Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32342d3234203d3e20323638313533.roa
File:                     34352e3137302e37342e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier:          D0BFxN4GEAu1kTObX7foartmQqDtm+jEtxN7MzAxbn8=
Subject key identifier:   F8:27:F7:68:32:D9:4E:DA:58:D7:0B:E5:81:F2:26:F8:22:F4:A4:45
Certificate issuer:       /CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
Certificate serial:       02223548570879E78D5B8C4E72D47FA618D1D17E
Authority key identifier: B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32342d3234203d3e20323638313533.roa
Signing time:             Fri 07 Jul 2023 16:24:51 +0000
ROA not before:           Fri 07 Jul 2023 16:19:51 +0000
ROA not after:            Fri 05 Jul 2024 16:24:51 +0000
asID:                     268153
IP address blocks:        45.170.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:22:35:48:57:08:79:e7:8d:5b:8c:4e:72:d4:7f:a6:18:d1:d1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
        Validity
            Not Before: Jul  7 16:19:51 2023 GMT
            Not After : Jul  5 16:24:51 2024 GMT
        Subject: CN=F827F76832D94EDA58D70BE581F226F822F4A445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:01:60:dc:74:1f:ad:84:b0:a8:30:9d:7c:
                    88:af:a6:f3:da:07:9d:63:8e:11:61:ec:09:b1:66:
                    a9:a9:2f:f0:c0:78:df:05:37:36:d6:e3:94:43:9d:
                    93:18:00:fb:03:26:35:bf:5c:49:a0:bc:95:be:0c:
                    f2:5c:0d:5c:87:62:66:c2:1b:5f:69:9f:c6:c6:52:
                    31:b3:a0:9c:96:8f:24:cc:d5:c0:e1:e3:57:7d:bd:
                    3b:d4:63:3d:7e:03:cf:52:bd:bd:c0:04:3a:ab:ec:
                    85:4a:50:15:77:d3:2b:f0:f8:51:48:30:bc:b0:a3:
                    a9:93:cb:2f:ea:a9:34:df:e0:b9:8f:91:82:93:3f:
                    0f:e2:9a:4c:2c:05:c0:df:63:eb:d1:ff:6e:0a:b7:
                    90:26:84:13:e9:19:00:9f:5d:9b:13:95:77:fb:8c:
                    32:f8:ea:ff:b9:e9:12:c3:9d:90:11:08:ae:49:4d:
                    f2:90:16:a7:92:ea:d6:f7:09:01:2c:ea:5d:aa:9a:
                    e0:dc:fe:84:08:ac:8b:76:fb:d2:13:c0:9b:94:d9:
                    cb:d8:66:3b:29:e8:91:39:9a:56:4b:be:21:ba:a6:
                    a5:2f:56:e5:a2:29:5e:e9:d4:fb:e9:a1:37:7d:62:
                    5e:59:5d:8e:e0:67:49:51:ea:f4:57:22:e3:90:4a:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:27:F7:68:32:D9:4E:DA:58:D7:0B:E5:81:F2:26:F8:22:F4:A4:45
            X509v3 Authority Key Identifier:
                keyid:B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32342d3234203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:29:e2:95:85:22:c9:f6:ad:8f:1e:bf:8e:9c:33:03:a5:d0:
         89:5c:9c:88:b2:1e:41:68:eb:ca:68:23:bb:24:54:51:54:33:
         6c:13:23:62:a0:97:37:d5:cd:5a:95:fe:71:a1:44:0e:46:2b:
         a3:9e:86:e2:23:88:cb:15:34:73:2d:d1:50:fe:71:24:1d:7a:
         8c:22:dc:d3:15:47:da:5b:33:44:90:16:49:1b:96:29:98:ce:
         f5:4f:8c:9a:fa:f7:cb:4a:89:75:6b:ae:83:15:71:b7:d3:55:
         d7:98:25:0f:88:85:26:f0:c9:9e:86:73:8f:9a:7c:40:f2:c4:
         c4:f8:38:d3:f4:3b:e3:83:66:52:c6:ff:30:c8:38:24:a6:dc:
         c3:fa:5c:3e:37:fe:5d:44:5c:57:b2:f4:d8:29:9c:49:d7:5f:
         d2:f3:84:a0:50:ae:2d:64:89:66:db:3f:d5:94:90:e4:a7:ee:
         67:a0:bb:19:ec:04:0f:9f:6c:bc:1e:e8:ad:b2:40:e4:b9:8e:
         22:8b:d0:65:07:4d:49:ba:af:20:02:0d:9a:8d:79:97:ff:ee:
         5c:ce:3f:8c:41:c3:aa:2f:b2:12:73:b6:68:e3:bd:6f:e0:da:
         e3:e5:68:f1:2d:2f:a4:b4:0a:f4:45:fb:9e:8b:85:12:a2:e9:
         ac:d1:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org