Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/34352e3138312e3131362e302f32322d3234203d3e20323639323231.roa
File:                     34352e3138312e3131362e302f32322d3234203d3e20323639323231.roa (raw, json)
Hash identifier:          xgGAA/O2xf+9o3JTPFlaA+UhM6DE+toqk0l9eBef7Ng=
Subject key identifier:   27:C3:DD:E0:90:A9:97:19:DC:41:67:EA:87:20:2A:54:E2:24:C2:ED
Certificate issuer:       /CN=EF7132FF02D9CBAC357BB2797F0CC7658B128897
Certificate serial:       155BF3B1A874DFC34195C5320DF1FEBE3547CB9E
Authority key identifier: EF:71:32:FF:02:D9:CB:AC:35:7B:B2:79:7F:0C:C7:65:8B:12:88:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/34352e3138312e3131362e302f32322d3234203d3e20323639323231.roa
Signing time:             Thu 24 Nov 2022 22:29:03 +0000
ROA not before:           Thu 24 Nov 2022 22:24:03 +0000
ROA not after:            Thu 23 Nov 2023 22:29:03 +0000
asID:                     269221
IP address blocks:        45.181.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5b:f3:b1:a8:74:df:c3:41:95:c5:32:0d:f1:fe:be:35:47:cb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7132FF02D9CBAC357BB2797F0CC7658B128897
        Validity
            Not Before: Nov 24 22:24:03 2022 GMT
            Not After : Nov 23 22:29:03 2023 GMT
        Subject: CN=27C3DDE090A99719DC4167EA87202A54E224C2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:03:ad:59:d8:d9:d6:0d:6a:cd:24:17:81:
                    f8:b0:b0:fa:49:67:12:31:42:8f:ff:99:68:4f:56:
                    6b:10:44:e9:cd:9c:c4:34:21:5f:32:0d:9a:20:bd:
                    ae:b2:c6:4a:62:50:a8:3b:09:ad:1c:f1:98:ac:2e:
                    f3:fd:cd:7a:0b:29:45:14:90:07:de:b6:1e:e0:0f:
                    f6:bd:fa:bc:2f:d0:85:9e:9e:ca:ee:56:3a:11:33:
                    2a:53:03:db:b2:c7:8d:a3:7c:78:6b:b4:76:8f:2e:
                    b2:8c:0a:c2:39:1f:90:a6:47:af:e1:aa:2d:4a:d6:
                    9a:e5:a2:f9:01:f0:89:e4:92:c2:41:31:2b:d3:01:
                    fb:52:9a:b6:b1:54:53:38:48:64:12:b1:b0:53:66:
                    ed:07:3e:25:25:dc:2c:93:d9:1b:51:88:ee:6f:75:
                    cd:08:2f:9c:4b:28:6a:84:83:f6:7f:6f:37:be:e5:
                    4f:3c:d7:27:6f:c2:f1:9f:e0:e1:b3:13:22:4c:d7:
                    4b:4b:78:7a:ae:a9:9e:bb:ff:9e:0f:30:57:e4:c0:
                    3a:fd:60:5b:73:c0:23:c2:07:0a:ad:1a:83:c8:65:
                    fd:1d:a0:da:65:25:66:7d:9f:ce:6d:98:04:b1:35:
                    b4:38:6a:1b:64:77:0e:0a:00:27:a8:4d:4a:07:c8:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:DD:E0:90:A9:97:19:DC:41:67:EA:87:20:2A:54:E2:24:C2:ED
            X509v3 Authority Key Identifier:
                keyid:EF:71:32:FF:02:D9:CB:AC:35:7B:B2:79:7F:0C:C7:65:8B:12:88:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/34352e3138312e3131362e302f32322d3234203d3e20323639323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:30:2e:4e:b5:a4:00:b1:63:2c:11:34:77:4e:2b:a0:e7:7f:
         8f:41:30:1f:fb:d8:9c:0b:cf:27:77:36:3e:f1:f6:8a:d5:35:
         fd:2b:57:37:37:49:93:64:4b:fd:8b:62:0a:dc:35:9b:cd:e9:
         c5:37:29:70:6e:ba:5d:c6:c5:b7:c3:43:bc:1e:40:43:92:e7:
         4a:9e:38:bd:eb:e0:ce:94:1b:03:5d:12:d8:8b:5b:75:ae:c8:
         28:b7:fb:e3:9b:00:29:a0:3c:4e:d5:85:e5:9f:bf:e9:51:0d:
         80:5b:7a:73:e2:44:17:9d:4a:f6:04:a6:d3:52:6b:8f:8a:43:
         6a:15:14:1e:cc:c5:2b:b2:1c:f3:53:3b:e8:69:1e:0f:6a:2d:
         7d:34:5b:d4:b2:0c:2f:1e:ab:da:90:70:33:de:46:1d:ab:a2:
         aa:fa:e0:cb:37:91:59:77:6e:cc:72:6d:ee:c8:69:18:82:eb:
         20:84:3d:99:40:62:ea:a5:41:0a:15:1b:c6:5c:f7:3a:dc:b4:
         4f:1b:31:37:f5:21:2a:4e:e5:e5:8f:ff:7e:4c:bf:cd:c5:5c:
         af:94:60:00:a5:59:84:1d:bc:0f:71:9a:e4:e4:d6:29:ae:8e:
         b1:20:98:87:69:ba:00:df:0a:5f:63:37:e7:f5:47:f5:76:3b:
         a7:3f:c8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org