Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa
File:                     34352e3138382e3132302e302f32322d3234203d3e203533303035.roa (raw, json)
Hash identifier:          krXz1uRDmFEV3PJFjLstzQJ8yV+7B2G5ZeJdIgEkzVY=
Subject key identifier:   40:89:00:77:12:8F:E3:53:15:AE:CE:4A:10:EE:2D:15:26:F8:71:E6
Certificate issuer:       /CN=7EB806F082666E29BA49287EB0A2DD4E03FCB7F5
Certificate serial:       43B935BCCC1B37DDF2713EE1ED04606F0662ED8C
Authority key identifier: 7E:B8:06:F0:82:66:6E:29:BA:49:28:7E:B0:A2:DD:4E:03:FC:B7:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa
Signing time:             Sat 10 Feb 2024 12:58:58 +0000
ROA not before:           Sat 10 Feb 2024 12:53:58 +0000
ROA not after:            Sat 08 Feb 2025 12:58:58 +0000
asID:                     53005
IP address blocks:        45.188.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b9:35:bc:cc:1b:37:dd:f2:71:3e:e1:ed:04:60:6f:06:62:ed:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB806F082666E29BA49287EB0A2DD4E03FCB7F5
        Validity
            Not Before: Feb 10 12:53:58 2024 GMT
            Not After : Feb  8 12:58:58 2025 GMT
        Subject: CN=40890077128FE35315AECE4A10EE2D1526F871E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:d9:45:ef:54:ee:10:28:26:57:cc:04:97:
                    5d:70:c5:85:b0:b9:26:25:b9:62:8e:38:4b:10:2f:
                    58:94:0e:7a:86:01:3e:ee:57:62:bf:e8:fe:ff:30:
                    d5:f9:56:14:f8:18:1a:b5:d5:1c:5b:d6:c5:c0:cb:
                    5b:f4:f3:64:d3:56:ef:3b:8f:69:b1:20:63:9f:f8:
                    57:9a:8f:81:cb:1c:00:9c:87:c6:b1:5d:ef:66:11:
                    79:d6:97:22:ab:3f:bf:dc:db:ca:d8:d6:b3:14:15:
                    de:c2:8d:a3:da:3d:a3:8e:90:cf:30:a0:2c:1f:58:
                    fa:e0:ca:a4:34:6b:6c:25:99:c7:59:ed:d3:38:37:
                    64:3e:d3:a4:b9:dd:83:e0:e0:29:47:f5:18:5a:00:
                    98:5e:0f:85:a7:e6:c9:86:2f:e2:e9:66:e4:b9:c5:
                    65:1a:73:10:1d:46:11:28:9a:c5:12:f7:1d:94:ca:
                    14:14:ce:cb:34:5a:c6:cc:e0:ca:ce:68:4d:a2:ff:
                    7d:5d:60:7b:83:d8:d8:3e:ba:48:26:4b:22:57:bf:
                    85:e7:10:9c:8d:b5:db:95:cb:3c:61:fb:a0:32:e8:
                    a2:a8:70:da:eb:f1:17:f1:ec:26:2e:7a:cc:aa:aa:
                    f1:78:dc:0d:9c:29:22:7f:83:2d:4c:94:8f:2d:ab:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:89:00:77:12:8F:E3:53:15:AE:CE:4A:10:EE:2D:15:26:F8:71:E6
            X509v3 Authority Key Identifier:
                keyid:7E:B8:06:F0:82:66:6E:29:BA:49:28:7E:B0:A2:DD:4E:03:FC:B7:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:e0:de:06:ec:00:83:fe:ac:47:29:de:a9:79:8f:10:fc:
         c0:b8:b9:41:31:2e:ab:72:da:03:ca:91:53:35:c1:73:41:09:
         7b:df:47:78:e3:71:d4:5a:53:f3:ab:43:9f:52:0a:7b:df:26:
         b4:40:62:20:7f:e2:b8:41:88:1b:b4:84:d0:76:24:2b:50:23:
         2e:6e:c3:d7:d0:63:e1:2d:21:00:6c:a3:2e:e3:ce:95:0a:02:
         63:2b:3a:63:5b:3d:a4:f9:e5:98:88:15:0c:f7:a3:03:f5:f1:
         42:a8:2b:db:b5:5c:34:7c:92:42:3f:56:54:42:c7:18:58:ac:
         9f:82:fd:c4:c0:79:c3:d1:8e:32:a2:23:8d:c7:3f:6f:d1:8e:
         af:63:1d:52:1e:0d:7d:ea:28:d5:9b:a0:7a:9e:89:8a:e5:62:
         2b:38:3c:99:e8:b1:64:dc:09:0c:9f:00:1b:95:b5:bf:fb:14:
         16:07:32:ae:e0:d0:b9:53:8a:a7:af:ed:df:a0:d6:e1:a9:5c:
         62:88:ee:ee:c2:b5:ef:9e:9b:73:00:f6:70:94:c0:b1:c0:35:
         d8:a4:84:33:f9:9f:d7:be:fb:02:6a:d7:28:6f:25:f2:2b:5a:
         1e:13:33:6d:61:45:93:4a:22:de:93:b4:38:be:8e:99:b1:93:
         8b:8d:c8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org