Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32342d3234203d3e20323637363139.roa
File:                     34352e37312e3132302e302f32342d3234203d3e20323637363139.roa (raw, json)
Hash identifier:          Iwd99wdHRSr/cQn86eBdS0XVGWI01FbtHZC/zcjG3XE=
Subject key identifier:   C0:49:F0:42:BB:D1:41:80:E9:A8:F3:D8:CA:08:98:EC:31:2A:A2:0B
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       30A0716D93D4533103F93CEBAE3C9D6A22599014
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32342d3234203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:02 +0000
ROA not before:           Wed 13 Jul 2022 15:55:02 +0000
ROA not after:            Thu 13 Jul 2023 16:00:02 +0000
asID:                     267619
IP address blocks:        45.71.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:71:6d:93:d4:53:31:03:f9:3c:eb:ae:3c:9d:6a:22:59:90:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:02 2022 GMT
            Not After : Jul 13 16:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:e7:0e:19:c7:e0:8f:06:d9:45:a7:ee:e9:
                    6c:75:22:68:53:42:a9:cb:1f:95:b4:d5:db:c0:5d:
                    89:b8:7c:ae:fd:7a:d9:c0:8d:06:0b:07:ce:f5:0c:
                    0b:ee:30:0c:38:a3:83:bc:87:a6:fb:28:1a:8f:f0:
                    b1:0b:db:70:b3:bb:51:c8:de:11:d9:ac:0c:62:e4:
                    17:af:52:5c:81:9d:74:f6:c6:77:b9:2a:7a:ec:a1:
                    b0:5a:a1:ad:a8:c9:d6:29:34:e5:75:37:dc:24:32:
                    4b:6d:83:c7:61:b2:14:51:c0:72:9f:29:f9:1b:56:
                    a2:6f:16:d6:86:a4:90:6f:29:6e:4b:aa:d6:22:02:
                    27:ea:b0:18:e1:35:4d:98:e9:cb:cb:5e:cc:ab:c8:
                    cc:ef:1d:18:e0:21:8c:7a:2e:d6:c9:22:1e:69:6c:
                    f3:32:b2:cf:d0:9f:c5:8a:56:1b:d1:04:a4:72:db:
                    38:d3:b5:45:e4:08:03:92:e0:2d:46:55:58:f0:46:
                    8b:30:19:43:fe:42:75:9d:11:bf:75:a6:7b:bc:39:
                    31:bf:a9:55:c5:b3:91:ea:0e:05:27:e9:29:f3:e2:
                    72:03:89:82:ef:54:d3:39:ee:c9:c3:41:45:e3:ef:
                    53:4b:94:fc:9a:ce:68:47:64:20:36:88:43:68:b9:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:49:F0:42:BB:D1:41:80:E9:A8:F3:D8:CA:08:98:EC:31:2A:A2:0B
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132302e302f32342d3234203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:85:82:3d:5b:25:d6:21:0e:fe:c7:d2:e8:3a:89:69:c5:
         db:eb:40:e2:5b:b4:72:94:08:04:21:64:89:a6:36:29:97:1f:
         52:44:23:cc:09:53:92:43:d8:e2:1b:89:f4:04:77:08:9e:d0:
         78:33:78:96:71:4d:27:20:60:c5:d4:79:c5:e6:87:87:15:77:
         c0:d1:ca:15:0d:5e:19:0f:26:8c:2f:49:8e:55:ad:f3:a8:d8:
         58:42:7a:a4:7d:db:dc:2a:78:93:9e:e8:a3:38:f6:12:4f:3c:
         e5:e1:1c:18:19:1b:93:74:e7:10:b1:d2:9c:a5:5c:48:6d:be:
         c5:82:92:03:aa:26:ed:3d:28:7d:da:38:b5:8e:c4:87:9d:48:
         86:2a:12:a1:cc:b6:aa:a1:db:48:c4:2e:53:f0:89:c5:ca:26:
         2b:ae:a6:cf:39:ae:8c:02:5c:b4:80:d0:d0:d5:5c:d0:72:dc:
         78:6e:76:0b:14:6d:a8:52:67:f7:a5:22:0f:a5:b8:d1:18:f2:
         1b:01:39:01:2d:00:f7:57:ce:ed:a4:ba:8f:fc:fd:86:b8:1e:
         18:0e:4c:cd:e8:5c:ab:99:45:4a:5c:b7:d1:55:11:a8:8a:34:
         52:b3:36:ad:da:42:6d:6f:2d:a5:c6:ee:88:3e:1c:1e:15:95:
         42:6a:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org