Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32332d3233203d3e20323637363139.roa
File:                     34352e37312e3132302e302f32332d3233203d3e20323637363139.roa (raw, json)
Hash identifier:          x5z9UVCnTR8oHs/+fLh/dLSORvxtOYJxlEE92lPCpwU=
Subject key identifier:   BC:95:EC:27:21:1C:19:B8:A3:AA:E7:61:34:BB:91:3C:F1:E2:52:51
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       43C88D5EFA79458197916F2AF5F88478903727B1
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32332d3233203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:03 +0000
ROA not before:           Wed 13 Jul 2022 15:55:03 +0000
ROA not after:            Thu 13 Jul 2023 16:00:03 +0000
asID:                     267619
IP address blocks:        45.71.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c8:8d:5e:fa:79:45:81:97:91:6f:2a:f5:f8:84:78:90:37:27:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:03 2022 GMT
            Not After : Jul 13 16:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:a7:49:e7:2e:db:53:94:41:a3:3b:84:12:
                    b4:a2:e8:f8:63:73:0e:e2:09:7a:67:35:e6:ce:58:
                    e4:83:2c:0a:99:d1:fc:f1:c8:57:22:22:46:57:4e:
                    92:2d:51:fd:7f:20:2c:d5:37:f3:9f:ae:c4:ec:70:
                    e9:fb:4a:2a:66:ef:0b:8e:e0:fa:05:1d:c8:b4:9c:
                    cf:04:93:03:1f:38:04:8a:fc:af:39:ee:54:a5:12:
                    2d:c1:c5:6b:0e:1c:72:3b:1e:48:be:b3:5d:37:ec:
                    1a:ec:71:6a:91:b8:62:a2:8e:b8:a8:9b:6b:28:bb:
                    94:71:77:84:8e:c0:77:98:97:fe:e5:33:3e:ea:89:
                    25:0c:6e:ce:2c:36:0d:03:e2:44:8f:92:b8:af:79:
                    a1:64:21:b1:c7:93:da:39:53:26:1b:89:87:17:0c:
                    05:3d:d6:ea:48:bb:bf:cd:fd:49:16:cd:31:50:44:
                    13:c3:71:76:91:96:f1:0a:c9:fd:08:88:9f:d4:bd:
                    53:d9:6e:7d:19:b7:43:35:25:af:d8:53:1d:7e:cb:
                    7b:14:3b:fa:8d:45:0f:6f:88:9f:62:3d:b0:4b:4d:
                    c4:c4:4b:c8:92:65:5d:47:e9:54:d6:f5:eb:fe:78:
                    41:65:78:68:1b:e9:fc:cc:af:87:af:f9:f3:eb:3f:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:95:EC:27:21:1C:19:B8:A3:AA:E7:61:34:BB:91:3C:F1:E2:52:51
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32332d3233203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:09:9c:b0:f5:11:c6:5e:4e:f7:61:1e:78:f9:3c:8f:e3:a8:
         6b:ac:3b:bb:7a:22:48:9e:34:87:6e:3f:72:57:cd:95:c0:e2:
         9c:c9:be:89:8a:a1:1f:d0:bc:50:23:9f:28:9c:28:ff:ac:f3:
         dd:6f:dc:ec:7a:27:ef:f8:84:59:ef:49:03:44:b0:9b:1f:6a:
         43:7d:2e:35:0d:f1:c8:b0:96:02:03:1c:d6:b1:f0:a9:a7:d3:
         e3:36:da:c8:66:7c:fd:78:bc:19:bd:fe:8d:9a:fb:b3:73:41:
         c5:f3:ea:89:e7:29:f3:28:81:25:0e:80:d5:0c:d7:02:4e:f2:
         0e:a4:de:e8:6c:63:f3:19:36:6e:5c:5c:2c:b0:08:6c:4a:6e:
         ef:71:0a:15:1c:a0:f5:ba:79:e8:f3:90:a4:15:ac:1a:70:41:
         04:a2:d0:d8:ee:fe:1e:0d:54:ad:00:9b:10:9d:e1:dc:bc:85:
         bf:93:af:a4:d8:ab:e8:c7:fd:57:cf:0b:12:64:30:db:f1:4a:
         c0:21:f0:68:4d:33:36:fe:e2:4a:ab:f1:f3:0b:3e:e0:e9:72:
         00:32:d8:d1:5b:dd:3e:e8:05:76:8c:13:31:94:8e:6f:1d:a5:
         f5:b4:33:a1:61:e8:3d:aa:b7:2c:6d:95:36:5a:24:23:4c:2c:
         b4:fb:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org