Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa
File:                     34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa (raw, json)
Hash identifier:          X+nKA9OfYDNuW9c3NPOYOnH9fdKFXNvoxfqVSRY9vS0=
Subject key identifier:   AA:8F:31:47:87:7C:77:B9:01:5D:32:69:02:BF:CA:D5:D5:39:6D:FE
Certificate issuer:       /CN=B73BF0E2F1298145FEEE53A6FD22172627C39AAC
Certificate serial:       047DF7520072C7E5B93D6308A8E0538C7BC9F050
Authority key identifier: B7:3B:F0:E2:F1:29:81:45:FE:EE:53:A6:FD:22:17:26:27:C3:9A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa
Signing time:             Wed 12 Jul 2023 21:11:54 +0000
ROA not before:           Wed 12 Jul 2023 21:06:54 +0000
ROA not after:            Wed 10 Jul 2024 21:11:54 +0000
asID:                     267147
IP address blocks:        45.229.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:f7:52:00:72:c7:e5:b9:3d:63:08:a8:e0:53:8c:7b:c9:f0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73BF0E2F1298145FEEE53A6FD22172627C39AAC
        Validity
            Not Before: Jul 12 21:06:54 2023 GMT
            Not After : Jul 10 21:11:54 2024 GMT
        Subject: CN=AA8F3147877C77B9015D326902BFCAD5D5396DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:cb:9c:33:a9:24:da:86:7c:46:b5:79:06:
                    de:64:7e:1d:88:6a:bd:39:61:20:e4:d2:37:5a:0b:
                    77:1d:78:db:d2:ac:b5:ef:4a:0b:7f:04:ff:5f:fc:
                    29:3c:2b:85:05:e9:e0:b2:15:b2:17:a8:bd:ff:9e:
                    c4:30:a8:cc:47:8b:ab:e9:77:5a:84:9e:81:2c:6e:
                    0c:43:d1:26:7d:30:a6:d6:55:f8:bc:c1:5d:3d:e9:
                    59:16:40:76:f5:03:6b:1e:9a:11:34:ff:54:26:0f:
                    ed:7d:f5:1c:ae:72:bb:8d:a2:22:c9:f2:20:27:08:
                    f0:9f:56:a0:11:73:64:84:9d:03:43:b7:df:87:bc:
                    bc:fd:51:4c:9c:3b:bd:7d:1c:ca:09:ee:ba:84:db:
                    70:84:94:77:67:0b:42:13:f2:bc:6a:74:6b:86:5c:
                    74:5f:7e:8a:c3:69:92:d9:2b:71:8f:11:18:37:71:
                    5e:20:b6:9d:5b:eb:a0:b5:d8:e6:a0:2a:dd:4a:bf:
                    a6:ed:24:99:13:d0:e5:1d:1a:f0:2c:d3:4e:e5:81:
                    84:cc:c2:e1:3b:74:ee:d2:ed:79:09:3e:78:5c:c8:
                    2f:14:be:fa:41:35:a8:a6:eb:36:01:65:6a:f9:7d:
                    ed:41:ac:63:bd:fd:68:88:26:19:84:83:dc:86:f0:
                    78:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8F:31:47:87:7C:77:B9:01:5D:32:69:02:BF:CA:D5:D5:39:6D:FE
            X509v3 Authority Key Identifier:
                keyid:B7:3B:F0:E2:F1:29:81:45:FE:EE:53:A6:FD:22:17:26:27:C3:9A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:49:22:3e:41:4c:22:4c:e1:b9:7f:e3:fe:a3:33:a7:67:65:
         40:94:de:b4:ee:c3:67:2f:bd:82:b1:61:df:a1:79:fb:aa:0b:
         1c:a0:3c:7b:f6:67:79:58:59:a6:0a:7b:e7:e4:8a:37:ea:4f:
         20:26:7f:af:3c:cf:61:fa:53:0b:c8:a8:49:c7:3d:08:52:cc:
         14:b7:13:59:64:a8:2d:2a:07:76:57:db:bc:76:23:90:aa:98:
         e5:57:48:bd:cc:7a:03:fc:d5:a4:c7:43:e9:09:63:07:0f:c9:
         ab:41:af:45:67:8e:7f:de:99:26:3e:52:a0:87:ef:95:40:da:
         3d:59:37:05:a1:78:e5:15:39:d2:81:13:30:1f:ef:24:68:65:
         83:40:d7:e5:0c:b9:d2:2a:dc:55:af:47:74:0f:f7:87:3c:28:
         bc:26:b4:aa:6b:c9:fd:a0:92:7f:4f:1d:4e:f9:40:71:e1:ba:
         56:44:ef:8c:02:59:58:22:fe:ab:94:47:02:41:ac:92:43:43:
         97:9a:6a:15:cd:7f:34:e8:ed:b4:19:7f:e5:a5:c2:76:19:2a:
         18:19:ea:f7:30:37:ee:8b:d3:b1:6b:1d:5c:09:70:42:ad:7b:
         9f:2d:68:23:9d:30:85:05:16:98:37:9e:69:ce:73:f7:08:e6:
         1f:26:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org