Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32322d3232203d3e20323637363139.roa
File:                     34352e37312e3132302e302f32322d3232203d3e20323637363139.roa (raw, json)
Hash identifier:          R6PghhwJ+Rf3n6KF5AqR6qfrA/7p8HAT8gsR6HLr+r4=
Subject key identifier:   B2:CC:A1:18:69:41:65:16:92:88:70:29:45:AF:77:0D:DD:ED:77:BF
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       2DB5A6B0DC127D9DF008936FDE3EEF2967BBC907
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32322d3232203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:03 +0000
ROA not before:           Wed 13 Jul 2022 15:55:03 +0000
ROA not after:            Thu 13 Jul 2023 16:00:03 +0000
asID:                     267619
IP address blocks:        45.71.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b5:a6:b0:dc:12:7d:9d:f0:08:93:6f:de:3e:ef:29:67:bb:c9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:03 2022 GMT
            Not After : Jul 13 16:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:71:dc:7c:9a:d5:05:89:86:03:c4:8e:ba:
                    e9:ae:fd:63:e3:fb:a7:ea:17:32:f8:6a:9c:15:8b:
                    0e:d0:ed:f0:ce:bd:74:82:5d:ca:bd:2c:c5:35:67:
                    2f:3f:e4:e7:8e:a0:23:08:e3:32:9a:16:74:f7:a1:
                    dd:9a:2f:58:ef:eb:6f:e2:2e:4f:9d:a9:b5:9f:a8:
                    f3:86:69:a3:b2:ab:d2:1e:64:a9:bc:cd:21:af:bb:
                    7e:52:3b:f0:13:44:8a:80:c1:78:fe:69:8f:51:4b:
                    38:4f:f1:29:a1:01:bf:dd:56:38:3f:3a:f2:87:99:
                    20:a9:b8:cd:f9:a2:1b:c1:2f:2d:3e:f5:e3:3d:f6:
                    49:1f:ac:8c:98:df:21:b3:47:74:af:a7:50:8f:b4:
                    d5:c7:b7:42:46:33:55:aa:76:1a:e5:0c:ee:19:ec:
                    d1:6d:3b:ea:88:67:bd:af:6d:ad:6b:76:ab:41:71:
                    55:e8:a1:8d:4d:54:c0:4f:1a:84:eb:32:54:0e:7b:
                    88:06:a0:09:27:56:4f:64:66:34:54:a2:7e:4f:64:
                    c0:1f:0c:71:3d:ae:bb:95:36:5a:4c:73:d7:fe:52:
                    eb:32:01:6a:a8:30:96:de:81:9d:c6:b3:bf:6f:a2:
                    c4:c7:cc:26:88:83:09:25:ab:ff:04:8e:75:fa:34:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:A1:18:69:41:65:16:92:88:70:29:45:AF:77:0D:DD:ED:77:BF
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32322d3232203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:b7:a8:1b:dd:97:12:2d:41:1f:2e:a1:e7:93:21:a6:99:
         e1:17:c9:f7:18:99:04:d7:16:2e:94:53:0c:1c:aa:b3:b4:30:
         ac:1c:94:12:1e:d7:d7:85:90:87:3c:48:4a:3e:c1:0c:eb:1a:
         dd:a2:c6:e8:a7:6d:4e:79:7e:05:34:e7:11:6e:03:f5:a3:a2:
         d7:57:c2:c3:da:f0:64:aa:ec:7b:9e:91:28:5f:93:9b:5e:1d:
         47:84:c2:00:42:b1:d2:27:8a:40:b6:80:66:ac:aa:92:b4:fc:
         52:ad:0c:a2:dc:24:e4:d3:a6:48:4f:92:1e:a2:0c:49:a8:f3:
         39:71:ed:54:4f:07:c9:26:9c:74:67:ff:85:9e:1d:3d:28:6e:
         c6:7f:b2:45:f0:8d:67:a2:af:86:6c:f3:f3:cf:06:b9:a0:75:
         45:57:38:c5:a7:07:c5:43:5c:4e:cd:93:d8:28:29:ca:02:ac:
         ac:7a:32:bb:cc:37:47:60:20:d2:d5:53:c4:29:12:7b:9c:a6:
         b6:9a:2e:d7:f3:c4:a4:0b:1e:1b:f8:7c:77:db:c6:c6:be:ec:
         b1:4a:69:6c:2c:3a:20:d1:4e:cc:b7:ff:50:25:cc:38:56:ca:
         69:23:a2:3e:ff:00:29:a7:2f:49:2b:41:5c:09:b3:4b:9e:6f:
         e2:88:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org