Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32332d3233203d3e20323636303731.roa
File:                     34352e342e3132302e302f32332d3233203d3e20323636303731.roa (raw, json)
Hash identifier:          1n8dRomsQWsXa+Vyzc+Cg0t6GRYVNPasl0YCC8FWzlI=
Subject key identifier:   F3:50:98:3A:B8:1B:74:B0:9B:F2:63:2C:41:59:96:9E:51:9C:C8:4F
Certificate issuer:       /CN=1C0D57B6A3245283DC081118F5FA77723813EFED
Certificate serial:       0A566DF60C2C468650E9F5F759F33311C69347BC
Authority key identifier: 1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32332d3233203d3e20323636303731.roa
Signing time:             Thu 11 Jan 2024 12:28:30 +0000
ROA not before:           Thu 11 Jan 2024 12:23:30 +0000
ROA not after:            Thu 09 Jan 2025 12:28:30 +0000
asID:                     266071
IP address blocks:        45.4.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:6d:f6:0c:2c:46:86:50:e9:f5:f7:59:f3:33:11:c6:93:47:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0D57B6A3245283DC081118F5FA77723813EFED
        Validity
            Not Before: Jan 11 12:23:30 2024 GMT
            Not After : Jan  9 12:28:30 2025 GMT
        Subject: CN=F350983AB81B74B09BF2632C4159969E519CC84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:b1:55:7a:b9:4d:3e:63:ea:7f:90:e4:37:
                    8f:9f:07:87:6d:2c:de:a7:60:9b:fd:bb:a8:1d:de:
                    4e:79:b1:dd:d9:9a:16:c3:11:47:e6:23:6a:57:fb:
                    9a:c5:a3:22:29:f0:83:27:b8:ec:63:ac:fb:16:cc:
                    6a:8d:78:0c:6d:d7:c8:a1:78:e1:d7:6f:54:e0:c5:
                    99:1f:06:80:49:07:28:18:6a:3e:e8:7c:8f:7c:24:
                    55:e2:d7:99:7f:71:e6:af:7e:60:44:dd:cf:88:20:
                    92:3f:12:c2:27:0a:7a:ee:a1:c8:87:aa:c2:26:7f:
                    cb:bf:8e:3a:74:98:17:73:b5:22:61:02:91:4f:f9:
                    be:81:f6:d3:67:4d:98:83:43:88:74:07:85:8b:e5:
                    bb:43:a1:c4:d8:59:20:41:68:ca:49:eb:58:2b:99:
                    58:60:74:12:ad:43:fc:03:f3:76:13:a9:3b:09:92:
                    7b:cb:4e:d5:38:b7:75:03:ab:50:60:b1:ed:30:05:
                    a7:49:97:a4:bf:bd:54:9e:77:36:74:0f:66:22:04:
                    93:3c:08:5b:06:60:40:db:17:25:e7:22:02:88:c6:
                    82:5e:1a:d6:b9:06:26:95:60:24:61:50:a3:31:71:
                    f1:d7:38:05:36:39:91:b7:da:47:32:4d:90:ad:db:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:98:3A:B8:1B:74:B0:9B:F2:63:2C:41:59:96:9E:51:9C:C8:4F
            X509v3 Authority Key Identifier:
                keyid:1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/1C0D57B6A3245283DC081118F5FA77723813EFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132302e302f32332d3233203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:74:3c:05:91:29:f9:53:a3:5a:b9:dd:af:42:8f:d9:89:d3:
         b8:ad:12:2f:b7:d5:da:23:0e:60:05:1f:e8:66:6a:64:08:91:
         ff:89:b1:19:ee:3d:a8:63:2a:9d:9f:06:21:f1:fe:02:8d:8f:
         32:23:b2:c2:c3:93:56:4c:53:27:5b:52:d7:e9:59:b0:db:df:
         78:fb:72:ce:85:02:78:c3:ec:4d:22:5a:29:48:66:ad:34:d7:
         f4:bc:17:31:85:3d:44:72:9f:eb:fc:28:4e:73:00:63:0d:7f:
         b7:29:f9:e6:10:9a:6c:bd:dc:79:28:bd:69:9b:2a:2e:1b:7a:
         1d:4b:0c:58:9e:ce:35:37:73:0d:3b:21:b6:0a:f1:0f:ef:29:
         09:35:fb:76:57:2e:dc:12:ad:00:0b:ae:40:02:8c:af:72:92:
         48:b9:3c:1a:33:2e:46:f0:8a:a0:56:93:85:1f:8a:51:9e:25:
         ab:92:f3:c3:23:fd:b7:ca:67:fc:fe:6f:e3:a8:33:56:65:27:
         8e:bf:b1:08:ca:4e:15:61:58:4b:cf:f7:14:3b:53:92:84:47:
         6f:07:77:9a:57:a7:21:1c:0f:18:89:5b:b7:7a:18:b8:35:8a:
         55:0d:5d:5b:dd:90:eb:51:c4:b5:36:7e:ea:1c:78:17:3d:5b:
         ad:16:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org