Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa
File:                     34352e37312e3132382e302f32322d3234203d3e20323637363038.roa (raw, json)
Hash identifier:          CxiNjuDXGDeO4xOcDhi6ePlCH0j/B0zy+qZ0ArU8/VQ=
Subject key identifier:   C9:07:04:96:DB:C4:FE:BF:1B:62:9F:F2:88:BD:EA:55:87:36:27:F4
Certificate issuer:       /CN=E26E3E7776B89B74777CBD275007F950E7C388C1
Certificate serial:       6FB71ADEEFF3BD83B869FAFE48E252058F66DAEC
Authority key identifier: E2:6E:3E:77:76:B8:9B:74:77:7C:BD:27:50:07:F9:50:E7:C3:88:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa
Signing time:             Sat 03 Feb 2024 14:07:17 +0000
ROA not before:           Sat 03 Feb 2024 14:02:17 +0000
ROA not after:            Sat 01 Feb 2025 14:07:17 +0000
asID:                     267608
IP address blocks:        45.71.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b7:1a:de:ef:f3:bd:83:b8:69:fa:fe:48:e2:52:05:8f:66:da:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26E3E7776B89B74777CBD275007F950E7C388C1
        Validity
            Not Before: Feb  3 14:02:17 2024 GMT
            Not After : Feb  1 14:07:17 2025 GMT
        Subject: CN=C9070496DBC4FEBF1B629FF288BDEA55873627F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:b9:66:fb:4f:75:ac:03:7f:fc:c7:70:2f:
                    d5:7f:0d:39:f9:ae:e1:bd:17:9c:12:32:66:de:ad:
                    73:34:67:49:d6:dc:5b:a5:06:7a:f9:23:57:88:68:
                    a8:03:67:fc:21:f8:ea:a2:52:dc:09:fb:dc:b1:81:
                    24:f4:4c:c3:14:92:39:01:2f:ea:a0:e7:43:c2:e1:
                    95:7e:36:06:1b:78:88:ed:e1:4f:50:54:df:6f:1f:
                    c5:70:9d:43:14:4b:c7:b8:fb:49:92:3f:79:a6:55:
                    66:92:b1:55:33:9d:31:c8:be:67:ad:d7:04:f2:c1:
                    92:a1:cb:33:09:6e:10:ce:fd:a1:ac:cf:2b:97:0f:
                    a4:cb:56:30:ca:b1:e1:5e:74:3a:64:89:7b:47:a4:
                    71:3e:13:63:66:80:05:03:07:ae:f0:a4:f9:b4:c7:
                    4b:c4:25:f9:77:ac:63:9a:f1:1a:96:ef:be:1d:67:
                    91:a7:fe:b8:26:25:b0:47:93:9d:5f:2d:7f:40:39:
                    b6:ed:52:78:c6:40:d3:e1:52:ec:ce:e2:b7:42:f5:
                    d8:0b:73:11:9a:39:4e:e8:ea:fe:23:69:75:7a:0a:
                    57:9e:0f:30:b1:54:fb:38:4b:5a:5f:c7:e3:eb:26:
                    4e:44:2a:b4:d8:6f:d5:1c:29:28:63:6b:fe:a8:87:
                    26:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:07:04:96:DB:C4:FE:BF:1B:62:9F:F2:88:BD:EA:55:87:36:27:F4
            X509v3 Authority Key Identifier:
                keyid:E2:6E:3E:77:76:B8:9B:74:77:7C:BD:27:50:07:F9:50:E7:C3:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:59:97:8a:e1:77:d7:6a:99:f2:43:e2:bc:76:90:48:48:a3:
         52:de:b8:43:ff:be:31:57:e1:75:a0:b2:6c:fc:34:6c:6d:ca:
         c0:21:e5:82:4b:64:00:6c:7e:10:32:74:92:2e:b1:6a:b3:c1:
         80:19:fb:60:47:40:70:81:48:04:b3:0a:61:13:c2:61:ff:09:
         a2:34:2c:07:97:39:79:f1:c2:46:1c:04:fb:cc:49:73:b7:f0:
         9f:cd:c0:81:40:5f:d0:a1:37:41:21:ce:cb:05:4a:9e:8c:4b:
         98:3e:ca:a4:23:68:1c:9b:57:14:fe:6b:5c:ed:f0:0c:e7:a9:
         ff:74:38:b8:50:0b:6c:e7:df:ae:42:82:ba:97:8e:95:ed:ef:
         00:2c:1a:9a:c1:ef:29:03:4b:88:e6:a7:26:05:37:36:36:04:
         26:60:59:c2:93:fe:1c:bd:4c:57:2b:b5:6d:ae:77:75:21:3f:
         02:74:04:01:8e:1c:6e:7b:5a:d9:f6:e4:9c:a7:c9:fb:82:3e:
         d3:94:b1:8c:27:37:02:0f:d8:22:ba:e2:f7:81:db:65:e1:bb:
         fe:5a:f0:bd:df:f4:df:08:98:1f:fa:ea:c3:7d:3f:3e:1b:13:
         ec:81:1a:7c:72:56:28:bd:cc:93:85:56:18:92:82:b5:db:59:
         fe:1d:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org