Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32342d3234203d3e20323637333734.roa
File:                     34352e3233342e3132342e302f32342d3234203d3e20323637333734.roa (raw, json)
Hash identifier:          I2kg6X6B8c/r+HCcrbdTKn8nAoEoCDjNFK7TJJp9+Ks=
Subject key identifier:   F4:6A:8A:D9:9F:73:8F:E7:71:7E:09:24:F0:83:7D:3B:EE:93:3C:DD
Certificate issuer:       /CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
Certificate serial:       38896D5D35422EC0A37035F375E867E02B4520E3
Authority key identifier: 4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32342d3234203d3e20323637333734.roa
Signing time:             Tue 19 Mar 2024 13:53:18 +0000
ROA not before:           Tue 19 Mar 2024 13:48:18 +0000
ROA not after:            Tue 18 Mar 2025 13:53:18 +0000
asID:                     267374
IP address blocks:        45.234.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:89:6d:5d:35:42:2e:c0:a3:70:35:f3:75:e8:67:e0:2b:45:20:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
        Validity
            Not Before: Mar 19 13:48:18 2024 GMT
            Not After : Mar 18 13:53:18 2025 GMT
        Subject: CN=F46A8AD99F738FE7717E0924F0837D3BEE933CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:30:fa:bd:a2:58:fc:ce:0d:9a:68:59:53:
                    3d:d2:f9:c4:d9:81:24:76:ed:ea:ec:96:39:2c:f1:
                    ad:5a:8f:ff:c5:a6:27:04:82:6b:0f:83:d5:cb:52:
                    6e:ab:93:c5:94:f8:d7:0c:1b:d0:c9:e0:7c:35:73:
                    dc:a9:06:8a:f3:be:5d:83:4e:06:83:d7:fc:f6:c1:
                    0b:17:b5:ae:5c:50:c1:f3:4e:96:ab:64:b5:c8:ef:
                    b6:87:e7:b2:23:8a:c1:9b:9b:1b:63:b7:ea:9f:54:
                    e9:da:5c:e3:9a:cf:99:f9:17:bf:10:fe:7e:b4:84:
                    f5:6f:3c:7f:5a:d6:a4:f5:09:57:30:97:82:24:95:
                    dd:ea:83:62:56:b5:09:77:88:36:45:4b:88:c0:b5:
                    80:84:dc:dc:0b:5e:1a:78:8b:5b:63:5f:f2:b7:98:
                    fb:cb:78:65:2a:51:71:64:31:f5:91:82:2e:99:ef:
                    2e:86:6e:f1:43:a2:fa:2e:1d:74:cf:e4:92:99:1e:
                    48:f4:4a:c7:fd:5e:51:9f:22:4f:9c:b9:e0:e4:e8:
                    6b:ec:6a:fd:f2:b1:c5:f3:7e:6d:2f:95:f4:6d:cb:
                    95:bb:bb:c3:10:08:5c:92:47:db:7c:ac:82:b4:28:
                    5f:58:17:d4:c5:c8:a0:66:4b:54:f0:28:f2:25:91:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:8A:D9:9F:73:8F:E7:71:7E:09:24:F0:83:7D:3B:EE:93:3C:DD
            X509v3 Authority Key Identifier:
                keyid:4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132342e302f32342d3234203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:61:b3:7f:e3:cf:13:c8:3f:12:de:ed:f3:61:e1:e9:ce:dd:
         15:72:9f:ae:cb:1b:d4:7a:4e:ef:bb:f0:69:00:aa:26:1a:54:
         c6:a3:5d:51:9a:43:0c:1e:df:d9:8f:09:2a:fa:45:18:e3:5f:
         eb:53:44:78:13:5c:7b:59:43:e2:ed:95:1a:93:81:0e:d5:36:
         a2:2f:90:2b:ab:14:53:ec:40:89:98:a6:a0:a0:a2:06:56:e9:
         7e:71:e9:63:28:37:24:d6:0c:c6:66:87:93:7d:ce:bb:b4:e3:
         cf:03:39:d5:b9:21:e6:25:dd:47:09:1f:06:fc:43:d6:62:a9:
         20:72:e7:58:ec:52:f2:3c:e1:cd:7d:21:d8:c3:d1:9b:b5:d5:
         09:e9:c7:61:5a:d2:1c:be:66:4f:a0:fb:c8:44:01:9b:1d:52:
         7d:f1:ac:34:54:dc:35:14:53:8d:57:39:3d:71:ac:7b:9e:98:
         22:15:a6:c2:d0:01:a6:ff:05:15:96:bf:67:9f:16:c9:24:13:
         ab:68:2d:60:4f:8b:25:31:ec:99:34:ae:72:da:23:fe:5f:a7:
         8e:5a:82:c4:75:18:96:7d:44:00:6d:55:75:23:05:f8:85:7d:
         bf:ed:81:27:51:19:b9:aa:3f:56:aa:58:13:36:00:77:7a:ee:
         de:88:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org