Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32342e302f32332d3233203d3e20323637343538.roa
File:                     34352e3138352e32342e302f32332d3233203d3e20323637343538.roa (raw, json)
Hash identifier:          Be9y70BsxMunEmUH5N+SoirBROsknCXaTBgR1UEnhzg=
Subject key identifier:   71:ED:FC:0A:AE:9C:7E:64:CC:37:9F:20:DF:17:82:2E:7E:12:7F:F2
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       61E8E6328370A2F6E7D42AD6E8E1EFD10B7FC1AB
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32342e302f32332d3233203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:32 +0000
ROA not before:           Fri 08 Mar 2024 18:41:32 +0000
ROA not after:            Fri 07 Mar 2025 18:46:32 +0000
asID:                     267458
IP address blocks:        45.185.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e8:e6:32:83:70:a2:f6:e7:d4:2a:d6:e8:e1:ef:d1:0b:7f:c1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:32 2024 GMT
            Not After : Mar  7 18:46:32 2025 GMT
        Subject: CN=71EDFC0AAE9C7E64CC379F20DF17822E7E127FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:a2:f5:fd:49:67:bd:ca:bb:df:cf:89:a6:
                    08:67:63:ad:95:36:c2:2d:f6:61:65:ff:59:e8:ca:
                    54:6a:61:0b:c8:68:ab:0d:3b:b9:86:a6:c3:84:6e:
                    b9:2b:68:c3:4e:d2:f8:03:f6:8c:56:ed:d3:cc:7d:
                    ff:1e:e8:a6:c9:95:19:ed:95:2c:db:87:05:b2:48:
                    83:cb:19:b3:c6:7a:cd:cb:39:ee:1c:58:89:e9:10:
                    f6:47:28:8a:59:ea:f0:07:2e:58:1a:9b:e0:0f:73:
                    27:c2:54:23:8d:34:15:f1:e3:97:60:69:f6:7e:9e:
                    8d:96:48:30:c6:97:84:d5:1f:20:46:fd:ec:64:fe:
                    b4:cf:45:77:77:c2:67:0e:bd:1e:15:29:b1:cf:e4:
                    e4:97:ce:cf:b1:72:5e:a1:ad:44:ab:42:1b:0d:4d:
                    e0:6a:9f:d2:e2:3d:92:60:eb:ea:ff:12:8d:f9:31:
                    d2:27:07:91:ad:2d:7b:33:ea:ba:55:ec:da:f7:42:
                    eb:7f:88:79:c9:40:d2:48:25:50:83:4d:89:3b:53:
                    22:ff:53:d0:9e:fb:80:14:24:7d:45:61:f6:1a:56:
                    9f:ff:31:5c:14:22:34:52:09:64:6f:49:c1:1c:0c:
                    f7:8c:00:6a:6e:ed:5d:5f:19:e7:32:e7:dd:40:28:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:ED:FC:0A:AE:9C:7E:64:CC:37:9F:20:DF:17:82:2E:7E:12:7F:F2
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32342e302f32332d3233203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:98:10:e2:4c:57:44:59:14:60:c2:bb:b9:3f:53:c1:48:
         94:2b:0c:99:8e:81:b7:f6:e6:39:90:08:16:c8:9f:1a:3f:e4:
         7b:43:52:bb:8d:1f:d4:d2:b9:be:96:da:2c:8b:fc:06:bd:aa:
         ac:0d:b3:bd:71:a9:1c:ed:70:ea:a3:f3:84:b9:3d:06:a7:c6:
         26:b5:01:a9:8f:9c:52:38:ae:c1:0e:5a:3d:00:85:c3:89:d7:
         c5:d3:ef:62:79:a5:c3:03:79:71:0f:f8:29:a5:3d:e9:80:1a:
         15:52:2c:dc:fe:69:1a:9e:80:a3:74:71:85:f2:4e:85:8f:79:
         39:6d:fb:2e:1b:5b:00:6d:5b:e8:29:85:bc:87:27:40:2e:dd:
         09:28:da:02:b6:1b:26:9d:49:05:a9:8d:ad:6e:0e:de:97:e6:
         f3:8a:71:53:9f:f6:37:26:31:cd:c3:e4:5c:55:34:ff:b5:99:
         d1:cb:08:45:28:a1:14:2b:55:bc:0f:c7:ef:bc:6f:41:f7:35:
         c4:f5:3c:c1:4b:7a:42:cc:be:7c:10:7f:22:04:7a:48:99:6c:
         b9:82:ea:33:f6:71:e0:d6:19:05:f5:3a:b3:09:65:af:9d:08:
         aa:be:b0:0d:31:43:17:b3:ba:8a:2d:b5:4b:6e:e2:a0:7e:18:
         20:02:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org