Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132352e302f32342d3234203d3e20323637333734.roa
File:                     34352e3233342e3132352e302f32342d3234203d3e20323637333734.roa (raw, json)
Hash identifier:          AEWDdHrhJKrsClB9W6JNRwL68J244EP+FZrHvcCdfO0=
Subject key identifier:   51:C5:CF:38:31:A2:5E:B4:8C:2B:82:D1:DE:09:F6:14:08:DD:D4:01
Certificate issuer:       /CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
Certificate serial:       620BA2F1D082ECE9219830E5CA9D99AD848C435F
Authority key identifier: 4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132352e302f32342d3234203d3e20323637333734.roa
Signing time:             Tue 19 Mar 2024 13:53:21 +0000
ROA not before:           Tue 19 Mar 2024 13:48:21 +0000
ROA not after:            Tue 18 Mar 2025 13:53:21 +0000
asID:                     267374
IP address blocks:        45.234.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0b:a2:f1:d0:82:ec:e9:21:98:30:e5:ca:9d:99:ad:84:8c:43:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4A0721477259888D6F02D2C75DFB383DE34EB8
        Validity
            Not Before: Mar 19 13:48:21 2024 GMT
            Not After : Mar 18 13:53:21 2025 GMT
        Subject: CN=51C5CF3831A25EB48C2B82D1DE09F61408DDD401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:24:17:9b:c6:61:9f:08:4c:de:df:c1:c4:
                    9c:ed:e1:6b:56:93:f2:e8:f1:a4:df:18:3f:50:ae:
                    77:2b:a3:9e:f2:87:3d:6b:30:eb:99:c9:68:6a:63:
                    00:8d:1c:2f:01:6d:66:d1:86:b8:19:0a:e6:ec:0f:
                    eb:1d:0f:c8:a3:fb:58:44:93:70:0d:40:6b:3c:44:
                    19:be:23:40:9a:6c:06:ac:23:a7:5b:a8:57:1f:94:
                    d6:5b:11:13:47:4e:a8:0d:ae:bf:26:4c:56:a3:8c:
                    7a:d4:c8:34:c2:ac:98:90:15:07:f0:89:ea:22:b2:
                    ad:46:ed:e5:9d:af:3c:19:38:7d:d2:dc:76:db:e0:
                    c2:3f:d6:fb:1d:db:46:58:da:c9:ff:62:88:5a:da:
                    e6:ef:13:40:c1:68:cc:2f:d2:75:a4:f9:dd:f5:45:
                    2d:f9:75:88:ca:54:a0:ce:6c:d3:ef:e7:ff:59:3f:
                    64:bc:b8:89:6d:4d:7f:5e:69:1a:fd:b0:d8:35:2f:
                    b0:cd:7a:4d:d7:fd:9c:f4:f6:71:c6:12:cd:84:ca:
                    3d:f7:73:41:31:08:2e:40:f9:d0:2e:15:68:6c:85:
                    65:be:79:00:ca:f0:fa:ba:72:3c:23:39:34:99:59:
                    ae:f4:ef:2a:ed:6c:72:94:1f:f3:e4:81:a3:12:29:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C5:CF:38:31:A2:5E:B4:8C:2B:82:D1:DE:09:F6:14:08:DD:D4:01
            X509v3 Authority Key Identifier:
                keyid:4F:4A:07:21:47:72:59:88:8D:6F:02:D2:C7:5D:FB:38:3D:E3:4E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F4A0721477259888D6F02D2C75DFB383DE34EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132352e302f32342d3234203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:27:62:0c:e0:a9:6c:5f:f7:44:b1:26:55:b2:01:8f:90:
         4e:a1:84:cb:55:de:26:29:4b:6a:e1:22:b9:33:b1:fc:4e:0f:
         d1:90:ad:4e:73:2c:a6:ba:38:04:c5:ca:f0:9f:82:f6:73:1d:
         47:04:6d:79:49:0b:f3:be:26:6e:8e:3a:2c:db:a5:e8:31:f4:
         d8:ea:ee:cd:20:5e:e0:fa:1a:5c:00:3b:f8:52:36:ae:22:ab:
         2a:b8:a6:bb:92:1a:c2:f3:cf:49:3e:c0:9c:69:74:ff:08:da:
         ac:79:01:fb:f0:4e:03:9a:4b:fa:bd:6d:f6:a6:4e:59:60:69:
         76:b4:02:9d:17:d8:7b:d7:33:9c:7d:72:e3:18:d0:f8:9b:cd:
         29:de:10:69:20:6a:03:54:9d:df:4a:ea:26:cf:7a:ca:47:c7:
         91:2f:51:b3:21:c1:b5:83:92:08:b9:04:a0:35:c5:f8:90:95:
         45:ef:f5:df:7d:a6:9b:ea:30:62:bd:73:bd:08:49:a2:d2:ba:
         58:ef:52:55:11:3a:d0:b0:02:5e:9b:a5:b4:8a:b2:3d:69:b3:
         76:55:ec:96:de:b8:ef:83:f2:2c:63:91:e8:4b:41:7d:52:03:
         4e:69:90:f0:47:8d:bb:da:55:35:4d:8f:b6:67:fc:56:14:f3:
         c9:4d:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org