Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132312e302f32342d3234203d3e20323637363139.roa
File:                     34352e37312e3132312e302f32342d3234203d3e20323637363139.roa (raw, json)
Hash identifier:          QgyeDyndz25B81BjlAoLy/UBj5IzW/nvfvcCUeqTUZE=
Subject key identifier:   0E:4D:84:D7:34:FD:40:89:14:EA:5C:CC:EA:64:45:E7:CA:29:AC:33
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       6EDDF3A7B59ADEF0FDCDC3DB4F6896BDB999F48E
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132312e302f32342d3234203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:02 +0000
ROA not before:           Wed 13 Jul 2022 15:55:02 +0000
ROA not after:            Thu 13 Jul 2023 16:00:02 +0000
asID:                     267619
IP address blocks:        45.71.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:dd:f3:a7:b5:9a:de:f0:fd:cd:c3:db:4f:68:96:bd:b9:99:f4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:02 2022 GMT
            Not After : Jul 13 16:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:50:0a:73:db:c4:a5:55:88:01:3a:9c:17:
                    a1:84:da:4c:36:40:90:d0:b4:42:fb:d2:3c:84:02:
                    5f:e1:d2:5b:1e:3c:9e:96:bb:fb:23:3c:99:c2:eb:
                    d8:cf:92:0f:30:bf:e1:4a:21:71:01:fb:bf:17:3a:
                    b1:3d:4d:96:b3:03:86:12:51:c7:eb:9c:4f:60:fd:
                    73:58:9c:a1:96:4a:4d:b8:6b:50:a7:4a:65:1b:34:
                    28:16:a2:b1:98:08:bd:00:87:35:56:92:e2:76:a1:
                    9b:ae:56:8d:f3:62:67:87:06:c3:a9:fa:a4:bb:fb:
                    ac:e9:36:14:a8:8f:a3:c6:d2:e5:d6:41:b6:f1:62:
                    97:aa:86:48:3f:af:26:9a:0c:38:58:f6:8a:d7:37:
                    d3:73:56:cb:c0:d5:95:61:91:52:bb:74:1d:2f:77:
                    d1:54:05:d2:2b:88:b5:1a:87:16:bd:65:f8:0f:14:
                    19:5f:5d:e7:9b:d3:e3:5f:09:55:d4:5d:23:3c:e9:
                    ee:8a:6e:27:64:21:9c:f1:3d:88:37:b3:02:f7:63:
                    ba:17:09:d5:f1:79:dc:b6:75:be:95:2f:0d:38:48:
                    c0:79:e5:c3:ce:88:04:11:05:78:92:cf:22:ee:bb:
                    1b:ad:03:b3:09:68:e9:dc:37:67:32:64:eb:49:a6:
                    4b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4D:84:D7:34:FD:40:89:14:EA:5C:CC:EA:64:45:E7:CA:29:AC:33
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132312e302f32342d3234203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:3f:81:0f:42:0e:6d:40:2c:ab:66:2c:4e:88:b5:f1:2f:
         45:fa:14:60:8d:01:3e:5e:bd:a4:e8:31:90:0a:d1:7c:77:43:
         8d:68:de:c9:dd:33:75:1a:a9:10:22:7f:06:02:ef:94:5f:3d:
         9f:b4:d8:e6:49:7d:3e:18:bc:51:90:e2:9c:d6:69:e0:05:10:
         3a:5f:09:d7:dc:ae:19:2d:cc:25:95:12:0a:a6:e7:ef:de:26:
         8e:79:8a:3c:c8:db:09:c2:1e:3f:fb:8b:24:2f:54:83:b0:39:
         cc:14:d7:b8:38:08:33:e2:19:11:6b:ca:2c:93:94:5d:4d:f0:
         cd:ee:60:7d:a3:27:8a:ed:e2:df:28:bf:ea:54:1f:70:9a:f0:
         5d:d2:5e:d5:38:83:80:c0:1d:0b:4a:31:c9:99:76:13:bd:10:
         50:db:ac:06:b5:46:73:ff:a1:74:50:1a:89:12:f3:08:af:b9:
         da:23:27:f6:73:97:53:8e:16:fa:31:e2:64:6d:aa:db:81:d7:
         c9:8c:a6:5c:bc:e9:21:8f:7c:2b:4c:68:40:cf:a5:11:99:da:
         43:e9:ce:8a:06:b4:08:c6:38:10:8d:38:a6:99:45:07:24:ba:
         68:18:d3:c4:9b:ba:80:39:58:c4:25:1a:ef:36:6b:5c:9b:e4:
         d1:12:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org