Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132352e302f32342d3234203d3e20323637333734.roa
File:                     34352e3233342e3132352e302f32342d3234203d3e20323637333734.roa (raw, json)
Hash identifier:          FXr+NuQQmyGNsFCCvLLn96XAEB37WsNT1uwH3DfkNNA=
Subject key identifier:   D0:8F:88:B9:9C:28:10:56:9A:E8:DB:22:D2:08:23:6C:38:23:75:54
Certificate issuer:       /CN=2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101
Certificate serial:       716AA671CB80C1DAFB58358F3AEB220162C7000B
Authority key identifier: 2E:19:BD:9B:5A:5B:4C:20:BD:30:13:3E:7A:5F:5D:14:EF:7E:51:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132352e302f32342d3234203d3e20323637333734.roa
Signing time:             Thu 04 Apr 2024 11:25:29 +0000
ROA not before:           Thu 04 Apr 2024 11:20:29 +0000
ROA not after:            Thu 03 Apr 2025 11:25:29 +0000
asID:                     267374
IP address blocks:        45.234.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6a:a6:71:cb:80:c1:da:fb:58:35:8f:3a:eb:22:01:62:c7:00:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101
        Validity
            Not Before: Apr  4 11:20:29 2024 GMT
            Not After : Apr  3 11:25:29 2025 GMT
        Subject: CN=D08F88B99C2810569AE8DB22D208236C38237554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:5f:4f:df:0c:cd:f4:0b:b5:01:2f:76:ab:
                    8b:69:82:bc:0b:06:4d:0d:9d:cb:9d:f2:f9:1e:1b:
                    ca:81:f3:53:0e:35:c3:6d:bb:6a:79:e0:2d:10:0c:
                    e1:b1:85:28:8a:4a:e8:10:aa:6c:ea:ab:04:5d:43:
                    18:f4:ba:b9:9e:29:53:5a:e1:89:70:ef:11:51:2d:
                    2f:d2:f4:61:29:5d:e5:1c:9a:11:fe:7d:f2:61:7a:
                    a1:a8:bf:b4:6e:a8:b7:0e:79:a0:6e:0b:4e:3d:5d:
                    01:4d:00:d9:5e:9d:16:4d:df:79:a3:89:a4:ea:e2:
                    59:21:02:51:63:ad:cf:75:25:96:3f:af:8c:4d:b6:
                    bf:d2:8b:15:57:a2:66:9d:5a:39:fb:8f:93:3c:6d:
                    18:9a:c9:bf:2a:64:7c:a1:03:45:b8:fa:60:de:b3:
                    2b:f3:a3:25:79:77:25:30:6f:24:6f:0e:fe:56:be:
                    28:5a:26:66:2e:9b:bf:82:31:b4:ee:c3:ed:99:a2:
                    6f:1a:34:c3:4b:8c:ef:85:b5:c8:0d:3b:da:39:88:
                    7e:86:7a:d7:60:a9:7b:d3:5a:c3:e3:cc:2c:b9:10:
                    11:79:0a:ac:74:8d:53:4a:69:1e:65:e2:68:7b:20:
                    e3:52:57:a5:26:f6:39:d7:c2:f2:03:3a:98:c1:e7:
                    61:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8F:88:B9:9C:28:10:56:9A:E8:DB:22:D2:08:23:6C:38:23:75:54
            X509v3 Authority Key Identifier:
                keyid:2E:19:BD:9B:5A:5B:4C:20:BD:30:13:3E:7A:5F:5D:14:EF:7E:51:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132352e302f32342d3234203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e0:d3:74:8f:29:f3:5c:ee:79:8d:53:bf:bb:71:a0:99:da:
         c6:23:d4:0e:dd:18:3a:56:21:40:10:0a:60:a1:2e:de:d1:f7:
         c8:40:a6:d9:64:03:a9:9b:b2:75:fc:df:9b:69:cb:80:59:e6:
         af:2c:10:49:81:c5:e9:4e:69:24:17:ab:1f:12:1c:b0:93:1d:
         4b:f7:7b:16:a9:e7:0a:fc:51:ac:4a:bb:15:4e:26:fc:51:c6:
         cc:fe:b3:03:0e:35:56:38:3d:67:21:4e:f4:2f:71:6c:fd:ee:
         c3:db:8a:d4:19:27:66:3f:35:d2:a2:17:5e:83:9b:8e:2d:5e:
         25:20:3f:30:eb:a8:30:4a:e5:69:a4:9d:17:2d:4e:5f:a9:78:
         b1:32:43:15:4d:ae:7d:f0:1d:7b:b6:54:36:13:39:8f:4d:42:
         92:af:97:67:19:db:c2:95:4f:e6:ef:a3:45:c7:2d:e5:9a:9f:
         af:eb:de:6a:0f:36:3a:cd:9d:05:e0:5b:35:20:56:2e:39:dd:
         5c:12:c4:e0:b9:a3:56:c8:77:d6:56:5a:b7:b1:9b:f2:c5:5a:
         42:b2:6c:59:60:21:28:19:58:0b:bd:f2:82:1b:7b:4b:1f:fc:
         ba:6b:5f:9e:d7:20:ca:09:ea:37:39:cf:f2:ab:26:f2:32:c5:
         86:cc:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org