Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3230382e302f32332d3233203d3e20323637363339.roa
File:                     34352e37312e3230382e302f32332d3233203d3e20323637363339.roa (raw, json)
Hash identifier:          Zk93rdXHmz3kUYltFFrOUGWZ742oWhCluiq4PJD2ctQ=
Subject key identifier:   D9:F2:9B:D4:AD:57:1D:79:7F:74:23:DC:15:2A:64:F0:B3:E4:AF:83
Certificate issuer:       /CN=96C551B1BED1686A4D75A83505D3FD0D95045824
Certificate serial:       65EF99517DCEECF96882BE2A5E63AE3C31046D51
Authority key identifier: 96:C5:51:B1:BE:D1:68:6A:4D:75:A8:35:05:D3:FD:0D:95:04:58:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96C551B1BED1686A4D75A83505D3FD0D95045824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3230382e302f32332d3233203d3e20323637363339.roa
Signing time:             Thu 29 Jun 2023 17:19:12 +0000
ROA not before:           Thu 29 Jun 2023 17:14:12 +0000
ROA not after:            Thu 27 Jun 2024 17:19:12 +0000
asID:                     267639
IP address blocks:        45.71.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ef:99:51:7d:ce:ec:f9:68:82:be:2a:5e:63:ae:3c:31:04:6d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96C551B1BED1686A4D75A83505D3FD0D95045824
        Validity
            Not Before: Jun 29 17:14:12 2023 GMT
            Not After : Jun 27 17:19:12 2024 GMT
        Subject: CN=D9F29BD4AD571D797F7423DC152A64F0B3E4AF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:36:d4:29:97:79:53:83:96:ee:4c:20:5c:
                    6b:81:20:7f:2b:13:d1:f0:61:23:12:88:b9:b4:22:
                    9e:6a:c2:0e:61:78:79:2f:25:fb:d8:c7:fa:8d:eb:
                    66:49:50:b8:d8:d2:35:8c:fc:9f:1d:c9:16:bc:42:
                    f8:74:c6:d3:1a:91:93:d3:12:a5:8b:98:a6:1a:35:
                    76:e7:e1:ae:fa:72:91:0c:0f:87:66:2b:ff:0e:c5:
                    49:ab:3c:60:cf:af:2d:e4:eb:8a:58:5b:fa:87:60:
                    ea:20:9c:04:5f:94:ee:ad:46:05:13:ef:c0:02:bf:
                    f0:ac:47:53:a4:ee:ce:cc:bc:d5:b3:da:33:d9:fc:
                    79:89:7c:37:43:82:ee:fe:ba:16:66:cd:78:69:2a:
                    35:3a:23:f9:99:0b:5d:3e:84:b5:99:98:0b:ea:e8:
                    b6:1d:4d:1e:5d:8e:27:5c:da:a3:43:c7:06:7a:1b:
                    02:fd:1f:14:65:6f:42:c0:87:f0:96:21:ce:48:92:
                    f6:6f:86:48:dd:8f:dc:15:a9:4d:03:58:1a:7d:33:
                    1c:7d:21:9d:87:32:c0:02:b6:83:b8:f2:52:46:8d:
                    1b:4e:89:61:f9:3c:31:d8:4f:e5:8a:26:df:2d:8c:
                    50:15:e7:dc:bc:1c:a3:9f:b1:c0:19:c4:a7:e1:43:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F2:9B:D4:AD:57:1D:79:7F:74:23:DC:15:2A:64:F0:B3:E4:AF:83
            X509v3 Authority Key Identifier:
                keyid:96:C5:51:B1:BE:D1:68:6A:4D:75:A8:35:05:D3:FD:0D:95:04:58:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/96C551B1BED1686A4D75A83505D3FD0D95045824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96C551B1BED1686A4D75A83505D3FD0D95045824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3230382e302f32332d3233203d3e20323637363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:f0:cc:91:eb:20:ee:52:58:95:da:8e:fd:f9:58:e0:f8:5a:
         b1:31:5b:03:31:35:42:5f:c3:d1:c3:fb:83:93:79:32:f7:40:
         62:cb:10:a8:bc:39:b8:95:8e:c9:11:8b:71:f3:bf:a3:a9:1a:
         99:c5:53:d6:78:c7:50:0f:08:96:f6:3e:bf:55:ae:68:90:07:
         0b:6a:35:df:74:1b:c9:78:f6:25:a2:a3:7e:88:23:19:e8:8c:
         c8:87:19:d4:49:a6:aa:0c:31:70:e3:9e:94:06:23:49:4a:9a:
         f9:dc:61:e6:29:0c:53:00:64:27:b6:50:f0:15:d1:c0:55:cc:
         b6:6e:94:79:7e:5d:ca:20:ff:8a:dc:96:2a:db:01:f9:51:4c:
         7e:e1:f1:09:5f:37:7a:7b:cd:6b:ac:0a:36:da:f5:18:2a:62:
         4c:6b:c3:f0:34:88:06:ff:81:7b:94:be:c1:6c:87:ea:eb:63:
         1b:71:10:9f:11:e3:f5:2d:e6:84:ed:ea:48:df:38:23:be:01:
         7e:2a:ab:64:88:ba:25:fe:62:86:44:e8:18:f2:c3:6b:9c:4e:
         06:39:49:e1:b1:ef:4d:c6:10:15:ac:d9:d1:d1:9d:01:1c:85:
         b1:5e:f5:6a:73:63:d7:f3:15:e6:5e:a4:de:7d:5c:04:f5:3f:
         d4:4c:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:47 2024 by rpki-client on console-ams.rpki-client.org