Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132332e302f32342d3234203d3e20323637363139.roa
File:                     34352e37312e3132332e302f32342d3234203d3e20323637363139.roa (raw, json)
Hash identifier:          3HnxzrDa6s/NGT34/pqdB1Lj1fCSQ8PtT5aCXKTpKi0=
Subject key identifier:   59:4D:29:46:EA:AD:8A:AA:DF:69:04:F6:D9:DC:B2:18:EB:AB:4B:14
Certificate issuer:       /CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
Certificate serial:       44B9D591CD2D7E86257F881CBD87A2D436E20B75
Authority key identifier: 1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132332e302f32342d3234203d3e20323637363139.roa
Signing time:             Wed 13 Jul 2022 16:00:03 +0000
ROA not before:           Wed 13 Jul 2022 15:55:03 +0000
ROA not after:            Thu 13 Jul 2023 16:00:03 +0000
asID:                     267619
IP address blocks:        45.71.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b9:d5:91:cd:2d:7e:86:25:7f:88:1c:bd:87:a2:d4:36:e2:0b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D007750345D71D7262F4B5A9298B728EDDBB40A
        Validity
            Not Before: Jul 13 15:55:03 2022 GMT
            Not After : Jul 13 16:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:3b:5a:4f:3c:02:ae:b2:cb:05:98:9f:c5:
                    ea:be:24:bb:2c:bb:dc:5c:3d:46:05:de:c4:97:0e:
                    57:89:4c:52:f2:c8:32:5b:10:24:d7:eb:17:57:64:
                    45:f0:fc:65:83:73:1d:ae:c7:f4:1d:d9:ff:ae:a2:
                    ab:b5:16:24:9d:59:09:05:88:21:70:1a:88:f2:2d:
                    10:82:d3:00:92:4e:4b:29:70:05:d0:dd:32:dc:31:
                    67:d7:5f:24:71:ca:f2:c3:64:bc:61:1c:83:f4:23:
                    68:66:7c:34:ac:06:49:5b:ce:61:35:3e:b7:02:c5:
                    53:fc:dd:ee:8c:17:4e:b2:6a:94:b0:af:b4:73:3b:
                    b9:66:49:8d:a5:56:61:73:50:f3:de:97:6b:79:f4:
                    22:23:c7:76:cb:11:c8:23:ce:e6:61:90:cd:d8:5c:
                    2c:2a:fb:85:be:6b:9c:a4:73:f4:28:65:fa:79:e0:
                    f0:25:57:21:cc:92:70:4b:87:17:29:ef:aa:58:19:
                    92:cc:65:40:bc:ee:51:33:20:94:7b:cb:91:bc:4c:
                    56:b9:8a:4b:ca:92:ae:04:db:94:bc:11:b3:a0:55:
                    84:79:15:c3:61:25:40:9b:60:78:02:6c:82:90:f0:
                    39:02:61:a1:d5:fb:4b:14:7d:eb:92:3e:46:89:10:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:29:46:EA:AD:8A:AA:DF:69:04:F6:D9:DC:B2:18:EB:AB:4B:14
            X509v3 Authority Key Identifier:
                keyid:1D:00:77:50:34:5D:71:D7:26:2F:4B:5A:92:98:B7:28:ED:DB:B4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D007750345D71D7262F4B5A9298B728EDDBB40A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/34352e37312e3132332e302f32342d3234203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:24:39:3a:81:38:38:b5:da:2d:42:7e:15:30:ff:5c:87:48:
         3a:55:0e:35:0a:0d:f4:93:8b:b2:ce:ac:4b:35:77:55:7b:60:
         7f:0e:83:4c:e3:4a:86:da:e1:66:18:5b:6e:9f:11:40:96:f3:
         6d:b1:96:04:77:51:a7:ea:b8:f9:64:09:12:36:57:ad:bb:0b:
         03:da:83:4a:a6:42:63:97:12:0d:67:5c:10:e5:2b:cc:b9:47:
         71:e0:5a:94:dd:ff:ff:e4:a1:e0:9c:71:d4:1e:d3:b1:1b:ec:
         59:4e:6a:a8:67:e2:48:97:2f:d3:3c:3a:dc:62:6e:74:b6:5d:
         6d:95:ae:33:38:b2:1c:7c:fe:55:8d:88:33:52:a1:58:16:c8:
         04:94:35:b8:76:85:11:fa:6d:c0:79:3d:01:67:c5:25:ad:f9:
         ce:35:80:e0:db:f0:dd:c9:bd:e5:d7:f2:0c:9a:da:8e:44:55:
         2b:5b:68:13:9d:ef:be:76:76:e6:17:eb:5a:8c:72:a2:7a:76:
         36:c6:51:e6:fd:af:2a:32:a6:3e:b7:08:c2:c9:04:d0:bb:96:
         ae:42:98:6e:62:09:31:6a:6f:04:00:f3:7d:27:84:b7:69:bc:
         cf:7f:79:0a:fd:50:9a:33:db:88:21:be:31:2b:88:58:e0:c1:
         52:60:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org