Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/34352e37312e37392e302f32342d3234203d3e20323637363135.roa
File:                     34352e37312e37392e302f32342d3234203d3e20323637363135.roa (raw, json)
Hash identifier:          umfXxBbNaUeeaijmz4K1itImuHlo2YRlgNA4hXbUJ2M=
Subject key identifier:   89:BD:7C:BB:23:EA:95:25:1D:C1:B3:2F:08:14:4A:71:10:B2:42:4C
Certificate issuer:       /CN=41BBCAF32C7158F069662D048CCCA087F19C8448
Certificate serial:       7ED073B0F8FDE47017B488D935C04373552334BD
Authority key identifier: 41:BB:CA:F3:2C:71:58:F0:69:66:2D:04:8C:CC:A0:87:F1:9C:84:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BBCAF32C7158F069662D048CCCA087F19C8448.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/34352e37312e37392e302f32342d3234203d3e20323637363135.roa
Signing time:             Mon 23 May 2022 19:40:04 +0000
ROA not before:           Mon 23 May 2022 19:35:04 +0000
ROA not after:            Mon 22 May 2023 19:40:04 +0000
asID:                     267615
IP address blocks:        45.71.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d0:73:b0:f8:fd:e4:70:17:b4:88:d9:35:c0:43:73:55:23:34:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BBCAF32C7158F069662D048CCCA087F19C8448
        Validity
            Not Before: May 23 19:35:04 2022 GMT
            Not After : May 22 19:40:04 2023 GMT
        Subject: CN=89BD7CBB23EA95251DC1B32F08144A7110B2424C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:5c:31:ac:a3:cb:a5:7c:08:fa:d2:3f:16:
                    2a:3b:c1:f4:53:ea:5a:c0:95:97:c0:bd:8e:79:e6:
                    63:75:1f:07:ec:9e:fd:99:7b:90:45:dd:eb:a6:ca:
                    10:86:78:8a:50:0c:c5:00:82:15:a5:e2:73:3b:ad:
                    5d:f7:55:46:4a:c5:81:51:20:a2:a7:07:72:ab:42:
                    01:bb:03:4b:d9:cf:bc:ad:47:d2:1c:e8:08:bf:3d:
                    e0:23:ab:78:ae:45:82:0c:35:e9:83:5f:99:49:ee:
                    c3:31:c5:e1:f3:4f:cf:f4:b0:93:1f:05:d4:a3:f0:
                    6f:43:09:e6:0c:4d:3c:24:d1:4c:81:28:29:c3:5f:
                    c2:da:12:4f:e2:33:1d:31:88:c8:f2:49:95:86:eb:
                    42:a5:1b:e1:c4:4d:d0:2d:85:c1:ff:61:c3:f6:2d:
                    91:ec:7d:f6:19:d3:67:21:aa:55:4e:ea:2e:46:31:
                    bb:b9:5e:35:a4:ba:74:9d:c9:41:23:a0:b5:9f:3f:
                    dd:ab:a2:ac:e1:00:65:38:d9:e7:ec:fd:ee:0b:ae:
                    9d:d9:0f:8f:cd:24:6a:95:0a:17:aa:09:af:c9:13:
                    a8:29:0a:8d:b4:69:59:70:d2:71:d0:40:38:3e:9a:
                    83:e0:18:97:50:2a:e5:3c:d7:d7:63:42:ed:be:3a:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BD:7C:BB:23:EA:95:25:1D:C1:B3:2F:08:14:4A:71:10:B2:42:4C
            X509v3 Authority Key Identifier:
                keyid:41:BB:CA:F3:2C:71:58:F0:69:66:2D:04:8C:CC:A0:87:F1:9C:84:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/41BBCAF32C7158F069662D048CCCA087F19C8448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BBCAF32C7158F069662D048CCCA087F19C8448.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/34352e37312e37392e302f32342d3234203d3e20323637363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:12:cd:fc:6d:0b:d8:f1:46:91:a9:ab:6f:a5:f5:b9:3f:
         da:05:43:b1:c7:c0:da:41:37:a0:f0:d1:59:99:0c:e7:23:e1:
         e9:ce:dd:ac:ff:8c:7c:97:3e:3e:f2:08:1e:3b:c5:f3:bc:38:
         44:ed:50:a1:1d:96:b6:c8:16:84:c2:99:ed:e8:14:d1:b7:26:
         9d:17:07:f0:d1:93:4d:7f:84:08:0b:08:0f:6c:29:5b:41:aa:
         fc:fc:1a:b0:b7:a8:04:9a:0d:42:1c:b3:4b:11:62:af:0c:0e:
         a1:8a:07:4a:b1:a8:a4:08:53:3c:4c:f3:b8:fa:87:93:e1:4a:
         f4:c6:e3:93:88:45:94:34:11:7a:e3:fd:62:ac:9e:fc:44:b1:
         3a:e0:e4:d8:62:b4:ce:c8:fc:ac:cf:da:18:15:45:a4:2d:67:
         01:5b:fe:9b:8a:54:6f:59:62:eb:01:92:05:99:69:58:aa:82:
         ba:17:8a:65:ae:34:9a:2c:71:20:43:67:88:aa:11:f1:c7:f9:
         56:31:a6:94:cc:5b:89:b1:c4:bf:13:31:0d:97:e4:9c:68:39:
         09:c5:ea:fc:ca:14:8d:e1:39:34:1b:2d:b4:80:ba:0f:27:58:
         a6:2f:6e:c5:d9:13:b3:f0:f8:cb:12:86:a0:79:cc:47:07:8b:
         11:93:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org