Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131392e302f32342d3234203d3e20323636353834.roa
File:                     34352e372e3131392e302f32342d3234203d3e20323636353834.roa (raw, json)
Hash identifier:          M/RNBgxplTz1n7gIcJi/uzP5Nmv6oR8HQadF7RfKcRc=
Subject key identifier:   33:57:4B:84:35:A0:E7:9D:5F:1F:B1:7F:86:B2:ED:30:CE:93:E5:80
Certificate issuer:       /CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
Certificate serial:       1ED06EA76E6EAA92E7CBA9A784CB9AACF7034462
Authority key identifier: CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131392e302f32342d3234203d3e20323636353834.roa
Signing time:             Tue 20 Jun 2023 13:20:13 +0000
ROA not before:           Tue 20 Jun 2023 13:15:13 +0000
ROA not after:            Tue 18 Jun 2024 13:20:13 +0000
asID:                     266584
IP address blocks:        45.7.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:6e:a7:6e:6e:aa:92:e7:cb:a9:a7:84:cb:9a:ac:f7:03:44:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
        Validity
            Not Before: Jun 20 13:15:13 2023 GMT
            Not After : Jun 18 13:20:13 2024 GMT
        Subject: CN=33574B8435A0E79D5F1FB17F86B2ED30CE93E580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:21:29:e6:06:43:8b:24:f4:ce:9c:73:7b:
                    93:85:4a:2b:46:2d:d2:aa:e2:67:c4:ff:46:ce:8d:
                    80:1d:fd:63:75:d2:f8:da:ac:e0:a7:9a:10:29:b1:
                    5f:75:96:6c:d8:51:51:7e:d2:8c:9b:9b:4b:f7:62:
                    9e:26:f3:24:36:85:b0:bf:f2:c6:7f:bd:76:ee:a1:
                    3f:00:29:7d:60:b6:52:9a:88:71:72:db:f0:e5:7a:
                    20:ef:5c:27:ae:ea:37:3a:59:0d:49:7e:83:44:94:
                    ab:67:a0:da:e7:a3:15:8f:f4:ef:40:af:7a:ed:1a:
                    69:53:dc:c3:36:80:31:e0:19:47:f6:a1:5b:1b:fc:
                    4c:ad:1f:ad:65:09:19:86:90:7e:75:bc:7e:55:c2:
                    9e:bf:01:45:c6:37:49:d0:78:3d:fa:17:97:b1:08:
                    6e:5f:44:f6:39:0d:86:e2:bc:e9:c9:37:87:05:18:
                    b2:e3:8b:f4:88:09:4b:76:33:39:fc:ca:6d:c9:e1:
                    80:bf:54:1c:98:d4:64:e0:33:5f:ad:2a:1c:45:57:
                    97:25:c4:88:32:1c:4b:08:b1:6c:1a:ee:69:b3:37:
                    f9:d7:2b:7f:be:1c:19:72:02:cf:c7:8c:da:f1:2b:
                    7a:8e:10:c9:bf:75:87:0f:16:fd:51:5d:6f:95:64:
                    fa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:4B:84:35:A0:E7:9D:5F:1F:B1:7F:86:B2:ED:30:CE:93:E5:80
            X509v3 Authority Key Identifier:
                keyid:CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131392e302f32342d3234203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:65:3f:e9:e6:e5:2e:d4:a1:f3:32:35:72:d5:ea:76:94:6d:
         44:25:6a:9e:22:73:5a:ca:d0:0f:1c:9a:09:2f:15:18:7e:34:
         8d:20:28:5e:3d:40:89:60:11:2a:14:cf:44:cc:cd:9b:91:ac:
         10:69:a5:d2:0a:ca:bc:aa:92:ac:54:37:3c:5a:53:a0:fe:55:
         78:73:bf:ac:da:5e:ec:c2:52:82:51:05:5e:34:bd:23:33:f8:
         f3:48:eb:bb:4e:c1:ef:b6:a0:80:66:1a:35:7c:6f:9b:ac:71:
         c1:6f:5b:7a:a0:15:b6:7e:fd:a7:9c:f8:ce:90:04:f8:02:3f:
         56:c1:94:91:72:ab:d4:68:82:80:9d:73:c2:e2:fd:fe:1e:f4:
         0c:1a:0a:4b:72:4b:a6:0f:9d:99:d1:55:39:71:66:6b:bb:69:
         1f:ae:70:f6:63:28:75:8e:c4:d1:5c:ce:22:47:87:65:47:2c:
         62:18:dd:bb:e2:e6:a2:03:9c:a3:87:29:b1:b3:90:a6:ac:ed:
         d7:ab:43:1a:93:d5:49:9b:78:23:45:04:6a:c5:3c:bb:54:81:
         f6:96:7e:c6:e5:5b:16:2f:d4:85:90:ce:a5:9a:27:d4:ad:a6:
         24:1b:6c:04:32:d2:70:59:10:83:49:e3:10:b2:9a:a9:02:7f:
         fa:2d:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org