Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32322d3234203d3e20323636303731.roa
File:                     34352e342e3132302e302f32322d3234203d3e20323636303731.roa (raw, json)
Hash identifier:          WsLdm4fKTmMRuUlyDN5ZOO8/KVK8Q/ew94p23J6rCGc=
Subject key identifier:   9B:A6:FD:60:CD:82:A4:0C:08:9E:4A:8F:28:37:90:5E:BF:B9:8C:4B
Certificate issuer:       /CN=ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8
Certificate serial:       2428B975D3646FE6C72C89021F4F5C2FFAE34400
Authority key identifier: ED:7A:0E:B2:24:47:D8:F1:BE:FF:36:A9:85:EF:7C:59:91:74:CE:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32322d3234203d3e20323636303731.roa
Signing time:             Mon 28 Aug 2023 13:17:07 +0000
ROA not before:           Mon 28 Aug 2023 13:12:07 +0000
ROA not after:            Mon 26 Aug 2024 13:17:07 +0000
asID:                     266071
IP address blocks:        45.4.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:28:b9:75:d3:64:6f:e6:c7:2c:89:02:1f:4f:5c:2f:fa:e3:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8
        Validity
            Not Before: Aug 28 13:12:07 2023 GMT
            Not After : Aug 26 13:17:07 2024 GMT
        Subject: CN=9BA6FD60CD82A40C089E4A8F2837905EBFB98C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:11:66:c8:73:88:d3:3f:ba:23:70:8d:4f:
                    43:06:d5:d2:58:51:11:c3:5d:68:87:d6:57:8f:cd:
                    ae:15:0d:0b:b1:f0:a3:28:16:f5:30:ca:ff:89:35:
                    74:24:19:21:39:23:ae:0c:5f:b4:97:d1:36:c6:df:
                    f0:11:ea:db:29:53:7b:31:37:80:bd:04:9b:ed:df:
                    86:d0:6d:1a:d9:d0:c1:02:71:05:7a:24:0f:cc:a5:
                    70:ec:e4:a9:f1:65:69:10:a9:82:70:3d:e3:fa:72:
                    6f:3c:48:d0:8d:e2:7c:e7:d1:ac:c8:7d:5a:8b:2b:
                    6c:12:6f:d3:aa:9c:96:cd:ca:8a:68:17:c5:f3:4f:
                    f8:e3:35:60:93:b2:95:6b:98:3b:a1:a1:11:ce:52:
                    c0:29:e7:5b:3b:47:40:d3:66:87:b2:cf:98:cb:58:
                    a0:cb:de:b9:59:23:07:b8:5b:80:32:a9:ae:38:c6:
                    f6:8e:3b:07:15:9c:80:49:ad:16:e6:a2:83:9f:83:
                    06:58:2b:42:cd:8d:cd:8d:10:5d:84:b9:1e:f4:e9:
                    ad:62:12:3b:db:a7:a6:34:91:06:ac:f5:d7:d3:19:
                    73:4e:1f:24:81:34:bb:65:a0:89:84:a6:23:9b:aa:
                    53:bd:1f:8c:e7:98:d3:a9:25:e2:77:ff:be:e5:f2:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:FD:60:CD:82:A4:0C:08:9E:4A:8F:28:37:90:5E:BF:B9:8C:4B
            X509v3 Authority Key Identifier:
                keyid:ED:7A:0E:B2:24:47:D8:F1:BE:FF:36:A9:85:EF:7C:59:91:74:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED7A0EB22447D8F1BEFF36A985EF7C599174CEE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32322d3234203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:90:5e:59:63:87:b5:1e:c8:8d:8f:54:23:15:ed:9f:d5:86:
         bd:d1:72:6f:a8:c7:da:ac:84:46:6e:37:86:b5:59:42:eb:5f:
         ee:0c:6e:0f:3b:9a:33:8e:6a:57:1c:6a:ee:11:b7:1c:98:af:
         95:e5:97:2c:dc:7e:ba:4b:9f:7b:2a:c1:7d:d9:5e:b2:35:b8:
         ba:2a:42:1c:b1:35:ff:e5:7d:86:c0:93:4a:be:eb:45:ac:2a:
         4a:c7:6d:98:cb:ae:b8:c5:e2:c6:3c:f8:5b:55:22:bd:a2:b4:
         aa:01:91:a2:8e:d5:39:88:de:e3:1e:0e:25:7d:24:94:a2:e3:
         8a:a7:9a:5f:8b:64:5f:3f:be:63:9c:e4:89:72:b3:20:91:64:
         98:2f:2d:8a:e2:41:5f:a7:75:0a:1c:33:36:9d:10:eb:3c:b2:
         e5:8f:cf:41:cd:5f:0f:79:8d:2d:a2:c6:da:3d:f4:56:e5:54:
         b0:bd:fe:89:64:cd:83:58:a8:e8:aa:4c:00:5b:0a:f3:f5:b0:
         39:70:92:d8:07:f7:76:e9:ef:c9:b5:78:fd:32:08:f7:1c:de:
         9c:ba:69:cd:9b:c7:86:82:e9:a7:31:fe:12:88:25:31:8c:6f:
         cb:f8:ec:15:37:f1:e0:6d:3d:46:07:8b:7f:d7:4b:d5:06:1b:
         4d:7f:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org