Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3231312e302f32342d3234203d3e20323637363339.roa
File:                     34352e37312e3231312e302f32342d3234203d3e20323637363339.roa (raw, json)
Hash identifier:          rO9kYyX5rDsk5jFGffW3aiVINMTOgrSh9Sj/eh2yZ8A=
Subject key identifier:   E6:1D:BD:D2:64:82:FB:2E:C8:66:7F:66:3E:03:2B:0B:F0:AC:3E:DF
Certificate issuer:       /CN=96C551B1BED1686A4D75A83505D3FD0D95045824
Certificate serial:       63A9C5C7ECCB53ECB670E25F4448819A44C1FBA0
Authority key identifier: 96:C5:51:B1:BE:D1:68:6A:4D:75:A8:35:05:D3:FD:0D:95:04:58:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96C551B1BED1686A4D75A83505D3FD0D95045824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3231312e302f32342d3234203d3e20323637363339.roa
Signing time:             Thu 29 Jun 2023 17:19:15 +0000
ROA not before:           Thu 29 Jun 2023 17:14:15 +0000
ROA not after:            Thu 27 Jun 2024 17:19:15 +0000
asID:                     267639
IP address blocks:        45.71.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a9:c5:c7:ec:cb:53:ec:b6:70:e2:5f:44:48:81:9a:44:c1:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96C551B1BED1686A4D75A83505D3FD0D95045824
        Validity
            Not Before: Jun 29 17:14:15 2023 GMT
            Not After : Jun 27 17:19:15 2024 GMT
        Subject: CN=E61DBDD26482FB2EC8667F663E032B0BF0AC3EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:87:a3:a5:5d:54:c5:00:07:61:72:7a:6e:
                    ed:30:9b:5d:85:06:42:b8:8a:5d:15:5e:5c:b5:1d:
                    4d:d6:1d:b2:7d:60:8d:02:1d:6d:26:04:08:2e:67:
                    4c:1b:82:88:98:7b:77:9d:7e:2a:0c:59:53:6f:81:
                    b7:d4:6d:25:90:fe:5e:f3:02:73:53:d9:6b:c2:c0:
                    b4:2d:c9:c4:91:1a:04:dc:34:47:f4:f2:fc:1a:12:
                    74:3c:f4:16:b1:82:60:fa:31:b1:08:8d:80:72:4e:
                    db:18:bf:28:75:fb:dc:d6:ce:2c:f8:b5:87:ff:0c:
                    bb:28:7b:27:37:1f:31:ac:2a:59:db:fa:06:07:bb:
                    40:f0:79:d2:44:5a:c3:d2:af:9d:47:70:aa:c2:97:
                    ac:5f:c0:82:82:76:a4:45:ad:8c:a6:92:9a:98:23:
                    d8:6a:30:06:79:a2:e8:c4:6f:01:e8:38:98:15:15:
                    14:7f:f9:6f:44:c6:03:8f:e1:5f:27:41:85:9a:13:
                    f3:1c:36:e5:2e:03:82:f4:d3:ad:4b:ed:e9:3f:5d:
                    f3:ab:f3:89:17:3f:cd:48:5f:cf:b3:89:f4:75:1a:
                    e1:04:17:7b:ee:74:6c:cb:aa:49:6b:cb:0e:67:78:
                    e4:0b:f8:7b:c0:4f:eb:31:5e:16:e7:60:76:fc:b0:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1D:BD:D2:64:82:FB:2E:C8:66:7F:66:3E:03:2B:0B:F0:AC:3E:DF
            X509v3 Authority Key Identifier:
                keyid:96:C5:51:B1:BE:D1:68:6A:4D:75:A8:35:05:D3:FD:0D:95:04:58:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/96C551B1BED1686A4D75A83505D3FD0D95045824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96C551B1BED1686A4D75A83505D3FD0D95045824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3231312e302f32342d3234203d3e20323637363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b8:7c:61:0e:c0:36:37:de:be:30:2e:af:f4:3b:9e:47:2a:
         7b:35:6b:ae:0f:e9:26:15:5d:a8:7d:ac:0a:33:d0:26:6a:46:
         94:d8:e7:d1:c1:17:17:58:8f:8f:20:2d:fd:58:f5:ca:2e:c7:
         9b:a6:6e:a3:75:da:f7:38:c5:71:10:ec:a6:7e:15:3b:93:49:
         4d:ff:3b:fe:51:f8:6c:32:9b:cc:f8:ed:69:b8:69:10:f6:2e:
         22:f3:b6:a7:0f:67:f5:6c:6f:68:2a:99:e6:bb:1b:63:07:c4:
         b4:83:43:68:9b:50:3c:24:e7:a9:eb:57:fb:df:cd:de:c3:ce:
         2d:dd:d7:3b:f1:80:90:4a:0c:ad:f6:2e:62:d2:44:e1:0f:1f:
         72:ad:df:6b:b1:cf:9b:12:f1:18:52:26:1f:fe:f6:e9:92:ed:
         a0:39:8d:51:4e:48:85:6b:98:f1:79:db:7e:19:43:4f:67:13:
         ff:c2:58:b9:73:fb:f5:27:96:eb:1b:0f:f2:fd:9b:cb:a4:82:
         60:1a:18:d6:b9:1b:4f:0c:64:bb:b1:2e:e9:59:d1:17:10:a3:
         1e:c8:0e:e4:ca:57:d8:c2:a4:c6:06:df:35:34:db:f5:fd:ed:
         ef:7c:eb:5b:0c:ac:d4:29:7e:52:ea:5d:87:b5:27:b3:0f:c6:
         b9:75:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org