Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/34352e37312e3234342e302f32322d3234203d3e20323637363531.roa
File:                     34352e37312e3234342e302f32322d3234203d3e20323637363531.roa (raw, json)
Hash identifier:          rC1b3r0b+RtfyZjnSm/AaO+CiVmSSkxUHvDJZjMLCEk=
Subject key identifier:   70:4C:A3:CE:C9:53:6A:9D:EF:1F:CF:31:79:4C:55:0D:FC:12:59:51
Certificate issuer:       /CN=42BF35C6FF36C97758EA11F34742DBBF27A61DE9
Certificate serial:       54539736A5707B62AE5B7CD29AA796BD8AC39549
Authority key identifier: 42:BF:35:C6:FF:36:C9:77:58:EA:11:F3:47:42:DB:BF:27:A6:1D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/34352e37312e3234342e302f32322d3234203d3e20323637363531.roa
Signing time:             Fri 24 Nov 2023 19:00:00 +0000
ROA not before:           Fri 24 Nov 2023 18:55:00 +0000
ROA not after:            Fri 22 Nov 2024 19:00:00 +0000
asID:                     267651
IP address blocks:        45.71.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:53:97:36:a5:70:7b:62:ae:5b:7c:d2:9a:a7:96:bd:8a:c3:95:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BF35C6FF36C97758EA11F34742DBBF27A61DE9
        Validity
            Not Before: Nov 24 18:55:00 2023 GMT
            Not After : Nov 22 19:00:00 2024 GMT
        Subject: CN=704CA3CEC9536A9DEF1FCF31794C550DFC125951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:c3:8f:10:cf:db:2c:0b:01:80:11:47:cc:
                    1d:65:3f:27:8f:0d:78:16:b2:a6:93:46:8a:a3:74:
                    26:a9:d5:15:a9:b0:87:c8:32:36:3d:d1:c6:81:8e:
                    6a:bf:22:cf:3e:47:cb:85:8d:66:33:5e:38:7d:bf:
                    ac:a5:28:3c:08:8b:30:42:ff:bf:70:45:30:74:9f:
                    79:5d:67:3b:a8:1d:61:92:64:16:52:f1:c4:2f:ed:
                    04:dd:c8:f5:9b:53:7f:77:5d:45:74:ed:5a:70:d7:
                    1b:f0:da:df:05:eb:76:96:0b:23:d9:d4:6a:b5:15:
                    e5:76:28:ab:a1:46:87:f3:80:89:e6:2d:31:01:5d:
                    b0:31:10:1e:ef:2c:d9:b1:6d:00:b3:65:41:5d:ab:
                    cb:12:40:6f:d9:cb:be:22:ad:07:77:f9:f8:60:9c:
                    18:a5:ea:19:b0:9f:71:7f:bf:c3:d2:41:1c:8d:76:
                    42:2a:fe:b0:2d:e9:5b:67:6a:7e:5c:5f:b0:ad:ba:
                    0b:9e:76:e1:20:e2:f3:95:8c:17:fe:fc:a9:41:51:
                    68:d6:4c:f4:e9:49:e3:49:6a:3b:1b:04:7b:64:24:
                    ad:33:7b:9e:70:1f:99:38:6a:31:28:e4:11:8a:2d:
                    f2:09:c4:7a:c5:50:2c:47:f2:7e:da:f5:68:2d:1e:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4C:A3:CE:C9:53:6A:9D:EF:1F:CF:31:79:4C:55:0D:FC:12:59:51
            X509v3 Authority Key Identifier:
                keyid:42:BF:35:C6:FF:36:C9:77:58:EA:11:F3:47:42:DB:BF:27:A6:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42BF35C6FF36C97758EA11F34742DBBF27A61DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/34352e37312e3234342e302f32322d3234203d3e20323637363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:cb:bb:9a:bd:64:fc:a6:95:aa:bb:59:24:8f:72:48:fb:
         76:c4:ee:e7:37:b6:8d:38:ec:ac:af:af:23:45:ef:a4:82:42:
         f0:2c:e9:82:1e:8f:2c:c6:5c:60:50:eb:e8:b2:43:e5:28:4f:
         03:60:c5:2e:2f:70:90:75:a9:72:38:e0:82:75:e6:b8:ef:30:
         ed:3d:1b:5e:4c:b6:ed:fe:da:32:bb:36:df:1d:ac:61:07:1a:
         37:d8:ca:38:01:e0:7c:2b:ee:f3:ff:29:cd:89:44:3d:30:7e:
         05:f7:20:c5:2f:73:39:83:2c:d7:ed:29:7b:01:04:50:cc:ee:
         9d:9c:d0:84:16:1f:78:ae:2b:76:1d:66:a5:1f:bb:0d:ee:2d:
         44:7c:5e:01:de:69:b4:54:9f:8c:77:2a:56:35:27:24:68:ed:
         ce:36:ff:5f:73:75:39:c8:6b:bb:bf:24:2d:f7:c9:e9:11:e8:
         8c:13:8e:a1:38:a5:60:5c:c9:d8:6a:5c:9d:c0:0d:d5:cc:43:
         df:6d:2a:64:4f:80:20:0d:72:e4:7e:dd:46:ae:5d:62:20:c2:
         db:94:0b:8c:f8:bb:16:31:f0:53:65:57:e1:9a:f5:ee:c8:b8:
         cb:f1:f0:e1:86:76:73:7d:a3:7c:84:b8:ac:1e:f2:93:1f:bd:
         70:8d:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org