Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32342d3234203d3e20323637323731.roa
File:                     34352e3233322e3138342e302f32342d3234203d3e20323637323731.roa (raw, json)
Hash identifier:          23AaeRgJcDluHCRfEnjs0q3xQyQzmSAW7SzACewRKrQ=
Subject key identifier:   24:12:01:1A:47:23:0C:B2:49:5A:A2:25:2B:8D:61:ED:50:CE:E4:DB
Certificate issuer:       /CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
Certificate serial:       014D3B0C904D4EF421600C2352D283A108EE4D80
Authority key identifier: CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32342d3234203d3e20323637323731.roa
Signing time:             Sun 05 Dec 2021 11:34:14 +0000
ROA not before:           Sun 05 Dec 2021 11:29:14 +0000
ROA not after:            Sun 04 Dec 2022 11:34:14 +0000
asID:                     267271
IP address blocks:        45.232.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4d:3b:0c:90:4d:4e:f4:21:60:0c:23:52:d2:83:a1:08:ee:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
        Validity
            Not Before: Dec  5 11:29:14 2021 GMT
            Not After : Dec  4 11:34:14 2022 GMT
        Subject: CN=3082010A0282010100BE6CA1FCCD818A67D780B3B6997414046B8FB99D19132E37D573422972DE1104223DF31F92D42A5ABF7C76530B0E5A9813095DFBB0A342332BD5AD72872BE1AD935D11343EDA05A67084FAE857D9B758DE01EB5F4FE583E6A3F28E097F217C7E0E2F0CA9D699E0AFF7311A4D7C2B8099DDAD3DABE85A96BF8A55819CF73D16D73266F2CF67C2AA67E630B62CEECFCE00D224DF7A0A077CDF34B06FF8CC93AD0D9B640327860F6BE9D319EE145D793596D3DB316BE23029E80D6ABF33A2E63A4B655F09C4E4490630AA8FDC504DE447BAA160055D8DC59F54041BEA494E77270D20B97E622F959E533658A5049BD8FA38B33C7295880D20B73855962E673464650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:a1:fc:cd:81:8a:67:d7:80:b3:b6:99:74:
                    14:04:6b:8f:b9:9d:19:13:2e:37:d5:73:42:29:72:
                    de:11:04:22:3d:f3:1f:92:d4:2a:5a:bf:7c:76:53:
                    0b:0e:5a:98:13:09:5d:fb:b0:a3:42:33:2b:d5:ad:
                    72:87:2b:e1:ad:93:5d:11:34:3e:da:05:a6:70:84:
                    fa:e8:57:d9:b7:58:de:01:eb:5f:4f:e5:83:e6:a3:
                    f2:8e:09:7f:21:7c:7e:0e:2f:0c:a9:d6:99:e0:af:
                    f7:31:1a:4d:7c:2b:80:99:dd:ad:3d:ab:e8:5a:96:
                    bf:8a:55:81:9c:f7:3d:16:d7:32:66:f2:cf:67:c2:
                    aa:67:e6:30:b6:2c:ee:cf:ce:00:d2:24:df:7a:0a:
                    07:7c:df:34:b0:6f:f8:cc:93:ad:0d:9b:64:03:27:
                    86:0f:6b:e9:d3:19:ee:14:5d:79:35:96:d3:db:31:
                    6b:e2:30:29:e8:0d:6a:bf:33:a2:e6:3a:4b:65:5f:
                    09:c4:e4:49:06:30:aa:8f:dc:50:4d:e4:47:ba:a1:
                    60:05:5d:8d:c5:9f:54:04:1b:ea:49:4e:77:27:0d:
                    20:b9:7e:62:2f:95:9e:53:36:58:a5:04:9b:d8:fa:
                    38:b3:3c:72:95:88:0d:20:b7:38:55:96:2e:67:34:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:12:01:1A:47:23:0C:B2:49:5A:A2:25:2B:8D:61:ED:50:CE:E4:DB
            X509v3 Authority Key Identifier:
                keyid:CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32342d3234203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:82:d3:97:45:b4:1c:1e:51:77:4b:5d:b4:4a:17:09:df:
         9b:1b:8f:82:d8:7c:44:0c:7f:4f:56:d8:ff:ee:28:7e:5c:17:
         f1:86:ca:1a:eb:71:09:cc:47:c4:47:c6:f7:b3:f8:4c:8d:84:
         7a:27:6e:4c:17:88:0a:5a:0f:4c:98:c3:d9:05:05:9a:f8:8e:
         4b:7a:20:33:cb:8e:28:08:6b:50:f8:bf:37:59:02:c9:25:ad:
         33:42:7f:82:89:e2:20:01:a3:df:21:2d:cc:08:b2:fa:6e:ff:
         a6:c3:f9:18:a3:85:36:6d:f3:1e:e3:76:80:45:6b:ee:26:eb:
         36:1e:6b:5e:31:b2:6b:47:1e:1d:8b:b4:fb:55:00:77:60:25:
         93:93:42:78:3f:84:bf:6a:dd:39:7a:a2:25:7b:a0:d5:07:79:
         93:9d:48:df:e3:7e:85:21:20:92:13:d9:b3:4f:0b:7c:6d:dd:
         f4:bb:c2:44:fc:dc:90:d0:5e:59:a2:28:b8:2e:68:48:29:c4:
         91:c8:e2:db:6a:cd:ff:cc:3e:c1:24:0d:c1:a0:94:99:3b:8c:
         24:c3:7f:b9:fe:49:d2:fb:a8:5f:fe:fd:5c:c1:ee:78:b0:0b:
         f2:f0:ec:c8:02:4a:75:64:c2:00:16:eb:4b:6c:b4:e5:ab:95:
         87:19:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org