Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa
File:                     34352e37312e3130342e302f32332d3234203d3e20323637363034.roa (raw, json)
Hash identifier:          aaNETGDAYWbsjgTf6NnH0VzuF/tZBC1jj/q26Q6omJY=
Subject key identifier:   F4:ED:27:9C:30:04:99:9A:CF:AC:48:CF:37:58:75:8D:2C:95:4F:4F
Certificate issuer:       /CN=52F8111BF509CE4749E50167E62D9A46C4581780
Certificate serial:       2A975063213B10E74E3DE8127D4CA55AF748555B
Authority key identifier: 52:F8:11:1B:F5:09:CE:47:49:E5:01:67:E6:2D:9A:46:C4:58:17:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F8111BF509CE4749E50167E62D9A46C4581780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa
Signing time:             Thu 13 Jul 2023 14:32:08 +0000
ROA not before:           Thu 13 Jul 2023 14:27:08 +0000
ROA not after:            Thu 11 Jul 2024 14:32:08 +0000
asID:                     267604
IP address blocks:        45.71.104.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:50:63:21:3b:10:e7:4e:3d:e8:12:7d:4c:a5:5a:f7:48:55:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F8111BF509CE4749E50167E62D9A46C4581780
        Validity
            Not Before: Jul 13 14:27:08 2023 GMT
            Not After : Jul 11 14:32:08 2024 GMT
        Subject: CN=F4ED279C3004999ACFAC48CF3758758D2C954F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:5a:a0:2b:0b:64:b1:1c:58:b1:72:12:c5:
                    7e:e1:b0:8b:f6:d8:11:0a:50:9f:8e:06:7a:87:25:
                    60:d0:30:4c:96:fc:76:43:b3:41:8a:e5:6a:4f:c3:
                    a4:04:44:6d:78:9a:94:27:a6:48:5e:33:47:68:51:
                    e2:eb:ad:8d:3a:99:76:1c:de:03:4c:79:52:8c:57:
                    a0:3f:b6:89:cf:72:0e:01:4c:92:c5:e0:c9:fe:3e:
                    06:b8:e6:23:eb:ba:0d:3f:c5:37:9f:35:5f:a0:20:
                    c8:3d:39:ec:7a:89:04:21:81:d8:2b:8a:ee:b1:8a:
                    fb:ca:6b:06:9d:d0:d7:c9:43:c4:b5:e0:40:cc:96:
                    92:bd:d5:79:e3:9a:d0:be:52:a1:7c:85:bb:14:27:
                    47:d2:17:1e:92:00:a1:ae:54:a5:d7:f5:36:32:1f:
                    d4:e7:55:b9:4f:d7:d5:24:c1:be:e2:11:27:74:4a:
                    82:43:d6:84:44:85:ff:eb:34:ef:ee:4b:3d:ec:8e:
                    cb:6c:02:17:05:97:db:a0:46:60:60:0f:35:b0:8a:
                    d6:5c:3b:0d:4c:3e:ce:a3:62:d8:9d:62:22:76:c7:
                    7b:71:34:94:88:c5:fc:1f:81:35:f6:67:42:9c:22:
                    da:3d:eb:b5:e9:91:fd:eb:af:a5:cb:70:b0:c9:a2:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:ED:27:9C:30:04:99:9A:CF:AC:48:CF:37:58:75:8D:2C:95:4F:4F
            X509v3 Authority Key Identifier:
                keyid:52:F8:11:1B:F5:09:CE:47:49:E5:01:67:E6:2D:9A:46:C4:58:17:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/52F8111BF509CE4749E50167E62D9A46C4581780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F8111BF509CE4749E50167E62D9A46C4581780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:ba:bb:7f:63:f9:40:50:b6:8d:0d:25:57:17:90:e5:f8:e4:
         6e:29:0d:a6:46:e4:1a:a5:51:ac:8d:dc:81:45:34:37:93:bd:
         30:cd:7b:ea:ce:5a:ea:27:67:9f:ad:95:01:a4:bc:67:24:f7:
         5f:af:59:a6:d8:53:d6:7e:bc:38:43:a3:8c:0c:66:3f:fb:25:
         77:40:42:17:3e:4a:32:52:89:5a:3b:d4:41:59:d1:cd:6e:af:
         0a:c9:53:cd:16:8f:66:0d:af:6f:bf:ac:b0:68:92:74:42:a8:
         25:2b:1e:0a:da:c7:fa:89:a3:3e:6d:f1:0b:b4:f5:40:52:27:
         9d:67:73:6b:a4:5b:5d:d5:d4:c8:6e:89:51:60:2f:bf:ea:3c:
         8f:08:4d:8b:2d:e4:08:38:f5:c3:d9:ae:ba:c4:be:e0:81:7a:
         a4:fd:a7:47:5d:53:52:8c:1c:00:71:09:dd:f4:d5:e7:78:40:
         81:32:de:64:df:5b:0c:a3:fe:65:64:e6:9b:d3:77:5a:18:33:
         f1:45:ba:8f:94:d6:8d:75:89:64:bf:e7:02:f2:29:b5:e1:4e:
         42:c1:cf:c9:55:e1:3e:07:23:5c:4f:e8:dd:e9:7b:6d:46:44:
         3d:c3:36:2c:35:2e:01:6d:c0:b4:51:cf:d5:37:80:3d:f1:74:
         ee:8d:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org