Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132322e302f32332d3233203d3e20323637363139.roa
File:                     34352e37312e3132322e302f32332d3233203d3e20323637363139.roa (raw, json)
Hash identifier:          0R7h7qXfoDWBA1bRvEXPeF0U+ptS1zzM+JJqX5VPlaU=
Subject key identifier:   0E:CF:4D:1D:9C:43:4E:AC:D4:C9:C8:29:4B:61:1E:24:9D:B2:E7:AA
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       4CA5B079283147B0BC85017406A8A14C4EBB791B
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132322e302f32332d3233203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:02 +0000
ROA not before:           Wed 13 Jul 2022 15:55:02 +0000
ROA not after:            Thu 13 Jul 2023 16:00:02 +0000
asID:                     267619
IP address blocks:        45.71.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a5:b0:79:28:31:47:b0:bc:85:01:74:06:a8:a1:4c:4e:bb:79:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:02 2022 GMT
            Not After : Jul 13 16:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:64:e3:2c:1c:dd:27:5f:4a:78:47:c0:6b:
                    19:2b:10:0f:15:5f:2d:65:e6:a5:83:09:75:92:21:
                    02:f1:81:70:94:3d:62:d7:e0:a3:80:8e:6d:41:d7:
                    f1:39:e4:cf:50:4e:91:c6:eb:99:8e:42:7d:66:3c:
                    ca:43:b1:e8:85:65:33:c5:57:72:28:b6:1b:ec:0d:
                    9c:42:39:04:47:23:99:5a:bc:89:e4:e0:f6:f3:93:
                    9e:88:2d:db:a9:ff:a5:3c:9d:7d:4d:6c:e9:88:81:
                    dc:11:63:ad:72:2b:a2:8b:b9:3d:99:c4:83:88:78:
                    a8:45:f6:a7:2a:7b:c1:86:ae:ed:cf:7a:21:fb:a7:
                    d9:90:32:2d:cc:42:58:62:6d:d0:01:e4:97:a4:a2:
                    65:3a:0c:d1:bf:bc:1d:7e:f6:2e:2e:c3:2b:46:ab:
                    3e:56:3d:29:3b:40:5d:00:00:ae:8e:e5:e6:4e:91:
                    48:8c:69:18:d9:28:76:1d:59:07:e3:9d:02:de:e3:
                    98:67:13:2b:c7:38:69:59:62:7f:68:51:cd:88:0f:
                    05:b1:c7:36:f1:01:97:4c:78:8d:b2:8b:ca:d8:0f:
                    dd:6c:cc:a2:1d:67:4f:8c:cd:53:8f:3c:f8:24:46:
                    cd:1a:7e:5b:1d:8a:23:d2:69:73:16:cf:08:11:13:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CF:4D:1D:9C:43:4E:AC:D4:C9:C8:29:4B:61:1E:24:9D:B2:E7:AA
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132322e302f32332d3233203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:2c:9f:7b:a3:45:70:2a:27:17:ef:0b:2c:a2:f7:86:a2:
         72:ce:0c:dd:f0:ff:35:55:67:b0:48:6e:67:8f:4f:b4:90:40:
         a9:0c:c5:7f:5f:86:b5:dd:9b:b2:c8:c3:e5:07:54:86:c0:48:
         c4:49:40:8e:36:4d:a9:13:da:83:56:77:32:a0:59:23:cd:74:
         4c:a1:58:e0:19:7c:af:b7:e2:ae:90:d8:54:6e:48:82:5b:4b:
         72:42:fc:2a:1b:5e:2a:5d:3b:08:e0:97:fa:5d:20:6b:fb:9a:
         51:5e:5a:f5:12:39:8f:c1:d3:d0:ae:b7:90:aa:d4:36:7a:73:
         ae:e8:0f:cd:ee:cf:66:54:14:26:1d:53:b7:ea:bf:2e:ec:13:
         6e:21:e0:e3:68:c3:aa:1b:1f:a8:d4:67:90:66:03:28:a0:77:
         28:ae:63:ed:d7:b3:cb:f4:f0:fa:e2:c5:7c:45:8f:79:a0:05:
         6c:78:7f:1e:6a:9a:00:ff:48:62:82:ec:cd:e3:18:97:c4:58:
         1c:8f:37:be:3f:26:77:19:23:c2:ea:9e:4a:3d:ef:54:07:40:
         a4:c1:a8:50:ad:11:4a:c8:78:85:3d:5f:ba:d8:15:71:ce:ce:
         b3:9d:a1:a5:62:28:86:e2:b2:55:6c:99:50:f6:3b:56:64:95:
         ca:68:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org