Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131382e302f32342d3234203d3e20323636353834.roa
File:                     34352e372e3131382e302f32342d3234203d3e20323636353834.roa (raw, json)
Hash identifier:          kEKrTkI+cEx6k4BmdwmBO4FsqKFabvy1agliKsEy/ww=
Subject key identifier:   7C:DC:CF:37:02:79:E6:39:4C:13:86:5D:D3:1B:C1:D5:BA:9B:98:88
Certificate issuer:       /CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
Certificate serial:       359791566FCBA5705CFF82268CBAAE1B9BD9742E
Authority key identifier: CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131382e302f32342d3234203d3e20323636353834.roa
Signing time:             Tue 20 Jun 2023 13:20:09 +0000
ROA not before:           Tue 20 Jun 2023 13:15:09 +0000
ROA not after:            Tue 18 Jun 2024 13:20:09 +0000
asID:                     266584
IP address blocks:        45.7.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:97:91:56:6f:cb:a5:70:5c:ff:82:26:8c:ba:ae:1b:9b:d9:74:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
        Validity
            Not Before: Jun 20 13:15:09 2023 GMT
            Not After : Jun 18 13:20:09 2024 GMT
        Subject: CN=7CDCCF370279E6394C13865DD31BC1D5BA9B9888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1f:37:6d:f4:7f:74:7e:fa:c0:f2:20:a4:d7:
                    a0:65:87:2a:bf:3f:0c:0b:7e:1c:44:ff:96:ef:d4:
                    47:7f:0a:f9:92:35:1a:6b:d9:c8:5c:b2:1b:43:a7:
                    cc:ba:38:97:57:65:bb:e5:36:4c:68:b1:b3:f3:50:
                    1b:15:3c:61:71:67:1e:eb:42:72:20:15:5b:2e:0f:
                    7e:82:8d:7e:7f:33:27:ee:d1:d4:36:4c:20:86:83:
                    bc:35:eb:5c:65:f5:c5:3e:7c:6f:88:47:95:6d:8b:
                    3c:f5:84:02:3e:dd:d9:d7:34:be:e0:58:99:5d:5e:
                    a5:9b:f4:5c:b9:c8:38:df:a3:c0:55:94:21:95:86:
                    75:99:f5:fc:d0:3c:9f:17:68:76:ca:a7:ed:c9:1d:
                    d1:9c:d1:4f:7a:5b:25:45:75:72:f4:a5:2c:32:9d:
                    b6:1f:68:26:9d:ab:41:bf:e4:bc:e9:fd:d2:c3:7d:
                    9c:d3:f5:5f:3e:b1:eb:51:06:27:0e:61:11:f7:2d:
                    30:6e:a2:8f:0f:50:4e:ee:12:51:a1:94:10:1a:92:
                    56:87:f6:4c:e6:b4:ac:ec:31:46:63:0c:17:76:de:
                    59:82:4a:a1:c3:70:58:17:c6:5a:a3:56:29:e0:99:
                    86:52:77:b8:f7:63:34:8f:6c:79:8d:a3:d6:ff:01:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DC:CF:37:02:79:E6:39:4C:13:86:5D:D3:1B:C1:D5:BA:9B:98:88
            X509v3 Authority Key Identifier:
                keyid:CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131382e302f32342d3234203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:cf:da:5e:d8:d4:c1:a0:5c:c2:84:4b:89:3f:2c:fd:7a:c9:
         05:54:c3:ed:c1:cf:c9:61:0f:7f:5a:e1:97:ac:8c:6e:a7:85:
         3d:4d:32:5f:96:59:37:bd:d9:e7:40:11:4e:5f:d2:16:35:c2:
         59:f8:ec:bd:4b:3c:b9:fa:d9:0d:84:2f:14:55:5b:83:83:51:
         8c:15:28:a0:d2:d5:ff:ee:d7:8d:c0:ff:6b:8f:2b:85:05:91:
         88:58:03:27:16:97:5d:69:cf:2a:b6:07:3a:6c:93:23:79:ec:
         80:f9:55:5a:fe:d5:ae:6e:3c:ed:95:eb:91:3f:57:66:c9:a2:
         2c:b1:37:cd:0d:92:8b:09:9a:b7:0c:99:98:5c:07:7a:c2:02:
         2d:41:b1:be:26:4a:57:dc:d4:b9:24:90:47:e4:8c:52:46:17:
         47:10:b8:5c:f4:b6:aa:0d:22:cf:c1:30:5a:d6:db:a3:68:32:
         fd:fc:04:e4:d7:33:3e:48:fe:17:5c:70:bb:3c:fd:a5:dc:22:
         2d:e7:8c:82:af:0f:3c:e3:ce:fc:69:12:e7:90:cf:c6:4d:d4:
         08:ca:50:54:81:e7:3d:bb:72:dc:40:83:1d:a4:e8:43:d7:b2:
         18:eb:11:65:6f:f2:39:36:74:9e:c6:7d:42:34:02:ef:61:4b:
         dd:8e:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org