Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134372e302f32342d3234203d3e20323636363035.roa
File:                     34352e372e3134372e302f32342d3234203d3e20323636363035.roa (raw, json)
Hash identifier:          JZlqTlOH1S+F+yDIj9RKo0CpDszrDOrx9b9olZcz9XA=
Subject key identifier:   D1:CE:8C:DC:53:40:23:F3:DD:D4:6C:BB:F6:DE:8E:7C:64:D5:40:BF
Certificate issuer:       /CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
Certificate serial:       3C6272EF274336AFDFB75AA79EAA7BCC4E4F3A86
Authority key identifier: 72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134372e302f32342d3234203d3e20323636363035.roa
Signing time:             Wed 03 May 2023 14:47:59 +0000
ROA not before:           Wed 03 May 2023 14:42:59 +0000
ROA not after:            Wed 01 May 2024 14:47:59 +0000
asID:                     266605
IP address blocks:        45.7.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:62:72:ef:27:43:36:af:df:b7:5a:a7:9e:aa:7b:cc:4e:4f:3a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
        Validity
            Not Before: May  3 14:42:59 2023 GMT
            Not After : May  1 14:47:59 2024 GMT
        Subject: CN=D1CE8CDC534023F3DDD46CBBF6DE8E7C64D540BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a2:1c:80:a2:e8:a5:df:0f:3e:17:f0:41:0a:
                    f1:c7:6e:94:58:84:61:eb:3a:8d:8a:fd:32:2a:26:
                    ea:37:b2:bc:e6:c6:00:3f:ef:10:7b:34:9e:98:52:
                    e4:59:a5:9e:0d:b0:d8:c2:cd:bf:27:56:5e:f0:2d:
                    f0:1c:8c:4c:58:b1:53:17:d8:77:7f:a9:f4:a0:03:
                    73:97:e9:cb:1a:2e:a2:ba:a6:0c:1d:55:c8:91:c3:
                    c7:dc:e2:1a:ce:40:a0:6e:10:07:7b:51:f5:e5:e0:
                    af:9b:61:c1:65:4b:3f:af:f0:63:af:e2:f9:f3:6e:
                    ce:38:c0:9c:7f:85:27:fd:3e:5a:c2:41:e2:56:9c:
                    37:d8:2f:db:eb:c3:e5:f0:a3:a4:7a:ab:d3:f9:e8:
                    44:3e:d7:00:24:78:25:1e:a9:45:e3:f7:c0:97:dd:
                    c8:70:20:08:3e:15:59:5a:7e:a0:db:5a:b4:ca:4e:
                    ce:78:0c:a1:40:3a:46:ac:c8:f1:2c:a0:c0:c9:05:
                    a7:eb:fc:13:a7:00:01:8d:87:4e:a2:c0:06:8c:fc:
                    6f:7f:3a:a8:40:58:cc:a6:87:5f:a2:d6:09:f8:a8:
                    e9:37:d7:a2:69:4f:14:86:2f:26:55:76:d0:c9:c7:
                    f4:6b:9c:1e:ba:6c:ca:0c:b0:b0:59:de:eb:f6:6c:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CE:8C:DC:53:40:23:F3:DD:D4:6C:BB:F6:DE:8E:7C:64:D5:40:BF
            X509v3 Authority Key Identifier:
                keyid:72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134372e302f32342d3234203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:ef:cf:d3:33:6a:55:fd:90:e0:f8:df:42:73:7c:79:e3:53:
         2c:d0:3e:e8:dc:70:ee:ce:98:d2:9b:25:bb:cc:6d:5d:70:cb:
         83:92:8e:dc:88:af:39:b8:5b:67:8d:77:f1:6c:2a:eb:3c:3e:
         0c:1c:1e:af:66:be:a0:3c:21:af:68:bd:b0:da:a8:be:09:b4:
         c6:17:bf:20:92:51:d1:66:c0:b9:20:32:04:16:c5:ad:4d:72:
         28:a4:b8:77:3c:96:a3:d7:f2:dc:09:bf:51:69:e8:67:ab:b6:
         e1:f6:38:b0:ed:8d:cb:80:6c:4f:95:42:1b:47:8e:ab:32:68:
         1d:83:89:88:f5:93:01:37:7b:71:3a:37:8b:10:01:c4:21:32:
         12:6f:34:a0:64:cd:67:9a:88:17:be:fd:5d:82:a3:a3:7c:3a:
         7c:c2:8d:19:59:d0:86:37:8b:39:9d:ff:8c:1e:82:fc:a9:a8:
         3a:71:e9:4d:ba:e0:31:46:54:75:b3:05:22:8d:bb:47:eb:6e:
         da:82:f8:0e:ac:95:54:e8:ad:8b:8c:90:a9:b9:07:6e:c0:49:
         f4:6e:37:c2:49:60:f7:78:56:02:96:55:58:32:d5:42:82:ae:
         34:82:66:6c:c4:79:aa:b1:d1:2d:01:a3:45:b3:2f:25:1f:55:
         e8:45:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org