98:c9:71:f0:6f:ae:8a:ae:
         29:21:a6:16:46:9b:16:51:c8:26:40:ce:c9:11:82:ee:99:f5:
         2e:f3:a4:5b:a1:94:94:3a:18:d8:82:08:37:06:ce:8f:a0:08:
         f0:30:23:cb:f7:bd:e7:e2:d5:95:a5:f2:18:18:23:fd:48:15:
         7d:c6:cc:e7:6b:1c:15:98:fe:1c:75:ce:62:66:b7:de:4c:8d:
         7e:59:96:87:b1:f9:7e:9d:23:b8:c5:0e:0a:9e:0c:be:cc:fc:
         ac:54:b2:65:80:96:71:0b:9c:d9:1c:51:7f:74:7d:7a:49:92:
         da:47:6d:12:5b:0a:f7:af:46:1a:a2:a9:6f:36:be:6c:5e:6c:
         9d:02:43:1e:01:fe:57:0d:8b:c6:b8:b1:f1:e1:d8:62:e9:a3:
         ad:89:4a:70:1b:56:d6:bd:35:3e:5e:c2:75:3b:71:c7:a0:3a:
         6d:3c:9e:7b:ce:4c:00:7b:9c:f8:74:4e:53:e6:d8:33:34:71:
         67:2a:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org