Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa
File:                     34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier:          rMv0AR4N1a/wSunGdzimjcyG9TDthrNSysRfnKS9XJs=
Subject key identifier:   47:DC:90:12:3C:C0:26:F4:4A:73:40:61:9B:34:93:A2:36:86:76:74
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       517BE46E0F4970515663B05DA60BDBA4D8D34CEF
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa
Signing time:             Fri 25 Aug 2023 14:53:59 +0000
ROA not before:           Fri 25 Aug 2023 14:48:59 +0000
ROA not after:            Fri 23 Aug 2024 14:53:59 +0000
asID:                     267222
IP address blocks:        45.229.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7b:e4:6e:0f:49:70:51:56:63:b0:5d:a6:0b:db:a4:d8:d3:4c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 25 14:48:59 2023 GMT
            Not After : Aug 23 14:53:59 2024 GMT
        Subject: CN=47DC90123CC026F44A7340619B3493A236867674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:36:eb:fc:71:1c:fa:3d:2a:90:82:db:dc:
                    94:8e:16:28:9d:c1:2c:c0:81:f0:98:20:e9:e8:9a:
                    95:03:5c:fc:ca:6d:54:58:19:b3:3f:2b:6c:3f:d4:
                    e9:0b:56:78:2f:74:3a:05:6f:37:07:50:f5:5a:a4:
                    4d:94:29:43:a5:9b:32:6a:a5:db:41:18:25:ed:9e:
                    c1:66:3c:6d:49:46:5a:f7:2c:52:32:58:ae:90:dc:
                    0e:d0:a1:19:28:ef:45:76:b6:21:88:1b:d4:f1:e4:
                    ed:80:c3:af:7b:27:9d:72:47:fb:66:7f:65:52:aa:
                    2d:0d:76:85:d6:b5:74:39:f3:9a:55:0a:5a:38:58:
                    cd:4d:0e:47:d1:0e:92:f0:25:0d:f5:72:81:a0:cb:
                    d3:56:62:13:fb:68:59:30:1c:6e:6b:12:79:5b:17:
                    aa:f7:46:47:8c:ff:a9:40:79:f4:df:8a:8b:3b:15:
                    22:f6:a4:f5:0c:eb:5d:54:b5:a2:30:7a:a2:15:d5:
                    f4:8d:a8:cc:32:4b:0e:f8:75:df:99:c5:b3:f7:f0:
                    38:df:7d:a8:3e:4c:5a:68:3d:0c:6e:28:2b:52:e0:
                    b8:7e:75:ab:1d:3e:e4:6e:a8:62:d0:08:a5:39:b3:
                    4b:fc:5d:f9:97:f2:10:f1:c2:b3:40:44:f2:df:73:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DC:90:12:3C:C0:26:F4:4A:73:40:61:9B:34:93:A2:36:86:76:74
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:52:c2:06:93:54:f2:74:10:7e:30:37:42:b0:10:26:fc:
         be:e9:33:f5:88:96:d9:a9:19:15:cf:02:a4:31:bb:d7:1e:93:
         8c:01:56:31:5f:7f:21:19:66:99:36:7e:75:2b:e0:da:34:32:
         d4:94:0a:7f:2b:f5:9b:92:91:a3:72:14:91:b3:c4:02:69:1f:
         2c:68:b4:9d:ff:7f:09:ad:5c:d0:ee:57:e6:39:00:fb:5d:c4:
         96:62:f4:8f:a3:ea:03:12:cf:58:4b:be:c2:33:80:e1:84:56:
         6a:da:e0:5f:ee:b9:8d:5e:67:fd:15:b2:c3:49:36:36:33:b2:
         c0:19:d1:c1:7c:bc:a2:ad:a1:03:93:a1:5b:62:a7:35:4c:23:
         62:37:b3:49:bb:f1:6b:86:8a:c7:21:0b:09:5d:0b:fc:ca:7c:
         bf:13:81:e0:20:31:9a:fd:f5:30:77:6e:f1:6a:a5:2a:1d:af:
         1d:2e:32:81:23:f6:59:f0:b9:24:f9:3a:d8:70:ac:87:79:94:
         c2:7f:fc:5e:bf:17:0e:1b:bf:96:12:19:d0:83:26:cd:6e:f0:
         0e:da:5d:55:59:fb:00:14:1c:97:f0:d3:58:ee:e2:16:d9:0e:
         d1:a4:e1:69:14:7e:b5:f1:12:57:73:c1:a0:7b:81:e3:87:db:
         dd:25:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org