Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e2033333536.roa
File:                     34352e3233302e38342e302f32332d3332203d3e2033333536.roa (raw, json)
Hash identifier:          bkBJd8Id3mLEuP6YTI+H50PRJiJDLVOEnr31jhj126I=
Subject key identifier:   B9:78:08:0D:DE:1C:D0:F7:A3:7E:CA:E2:F6:F2:B6:57:63:09:82:97
Certificate issuer:       /CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
Certificate serial:       7EBE02A0A8D041E344287602B7362521E0D21AE0
Authority key identifier: 7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e2033333536.roa
Signing time:             Fri 16 Aug 2024 02:41:32 +0000
ROA not before:           Fri 16 Aug 2024 02:36:32 +0000
ROA not after:            Fri 15 Aug 2025 02:41:32 +0000
asID:                     3356
IP address blocks:        45.230.84.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:be:02:a0:a8:d0:41:e3:44:28:76:02:b7:36:25:21:e0:d2:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
        Validity
            Not Before: Aug 16 02:36:32 2024 GMT
            Not After : Aug 15 02:41:32 2025 GMT
        Subject: CN=B978080DDE1CD0F7A37ECAE2F6F2B65763098297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:db:c6:3d:e3:81:c9:94:ea:10:56:11:98:
                    1c:ce:39:ee:b3:d9:84:43:0b:fa:d4:2c:a3:23:93:
                    9a:d2:f2:40:98:83:bc:1e:f6:0c:d9:9b:75:0b:8b:
                    a8:0d:79:38:3a:28:de:34:f8:64:b6:4b:21:32:53:
                    a2:79:c5:ee:85:7b:17:cd:60:37:45:4f:13:7a:13:
                    89:54:c2:e7:1b:f1:03:38:c4:5c:25:73:4b:93:a0:
                    88:73:c1:aa:3f:3b:f7:e6:0b:f5:cb:20:2b:4e:6f:
                    15:82:3a:ad:41:3f:e3:32:f0:c6:63:4f:01:0e:78:
                    8f:8b:c9:6a:71:af:d4:5c:82:14:4b:27:22:65:94:
                    ce:7a:ee:68:7f:35:df:51:d3:14:d6:18:ca:b1:b4:
                    10:d7:c2:f1:8d:97:50:12:8f:5e:a1:cd:0e:e3:d4:
                    46:9f:b4:0c:36:e4:61:be:82:d3:31:05:35:4a:22:
                    1a:b8:c3:a9:da:ad:24:98:46:25:30:ca:35:ca:b9:
                    db:8b:9b:18:33:42:6d:97:bc:60:86:2c:6e:8f:7e:
                    df:16:19:c4:30:88:35:63:e4:ca:05:23:60:1f:82:
                    47:8c:f6:f8:34:53:6b:03:55:9a:e3:c6:01:f9:b8:
                    2d:2f:2d:45:a1:f8:e6:e8:fc:89:1c:04:07:e5:af:
                    f3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:78:08:0D:DE:1C:D0:F7:A3:7E:CA:E2:F6:F2:B6:57:63:09:82:97
            X509v3 Authority Key Identifier:
                keyid:7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:e2:9b:18:6b:f9:e6:bd:a2:48:0e:f5:f8:88:cc:c6:37:
         75:1d:d7:3c:d5:b0:40:5c:ed:d2:47:28:16:86:48:20:b4:2b:
         d4:7c:2f:5c:9a:b0:0d:43:7a:b8:75:2c:a9:a8:69:43:8f:c3:
         63:b9:e9:66:e6:a4:90:85:72:b4:f7:45:bb:8b:72:3e:15:5b:
         b3:b0:86:67:84:f9:7d:9e:7b:7f:1b:1e:64:15:df:d5:47:b7:
         43:cf:cc:f7:d2:d0:30:fb:c5:67:27:63:28:e2:e1:2e:43:50:
         72:e5:8a:ac:a3:d3:4d:6f:ec:99:03:cd:ca:d1:e0:6b:fb:1c:
         a3:0f:ff:d4:c0:63:f5:f6:4d:c1:7b:7b:04:40:b7:20:51:68:
         29:d1:75:25:46:aa:43:1b:89:a3:af:b8:8d:bf:f9:3a:01:8c:
         58:4d:f0:96:4a:4e:5e:8d:ae:e7:06:5d:17:48:3e:10:6c:95:
         8a:c3:f9:d8:4b:35:09:02:5f:a7:93:47:94:10:45:1d:8c:fa:
         ea:e3:cd:43:44:ef:c6:96:0d:86:b9:70:21:23:6a:73:ad:dc:
         4f:1f:17:0d:5e:c0:0a:c3:3e:00:a8:d7:6e:cf:3c:64:fa:98:
         56:3e:cb:c7:5c:4a:ac:6e:af:9a:7b:34:b5:8c:05:df:21:7c:
         6c:e0:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:11:11 2025 by rpki-client