Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/34352e372e37322e302f32322d3332203d3e20323636353730.roa
File:                     34352e372e37322e302f32322d3332203d3e20323636353730.roa (raw, json)
Hash identifier:          CwnxFshsNU5XYoSNN3TvafobSh9L0RZo8gGCJxouXeg=
Subject key identifier:   32:B6:13:73:B2:73:36:8A:00:53:79:5C:63:14:3F:5B:F4:A4:DC:05
Certificate issuer:       /CN=812F807836230E914AEF116903FCD6FE876B31CB
Certificate serial:       414ABE5D2BC72CBBCB811CE394FC71AE822CA536
Authority key identifier: 81:2F:80:78:36:23:0E:91:4A:EF:11:69:03:FC:D6:FE:87:6B:31:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F807836230E914AEF116903FCD6FE876B31CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/34352e372e37322e302f32322d3332203d3e20323636353730.roa
Signing time:             Fri 22 Mar 2024 01:08:41 +0000
ROA not before:           Fri 22 Mar 2024 01:03:41 +0000
ROA not after:            Fri 21 Mar 2025 01:08:41 +0000
asID:                     266570
IP address blocks:        45.7.72.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4a:be:5d:2b:c7:2c:bb:cb:81:1c:e3:94:fc:71:ae:82:2c:a5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F807836230E914AEF116903FCD6FE876B31CB
        Validity
            Not Before: Mar 22 01:03:41 2024 GMT
            Not After : Mar 21 01:08:41 2025 GMT
        Subject: CN=32B61373B273368A0053795C63143F5BF4A4DC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:6e:60:bb:f2:76:48:d6:6f:31:c1:f0:80:
                    e6:35:32:1b:f5:bb:61:48:ca:12:01:58:2b:db:2e:
                    c9:14:e0:6f:0e:9a:92:0b:b9:f5:92:c7:d8:37:a6:
                    32:db:69:8a:b4:f1:30:69:7c:2f:ee:8d:a3:4e:b3:
                    20:0f:eb:b8:48:97:69:c5:a2:9d:2c:c5:3e:bb:76:
                    41:55:9c:43:5c:99:43:23:80:38:0c:80:12:2e:ff:
                    5b:f4:2b:b4:98:e2:db:47:0b:1f:55:10:bd:1f:01:
                    19:a6:fb:bd:39:0d:c5:01:58:6b:7d:89:74:57:ea:
                    c0:95:3a:c4:c6:07:30:65:c5:0b:9a:1b:72:16:e2:
                    6d:1b:28:7e:0d:56:04:f2:a8:a6:d8:b1:08:b1:28:
                    1a:dd:cd:70:65:e2:0b:16:d5:bb:97:2e:ec:08:8c:
                    b3:c3:d9:0c:84:ec:0e:57:f7:a3:a2:b3:63:88:83:
                    10:65:e7:3c:9d:63:ba:dc:64:42:63:fb:05:05:a1:
                    2c:5c:b8:28:7a:40:99:9b:bc:02:d2:29:83:2f:e4:
                    be:cd:7d:35:1a:a7:b8:0c:ed:c2:67:23:48:e0:4a:
                    7d:b1:1a:79:ea:e8:eb:75:bd:1c:d0:1e:9d:7a:a1:
                    69:2e:e5:89:a1:e4:24:99:65:71:38:9b:dc:1a:dd:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:13:73:B2:73:36:8A:00:53:79:5C:63:14:3F:5B:F4:A4:DC:05
            X509v3 Authority Key Identifier:
                keyid:81:2F:80:78:36:23:0E:91:4A:EF:11:69:03:FC:D6:FE:87:6B:31:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/812F807836230E914AEF116903FCD6FE876B31CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F807836230E914AEF116903FCD6FE876B31CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/34352e372e37322e302f32322d3332203d3e20323636353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:b3:a3:b5:96:fe:fe:77:12:ac:cd:f6:b9:f5:74:74:27:88:
         62:76:1b:64:34:61:1d:44:ac:c5:e7:66:a9:6e:e1:03:84:00:
         d8:7d:52:7f:d9:aa:b5:2e:7d:a5:4b:17:b3:03:a0:5c:75:52:
         cd:10:59:6b:a3:54:69:4b:3b:2d:8a:0a:2c:27:5a:9f:8a:47:
         cf:de:38:a8:ef:22:b2:4a:5c:bc:0a:7b:72:5f:3b:e5:93:61:
         43:20:8c:3c:48:3a:9a:73:a0:e6:f5:c7:33:66:75:25:b6:2a:
         c2:38:c1:ca:63:31:14:c2:d9:0b:a8:fe:63:80:fb:bc:b8:b1:
         17:a7:1c:af:a4:0d:20:74:9c:eb:64:a8:62:89:f3:d7:62:d3:
         e0:87:4e:06:54:95:35:d1:00:aa:5d:4a:d6:e6:fa:4b:5f:be:
         ad:37:07:e7:cd:82:cd:00:8c:d5:45:0c:16:ca:54:f0:95:0c:
         5e:da:8d:b9:e2:78:60:db:cb:0b:4b:d5:53:f4:c7:76:f9:11:
         0e:a6:ea:b3:70:f4:10:41:a3:d6:09:a5:db:66:03:3e:2d:2c:
         ff:b2:b2:5e:93:27:4b:11:dc:6e:62:43:a9:23:84:fd:be:1d:
         d0:b0:87:fc:ee:95:c7:a5:11:a9:bd:36:4f:ca:a0:0f:e2:80:
         f2:bb:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org