Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3233203d3e20323636353836.roa
File:                     34352e372e3134382e302f32322d3233203d3e20323636353836.roa (raw, json)
Hash identifier:          r9G3xqYewY7aeGw308kT5kxpzQBbdoDXLEr3INK5H1U=
Subject key identifier:   86:0D:6D:6D:83:62:4B:47:A5:F6:A4:2D:38:20:6B:BA:DC:46:6D:E3
Certificate issuer:       /CN=E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7
Certificate serial:       05657A5F137461F44A72910E0ADE995AE28E9AB2
Authority key identifier: E1:2F:39:B2:CB:F3:6F:4D:1F:9D:52:03:A9:FA:87:ED:93:E0:C9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3233203d3e20323636353836.roa
Signing time:             Mon 11 Mar 2024 18:26:37 +0000
ROA not before:           Mon 11 Mar 2024 18:21:37 +0000
ROA not after:            Mon 10 Mar 2025 18:26:37 +0000
asID:                     266586
IP address blocks:        45.7.148.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:65:7a:5f:13:74:61:f4:4a:72:91:0e:0a:de:99:5a:e2:8e:9a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7
        Validity
            Not Before: Mar 11 18:21:37 2024 GMT
            Not After : Mar 10 18:26:37 2025 GMT
        Subject: CN=860D6D6D83624B47A5F6A42D38206BBADC466DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:ac:5f:aa:60:3e:c5:15:22:24:fa:db:bf:
                    fa:02:68:d1:e4:3f:6e:f2:2d:2f:76:64:3e:ac:f4:
                    20:1c:c6:d5:8d:88:10:ce:9c:50:f6:af:73:89:1a:
                    35:a1:75:4a:d6:b7:49:0e:2b:e4:a7:d3:ed:50:5f:
                    72:d9:b0:f5:5d:40:3b:0f:b9:42:bb:7a:cb:f8:d3:
                    00:25:2e:ec:73:2b:79:e2:16:5f:d7:f0:c7:58:62:
                    35:d1:1f:bb:54:08:64:f4:92:a8:09:7b:ee:31:20:
                    d4:db:1f:a6:8e:30:27:23:c8:93:74:b1:3c:b2:9a:
                    77:19:20:28:2b:ad:33:5a:99:9f:8a:d6:74:38:ff:
                    80:70:e4:57:d0:74:a0:c9:12:bd:91:ab:c8:3d:f7:
                    7f:9d:2d:99:7d:cf:db:cd:03:30:d3:b0:69:bc:65:
                    04:4b:9f:f8:e1:66:5b:0b:c7:83:a6:8b:4d:aa:62:
                    13:1d:ec:ab:b6:61:0e:c4:9f:de:19:87:53:05:27:
                    bc:21:e9:a8:a0:d3:72:3d:ee:89:df:12:a0:5f:7c:
                    34:a4:8c:b7:45:87:93:d6:2d:59:03:50:24:e5:c3:
                    c0:57:f2:81:2f:42:c4:61:d1:63:c8:01:1b:da:de:
                    b2:08:79:93:0a:5e:73:f0:54:af:bb:62:70:3e:25:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0D:6D:6D:83:62:4B:47:A5:F6:A4:2D:38:20:6B:BA:DC:46:6D:E3
            X509v3 Authority Key Identifier:
                keyid:E1:2F:39:B2:CB:F3:6F:4D:1F:9D:52:03:A9:FA:87:ED:93:E0:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3233203d3e20323636353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:27:a5:d6:49:6e:9c:be:50:9c:8d:f5:83:4a:59:65:18:
         bd:6e:9c:80:a4:9a:39:40:49:5a:7f:2b:57:46:a4:3b:14:e4:
         e2:a2:8b:5f:9c:b0:a6:ae:b0:fd:9c:8d:55:fd:61:8b:a5:a6:
         d3:f8:78:4d:08:b1:d4:38:84:41:9e:0c:17:12:a0:e2:72:0b:
         f0:90:05:70:ca:53:8b:07:47:c7:73:5c:c7:51:63:61:4e:ef:
         a2:77:1b:77:01:1a:11:c1:97:18:e9:67:bf:dd:7d:e6:f4:f9:
         99:f0:1b:d1:34:90:a0:50:c1:4b:53:e8:34:e1:76:51:a8:3b:
         d3:4d:3a:b0:56:a5:c8:cb:e8:b5:4e:a6:e3:4b:59:81:ea:3c:
         d7:4c:73:8a:9e:8c:97:7c:5f:cf:b2:34:67:b8:30:59:3a:7f:
         ec:9f:f7:08:a6:3f:f3:00:47:5b:36:41:c3:8e:33:c5:0e:61:
         f2:7a:ed:35:d8:99:6f:5d:2a:69:4c:2e:4f:2f:6d:d1:dd:cb:
         c1:e7:94:2b:15:5c:63:7f:1b:bc:c8:e3:28:b3:ba:a9:61:05:
         84:4e:cd:47:29:10:cf:30:ca:11:18:cf:b1:04:e2:b8:98:33:
         d0:6a:5f:62:a0:f6:bd:6a:09:86:37:44:b4:3e:09:27:0e:1a:
         52:4f:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org