Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32362e302f32332d3234203d3e20323637343538.roa
File:                     34352e3138352e32362e302f32332d3234203d3e20323637343538.roa (raw, json)
Hash identifier:          7PoMV2co3KSA8GDmgJacyY26NniPW5hhw1yuv64eWSY=
Subject key identifier:   D2:16:99:EB:1D:49:1F:D2:DA:5B:F8:D1:7A:40:2B:8C:8F:02:30:B4
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       16684BF91C20F1516DCF5EDFC3F860689CBDBBAB
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32362e302f32332d3234203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:35:00 +0000
ROA not before:           Fri 08 Mar 2024 18:30:00 +0000
ROA not after:            Fri 07 Mar 2025 18:35:00 +0000
asID:                     267458
IP address blocks:        45.185.26.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:68:4b:f9:1c:20:f1:51:6d:cf:5e:df:c3:f8:60:68:9c:bd:bb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:30:00 2024 GMT
            Not After : Mar  7 18:35:00 2025 GMT
        Subject: CN=D21699EB1D491FD2DA5BF8D17A402B8C8F0230B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:e3:e5:98:50:db:f1:13:a4:9a:79:d8:e3:
                    60:e2:32:d3:06:ef:cf:7a:30:02:a0:16:56:50:d5:
                    01:59:7f:05:cc:ae:6e:75:5d:0c:cc:94:e9:d5:d8:
                    5b:92:e9:b6:9d:da:3e:e6:88:10:58:91:af:1e:6e:
                    55:4c:bc:07:d9:03:0d:52:57:20:81:c2:c7:06:cf:
                    cf:51:5b:71:d5:1c:f6:fc:4b:0b:bf:18:12:af:43:
                    1e:63:24:23:be:07:fa:c0:57:35:96:6c:5c:44:94:
                    13:88:cf:0f:ca:06:63:5e:ca:30:b2:78:f0:03:74:
                    fc:a2:62:df:be:b0:2f:61:cf:e3:1e:fd:32:f1:2f:
                    52:e2:44:4c:4d:a3:88:e6:4f:49:6a:1f:be:f2:a6:
                    66:cb:54:95:ca:1a:a0:f8:dc:b3:2c:3d:5b:13:69:
                    e3:71:d5:ce:3c:94:bd:33:b9:03:ba:a2:3a:6a:7a:
                    a2:6f:d8:f3:b4:3b:a7:5a:6a:5e:36:2f:e0:e8:85:
                    11:94:6b:5c:1a:6b:7d:db:92:58:05:78:2d:c9:df:
                    79:f6:c2:3d:2c:f3:dc:6e:23:44:61:59:65:33:ae:
                    5f:e7:71:79:de:f4:52:17:68:33:ce:40:cb:9b:95:
                    fe:f2:00:4b:6e:71:cb:88:a2:d2:ec:76:1e:eb:d3:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:16:99:EB:1D:49:1F:D2:DA:5B:F8:D1:7A:40:2B:8C:8F:02:30:B4
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/34352e3138352e32362e302f32332d3234203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:24:de:91:8a:51:ee:dd:e2:ec:3b:ad:dc:91:78:09:a3:
         28:db:ab:ae:f3:29:43:69:6b:d7:68:e6:3e:2d:35:31:14:3a:
         02:7f:35:35:f6:85:07:a1:49:49:a5:9b:30:4c:5c:de:3d:8a:
         30:b1:ac:54:08:a3:8e:f7:ac:d6:87:fd:c6:05:34:22:c4:c2:
         4c:5f:13:d3:55:32:1c:1b:57:4f:9e:f9:9e:4d:6b:fa:f5:0a:
         ea:78:94:4d:6c:34:d1:42:8b:5b:1d:41:27:c0:7f:48:7f:40:
         a1:a9:4e:7f:4a:c5:ff:05:df:39:6d:76:c2:ba:b9:e4:b8:44:
         a1:ee:a9:7b:90:07:06:16:d2:c1:ff:e2:f2:4b:d0:72:a3:d1:
         93:48:93:81:65:c6:ef:13:80:b8:3d:3b:7c:64:5f:80:35:75:
         a0:f1:01:ce:55:7c:39:0c:d0:6f:fe:11:09:09:6d:42:f6:af:
         c9:5a:8a:e6:13:88:63:0e:f9:c1:5d:2f:58:ee:37:16:87:d6:
         e6:40:d2:e1:ca:01:87:6a:cc:87:d1:2e:29:9b:8e:4f:22:63:
         82:4f:3e:22:35:7f:9d:0a:c8:ed:20:df:d0:ba:2d:23:75:c1:
         ad:91:86:77:60:3d:18:f9:97:17:0c:e3:de:17:8d:22:5f:29:
         9e:d2:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org