Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134352e302f32342d3234203d3e20323636363035.roa
File:                     34352e372e3134352e302f32342d3234203d3e20323636363035.roa (raw, json)
Hash identifier:          wVvaz1S4r1zirCQENbUSym3jJ+fRv2sDktwc2MIHjEI=
Subject key identifier:   8E:5D:08:9C:37:E4:31:B0:1F:B9:25:EF:B0:9A:5E:5F:86:BB:6B:A6
Certificate issuer:       /CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
Certificate serial:       0D9B3E3A7809A453ABDDA9952751B99EB68F965F
Authority key identifier: 72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134352e302f32342d3234203d3e20323636363035.roa
Signing time:             Wed 03 May 2023 14:47:53 +0000
ROA not before:           Wed 03 May 2023 14:42:53 +0000
ROA not after:            Wed 01 May 2024 14:47:53 +0000
asID:                     266605
IP address blocks:        45.7.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9b:3e:3a:78:09:a4:53:ab:dd:a9:95:27:51:b9:9e:b6:8f:96:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
        Validity
            Not Before: May  3 14:42:53 2023 GMT
            Not After : May  1 14:47:53 2024 GMT
        Subject: CN=8E5D089C37E431B01FB925EFB09A5E5F86BB6BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:c7:d7:3f:f0:54:4c:56:60:a0:d4:43:a2:
                    35:95:e0:59:1a:c0:e5:9b:a6:1e:b4:e9:16:62:b2:
                    7c:79:b4:27:88:fd:a2:e2:a5:76:ce:ba:08:2c:9d:
                    46:c8:0b:6d:47:35:60:89:c0:63:30:2f:bb:07:a5:
                    31:5f:be:6c:e9:78:48:3c:99:4e:58:0e:20:fc:56:
                    d0:1b:56:1e:14:d4:a5:f3:8f:36:17:07:87:26:8c:
                    d9:e4:6a:c6:99:e8:93:0b:82:b4:56:ce:66:ea:68:
                    a5:bb:f5:d8:db:ea:9e:49:a9:98:d2:a7:cb:07:9f:
                    48:91:7f:1a:ef:bf:d7:36:48:16:24:7e:54:9c:76:
                    c9:2b:1b:bb:0b:08:15:98:f7:c7:7b:1b:35:94:9f:
                    25:d1:bb:72:e9:6b:ee:fa:73:33:b5:45:a6:26:5d:
                    78:b7:d2:7a:45:2e:31:bc:1e:7d:07:78:63:f7:cc:
                    c0:3c:d9:45:df:4e:2e:80:0a:27:32:1c:19:91:77:
                    9c:ed:95:f1:fd:e8:80:3c:bb:d9:3a:77:ad:d2:e4:
                    3e:cb:d5:bd:69:95:db:30:cd:ac:0c:94:ac:24:02:
                    5b:a7:31:6e:0e:a9:55:13:f3:ad:d6:c1:68:72:f5:
                    05:67:d6:f7:ae:c6:d8:f3:6f:bb:72:9c:f1:95:f3:
                    d5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:08:9C:37:E4:31:B0:1F:B9:25:EF:B0:9A:5E:5F:86:BB:6B:A6
            X509v3 Authority Key Identifier:
                keyid:72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134352e302f32342d3234203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:3d:69:b0:ee:5c:78:d2:ec:6a:11:8f:a3:62:75:44:53:
         98:cd:81:d8:10:c2:e0:33:1a:0a:d8:3c:c0:ec:1e:57:0f:18:
         2c:e5:31:ed:09:ba:53:cb:ec:e7:ac:2a:46:7f:f1:16:ef:bf:
         91:f6:4e:8d:a4:e9:75:5d:bc:2b:a4:fd:f0:90:b3:4c:85:b7:
         aa:ab:de:6d:ae:09:9a:34:d4:27:12:ba:4e:3c:6d:00:ec:01:
         ed:7f:7e:a3:f5:f1:9c:80:39:ad:58:31:46:10:9a:19:c8:5b:
         44:6a:4a:64:b5:c6:06:3e:28:5f:14:b0:fa:54:dd:0e:cf:39:
         7f:b8:d1:56:55:16:9e:03:9e:6c:63:ab:6b:1c:86:1d:ae:eb:
         14:d1:3b:4e:cb:67:4b:05:cd:76:7d:58:81:b6:b8:55:ad:93:
         bf:66:ea:00:81:76:c3:0a:d6:e6:36:41:19:b8:b1:01:c3:bf:
         d4:7c:bf:f0:c5:88:9d:09:4d:72:e0:86:08:6f:41:95:9d:3d:
         26:27:dd:d8:5a:47:94:0e:ef:61:ba:b3:20:e7:38:90:d8:e4:
         46:76:c2:c2:de:2f:2a:d8:ca:0a:24:07:3e:be:09:96:0e:36:
         08:75:35:f1:fc:ea:44:9b:61:da:96:44:78:c8:70:70:bb:48:
         54:55:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org