Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32352e302f32342d3234203d3e20323637343538.roa
File:                     34352e3138352e32352e302f32342d3234203d3e20323637343538.roa (raw, json)
Hash identifier:          ElJba8mdYMvlJdqoJcpj1R6BF7yfgN3G27rR4l9r0i4=
Subject key identifier:   25:2F:94:CE:E2:9E:E7:79:7C:4C:6D:D3:A8:B0:19:C9:35:6E:B1:84
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       199698B16F3682E068674A3CD336D2C3776E2BBF
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32352e302f32342d3234203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:36 +0000
ROA not before:           Fri 08 Mar 2024 18:41:36 +0000
ROA not after:            Fri 07 Mar 2025 18:46:36 +0000
asID:                     267458
IP address blocks:        45.185.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:96:98:b1:6f:36:82:e0:68:67:4a:3c:d3:36:d2:c3:77:6e:2b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:36 2024 GMT
            Not After : Mar  7 18:46:36 2025 GMT
        Subject: CN=252F94CEE29EE7797C4C6DD3A8B019C9356EB184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:a2:f7:13:d2:ad:79:f5:fa:10:35:0a:4c:
                    42:8e:56:0a:c4:60:ba:ca:99:33:3a:a7:b1:a2:ae:
                    4d:7c:fd:fe:dd:fd:ee:67:ce:9c:7b:c7:f3:da:12:
                    30:29:eb:48:c9:3f:7d:d9:97:9d:b6:d0:2d:a8:1e:
                    4e:e6:d5:08:1e:77:81:ac:87:22:14:29:37:46:98:
                    65:23:d1:63:82:36:26:0a:71:d0:76:29:66:95:c0:
                    02:cf:cd:91:30:ca:8a:d4:5a:8d:bf:a3:7f:2a:03:
                    0c:2e:68:7a:77:a2:99:63:71:ce:76:05:e6:fa:06:
                    8a:22:08:55:5f:bb:94:dd:2b:0d:97:f4:05:10:fc:
                    8b:b1:7c:33:8d:64:3d:9f:5e:4c:7d:da:93:ea:07:
                    31:70:9c:bc:13:8a:99:78:0d:cf:a5:d6:c5:ff:b6:
                    6c:b0:ea:ea:50:d0:7a:4f:fb:11:db:41:63:3e:b5:
                    66:0c:aa:49:83:1c:0e:d9:98:85:7d:32:ee:ba:c2:
                    17:20:5e:ba:1d:f4:7a:55:3a:38:28:47:8f:38:99:
                    0d:b7:54:a4:1f:4c:59:7d:bd:8d:e8:50:89:f3:36:
                    71:ab:fa:39:72:22:68:93:05:30:cb:ac:6b:94:23:
                    a2:13:8d:51:3d:a3:90:62:b5:82:af:ed:fe:77:6c:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2F:94:CE:E2:9E:E7:79:7C:4C:6D:D3:A8:B0:19:C9:35:6E:B1:84
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32352e302f32342d3234203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:81:2b:de:00:5f:04:4a:4e:40:ce:50:bf:a5:0b:c9:73:8a:
         a6:d9:86:f6:4e:06:ca:9c:0d:92:06:cc:43:05:40:ef:5f:20:
         1f:25:e1:2a:fb:da:9b:e7:49:69:26:32:c8:ce:00:c9:b5:10:
         d1:95:ef:1e:1e:3b:e1:01:b2:b8:3e:5a:69:f5:94:7c:d1:b7:
         ea:bb:4b:55:f3:fb:6c:06:aa:e2:d4:cd:71:94:ff:15:6a:d2:
         23:f2:0c:34:17:bf:20:28:90:32:01:22:7c:e4:1a:44:a6:d6:
         36:3f:6a:50:f8:b2:34:85:9b:a1:16:b1:47:a9:fb:2b:9e:39:
         f9:7d:34:13:0c:1e:e2:3a:27:d4:ab:e0:b6:28:ab:f6:cc:9c:
         55:48:67:fb:d1:77:06:ae:e4:3f:d2:4c:72:06:9c:fd:90:36:
         17:1e:b5:31:ce:8d:e6:14:2d:94:36:d8:d8:64:9b:52:78:c4:
         42:34:15:f2:24:82:ff:2a:62:db:14:ac:13:7e:19:ea:53:b6:
         56:49:ae:01:66:c9:85:60:7e:c2:c7:64:01:87:17:d2:d2:c8:
         12:ca:28:c4:7d:9e:29:99:09:da:1f:d4:4f:7e:82:81:59:ed:
         c7:49:e2:30:1f:fe:2c:39:4a:3b:b8:0c:40:f9:e2:99:21:76:
         1f:fd:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org