Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3130382e302f32332d3233203d3e20323637363134.roa
File:                     34352e37312e3130382e302f32332d3233203d3e20323637363134.roa (raw, json)
Hash identifier:          Vm16uGH77ZVjJkaVd7ucETrhoXmDRuH+Q0IkAYU9t/w=
Subject key identifier:   FD:DA:08:A6:66:93:CA:41:F1:4D:4C:B9:55:E1:52:2B:D6:F1:B5:B5
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       5301B5566A76EC0180FBAF92597436AAE93641B9
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3130382e302f32332d3233203d3e20323637363134.roa
Signing time:             Wed 18 Oct 2023 19:01:48 +0000
ROA not before:           Wed 18 Oct 2023 18:56:48 +0000
ROA not after:            Wed 16 Oct 2024 19:01:48 +0000
asID:                     267614
IP address blocks:        45.71.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:01:b5:56:6a:76:ec:01:80:fb:af:92:59:74:36:aa:e9:36:41:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Oct 18 18:56:48 2023 GMT
            Not After : Oct 16 19:01:48 2024 GMT
        Subject: CN=FDDA08A66693CA41F14D4CB955E1522BD6F1B5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ed:33:f0:62:25:b0:75:fe:2b:fd:4b:2e:05:
                    32:75:6e:c6:32:73:eb:42:ab:11:73:e1:39:1f:b3:
                    1e:2e:0c:7a:2d:3d:f1:20:a4:14:92:01:f8:2d:d6:
                    fb:67:b7:df:61:4c:4b:d9:f2:62:66:98:b8:65:f6:
                    cd:a3:25:9b:27:d5:ac:c9:37:16:fd:4d:2c:13:6b:
                    52:1a:35:8c:0e:79:27:94:58:54:44:f7:b1:5f:12:
                    0e:5e:c8:2e:18:18:e3:a8:cd:d6:b1:6c:b5:71:f2:
                    69:7b:40:b1:a7:75:2a:5a:f7:c6:83:35:de:93:a9:
                    9d:10:2f:ab:d5:76:be:da:1b:6d:9a:2e:fe:6e:2e:
                    93:01:f1:42:15:d8:b9:ae:b6:91:a0:59:2f:5c:18:
                    5b:7e:cb:f4:1e:8c:2d:f1:3e:a5:86:2f:40:d9:a1:
                    41:a2:12:a9:00:5f:cf:30:6c:a5:34:5f:21:d9:63:
                    93:5c:0e:85:c0:c9:cf:75:73:47:e8:1e:cc:b0:47:
                    66:2d:b7:ec:1c:b0:a2:4b:79:5b:4c:06:b6:d8:b1:
                    e5:ac:31:75:35:86:f7:12:3d:f7:65:75:f3:ea:c2:
                    96:08:19:57:66:a0:32:a5:9e:77:0d:79:61:21:25:
                    53:63:0c:ed:73:5e:ed:f9:a7:97:0a:34:7d:3b:9c:
                    f6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:08:A6:66:93:CA:41:F1:4D:4C:B9:55:E1:52:2B:D6:F1:B5:B5
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3130382e302f32332d3233203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:46:1e:75:bd:09:1e:96:6f:bb:d3:9e:d5:c4:59:50:15:98:
         70:a0:0b:9d:28:d3:d9:e0:1e:eb:72:3c:60:13:11:ba:1c:6d:
         2e:0b:75:9d:b5:23:23:d4:68:72:dd:c9:7e:68:da:de:d0:9b:
         af:87:c2:ab:0e:f9:58:f0:47:19:2f:0a:ce:dd:9b:58:c4:f8:
         b8:4c:d5:e8:41:8f:04:1c:39:f9:6d:e4:46:20:ae:7d:60:7d:
         9e:11:5b:d7:0d:84:7e:2e:4d:37:3b:49:3c:ec:4a:ad:d3:ce:
         a2:99:b5:c0:7d:8d:9c:58:b1:c2:3f:82:af:9a:46:85:e4:68:
         a8:b9:30:2d:8a:e4:14:0c:8f:0f:3f:17:fa:fe:32:03:4f:8c:
         40:74:52:8e:b1:ee:50:4f:60:78:69:aa:e3:76:ea:96:c7:e2:
         86:73:50:bb:4d:ff:6e:92:88:5a:d3:f6:a4:49:25:8e:22:26:
         c0:91:07:f0:62:f6:3e:46:e0:48:08:04:26:00:e9:5a:98:73:
         8b:8d:29:76:80:54:73:db:e9:f2:2f:29:ae:a0:65:f6:1e:51:
         1f:9b:d6:9c:26:9e:11:e9:44:90:04:fc:e9:da:b5:80:a6:89:
         72:4b:f6:ce:56:f5:89:2d:c2:15:01:10:45:3e:87:24:d2:c6:
         06:33:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org