Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39362e302f32342d3234203d3e20323639353739.roa
File:                     34352e3138392e39362e302f32342d3234203d3e20323639353739.roa (raw, json)
Hash identifier:          g8Lt7VbGdbw68donJqdODxuSkp3DU8+J49SXH0EDS4E=
Subject key identifier:   11:E3:32:BF:8C:A1:16:B6:CB:0F:44:C2:1A:DC:47:F8:D7:B4:55:91
Certificate issuer:       /CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
Certificate serial:       1D6D338E426CB163EAE06CF19509D68759B7E23B
Authority key identifier: 7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39362e302f32342d3234203d3e20323639353739.roa
Signing time:             Wed 03 Apr 2024 18:30:02 +0000
ROA not before:           Wed 03 Apr 2024 18:25:02 +0000
ROA not after:            Wed 02 Apr 2025 18:30:02 +0000
asID:                     269579
IP address blocks:        45.189.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6d:33:8e:42:6c:b1:63:ea:e0:6c:f1:95:09:d6:87:59:b7:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
        Validity
            Not Before: Apr  3 18:25:02 2024 GMT
            Not After : Apr  2 18:30:02 2025 GMT
        Subject: CN=11E332BF8CA116B6CB0F44C21ADC47F8D7B45591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:c6:c6:9a:41:0e:f6:23:c8:7b:88:d9:86:
                    65:5a:d6:91:d5:f8:09:80:b4:4b:b1:36:1f:fa:40:
                    9b:4a:aa:41:63:29:f5:2c:63:4d:4c:20:3f:51:d7:
                    b8:ea:bc:f2:ad:f2:b3:e1:11:a1:c1:b9:4f:75:df:
                    f5:26:41:43:15:b7:6d:36:7c:6a:f0:f7:e7:d6:1c:
                    fa:1b:7d:82:25:d7:2d:5d:9b:f8:76:09:0f:8e:45:
                    1f:3e:e7:21:a9:f4:04:d6:f9:d0:3d:4c:6d:80:9e:
                    d0:9c:57:7d:b9:06:c3:ad:02:ac:83:8d:13:a1:37:
                    7e:1f:ce:bb:d2:95:5a:dc:da:3d:c5:c6:90:72:9a:
                    f3:65:22:a6:fc:97:bf:08:d2:15:f7:a4:05:e3:d1:
                    36:0a:6f:a6:18:52:31:81:63:00:94:82:c9:d2:2d:
                    85:df:ea:68:91:aa:71:3e:7f:42:38:9c:11:7e:6b:
                    09:39:8e:e2:0d:31:d8:79:1c:59:d3:55:bb:8c:44:
                    c0:0b:b9:e7:ea:49:5e:77:ac:4d:cc:19:06:7b:f9:
                    08:37:43:98:f0:63:46:4e:a2:00:ea:dd:d3:70:51:
                    b9:61:40:04:0f:f1:29:71:e1:40:56:70:1a:3f:06:
                    b8:bc:19:73:c1:40:19:33:fd:a7:b3:5b:c5:fb:8a:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E3:32:BF:8C:A1:16:B6:CB:0F:44:C2:1A:DC:47:F8:D7:B4:55:91
            X509v3 Authority Key Identifier:
                keyid:7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39362e302f32342d3234203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:40:d5:e3:a0:f3:8c:0b:16:ac:22:6c:5d:7e:5a:ec:bc:
         fa:4c:e3:f8:8e:18:71:83:df:cb:e9:8c:b9:8b:d8:39:da:6b:
         ba:d8:e0:26:9d:b9:0c:5b:24:dc:95:82:11:85:99:6c:2f:41:
         27:cf:f2:b8:60:9d:15:9a:63:e2:34:1e:6e:e0:df:f1:3b:20:
         4f:fc:4a:ec:85:26:db:9a:13:33:fe:e1:b6:22:96:8e:52:b5:
         84:95:ec:83:e8:c1:35:8b:8a:e0:6c:d6:40:e7:c4:55:cd:d6:
         bd:de:d8:be:c9:10:23:92:43:ef:de:ab:0b:37:fa:41:bb:56:
         b8:fe:2a:70:0d:15:0f:5d:b2:27:49:ab:c2:c8:a3:cd:95:b6:
         36:18:7b:2e:50:14:c7:fd:00:cc:7b:fe:44:09:0b:54:0e:9e:
         df:4e:1e:68:63:37:9f:05:bb:59:4d:dc:f3:76:e8:97:4a:1c:
         a9:86:d9:16:d1:66:42:a6:9b:92:cd:66:17:cb:da:b1:6d:28:
         69:57:6a:3d:db:86:e8:b4:6b:f8:70:a8:b4:98:d5:25:f6:8d:
         34:65:ef:15:17:d9:82:ff:88:33:d8:27:96:4e:cb:a7:ee:35:
         ce:e1:40:7b:bc:74:57:7f:3e:12:49:88:a1:a1:00:b7:b1:10:
         11:dd:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org