Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32342d3234203d3e20323636353834.roa
File:                     34352e372e3131362e302f32342d3234203d3e20323636353834.roa (raw, json)
Hash identifier:          8PBgwwrv078nZk1yamgDGe02Tm90kdjGw4DvvV6NySg=
Subject key identifier:   7E:DC:0E:B8:74:8F:B6:B8:35:6D:40:02:7B:EA:3B:4F:82:53:17:9D
Certificate issuer:       /CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
Certificate serial:       65D2A02BF15933FB4E8C15ECE02DA8137B0FDCA9
Authority key identifier: CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32342d3234203d3e20323636353834.roa
Signing time:             Tue 20 Jun 2023 13:20:01 +0000
ROA not before:           Tue 20 Jun 2023 13:15:01 +0000
ROA not after:            Tue 18 Jun 2024 13:20:01 +0000
asID:                     266584
IP address blocks:        45.7.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d2:a0:2b:f1:59:33:fb:4e:8c:15:ec:e0:2d:a8:13:7b:0f:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
        Validity
            Not Before: Jun 20 13:15:01 2023 GMT
            Not After : Jun 18 13:20:01 2024 GMT
        Subject: CN=7EDC0EB8748FB6B8356D40027BEA3B4F8253179D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:01:ed:5c:c0:47:46:30:24:db:e6:55:82:
                    99:b5:de:ed:65:94:70:d0:97:3b:3f:25:4e:1d:97:
                    bc:95:98:6a:7c:1e:72:d1:d3:be:62:72:69:a3:db:
                    93:50:c6:c0:f5:31:a6:04:8d:51:36:64:f2:65:42:
                    34:36:cd:7d:48:f2:b6:c8:6b:0b:f0:77:66:b4:3e:
                    2f:2a:27:b6:bb:ee:4d:f6:52:02:de:21:bd:16:dd:
                    ce:6a:41:48:06:cd:2b:df:46:b8:59:21:6e:25:ba:
                    fc:38:34:31:0b:1f:88:cd:d2:cb:cc:32:dd:31:51:
                    b7:c0:91:f3:15:98:a0:34:b6:1b:45:ae:c6:42:c8:
                    2c:b3:be:97:07:fa:1f:11:40:fe:60:cc:27:7d:29:
                    46:e7:de:f1:49:88:36:e5:fd:57:bc:9d:af:71:e7:
                    4c:a5:ef:41:5d:8b:24:95:d8:c5:5d:61:19:af:f6:
                    13:f5:20:2c:bf:44:38:0b:b7:c7:7e:e5:98:da:b8:
                    47:26:b0:a4:93:11:b7:45:41:69:26:af:7b:20:26:
                    69:a9:18:d3:b5:ac:bd:4e:74:35:a8:97:fe:a8:6a:
                    a4:55:b2:21:b9:d1:c0:a3:e0:b8:07:23:a1:b2:5b:
                    1b:1e:81:bc:14:a8:72:bf:41:71:d1:14:81:2f:aa:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DC:0E:B8:74:8F:B6:B8:35:6D:40:02:7B:EA:3B:4F:82:53:17:9D
            X509v3 Authority Key Identifier:
                keyid:CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32342d3234203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:75:35:e4:5e:52:eb:cd:fb:9b:0b:d1:22:5a:41:41:3a:
         93:ad:f2:19:ef:63:d3:5f:30:1c:a6:52:25:ef:ab:1d:8e:0d:
         35:3d:44:f1:e2:4b:dd:07:bb:12:f7:0f:b8:65:dd:dc:50:be:
         e2:79:ef:ba:60:43:08:5d:37:5e:72:ce:6a:f1:f2:4e:e5:9d:
         9f:81:ad:8f:01:b5:26:88:d5:61:df:88:13:36:4f:c2:7d:56:
         a0:86:cf:07:74:80:45:a3:14:8d:9b:64:2d:d7:fa:97:a0:1a:
         a2:48:90:b3:49:64:43:9e:0b:87:03:9a:0a:aa:d7:82:c6:ea:
         27:03:92:e6:80:08:43:a6:a2:a3:e4:03:d3:a4:81:c8:15:5f:
         97:24:15:99:8f:c4:84:0c:86:b2:c5:e2:30:cd:75:b9:c0:4b:
         ae:9c:6d:eb:7c:32:0c:90:60:70:f6:1f:74:21:a5:44:21:db:
         82:bb:48:da:bf:f2:e9:fa:12:9b:27:55:3a:59:fd:d8:9b:64:
         12:ec:26:f2:1d:70:32:27:d1:b3:ce:78:a5:a9:30:e7:c7:f0:
         d5:4f:84:b6:11:a7:77:95:80:53:4c:e0:dc:97:85:73:25:97:
         fe:e4:5d:a2:e6:81:cf:59:7b:b6:50:3e:55:e7:80:b6:3c:b4:
         fc:23:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org