Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132322e302f32342d3234203d3e20323636303731.roa
File:                     34352e342e3132322e302f32342d3234203d3e20323636303731.roa (raw, json)
Hash identifier:          mfQpfTicwfLiyEoUPujcUxq/IW1GiLhM7W4/L3GVwd4=
Subject key identifier:   C7:49:AA:6F:9C:20:70:53:6F:C1:80:B0:95:7E:C1:9C:F0:89:DA:7F
Certificate issuer:       /CN=1C0D57B6A3245283DC081118F5FA77723813EFED
Certificate serial:       6E4B02445D958C234E058ACD027183608309B44E
Authority key identifier: 1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132322e302f32342d3234203d3e20323636303731.roa
Signing time:             Thu 11 Jan 2024 12:28:30 +0000
ROA not before:           Thu 11 Jan 2024 12:23:30 +0000
ROA not after:            Thu 09 Jan 2025 12:28:30 +0000
asID:                     266071
IP address blocks:        45.4.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4b:02:44:5d:95:8c:23:4e:05:8a:cd:02:71:83:60:83:09:b4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0D57B6A3245283DC081118F5FA77723813EFED
        Validity
            Not Before: Jan 11 12:23:30 2024 GMT
            Not After : Jan  9 12:28:30 2025 GMT
        Subject: CN=C749AA6F9C2070536FC180B0957EC19CF089DA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bd:8f:c4:cb:6d:6d:a3:e2:ee:28:43:d3:23:
                    5d:be:86:4e:0c:7e:bf:92:9b:5f:0a:08:cc:f6:f7:
                    a0:36:01:b1:a0:10:da:6f:9f:83:de:0e:c8:49:ba:
                    eb:5a:1b:7c:59:c2:19:df:0c:d9:71:d1:d8:32:84:
                    1a:0b:36:f3:76:06:2f:f1:52:4d:55:1a:3b:21:83:
                    f5:38:3c:47:64:c9:af:1f:f1:74:d7:4e:6d:e3:94:
                    f5:d4:0d:72:8f:72:82:3a:05:c9:0d:92:ff:d0:f9:
                    bf:82:78:45:ef:78:56:7a:8e:7f:c6:7f:80:91:02:
                    4f:b6:7d:e8:30:26:9a:eb:05:f6:93:65:fb:f0:df:
                    c8:c2:15:62:7c:e9:38:8b:ab:fe:d3:a7:7f:ab:b9:
                    5a:1d:4e:a3:e3:ba:22:4a:d5:47:10:69:90:1b:62:
                    4c:e0:73:03:9c:82:d1:4b:70:99:f6:bb:bb:69:1a:
                    36:09:77:c5:61:d1:b0:71:e1:83:1c:c4:7e:42:12:
                    75:44:df:8e:79:34:c8:7b:a7:c8:8d:c9:6e:c3:80:
                    3c:39:2a:0d:a8:ec:f7:9c:0b:22:78:97:bb:98:66:
                    82:b2:ba:d4:c5:48:87:8b:7c:34:06:d5:b3:f5:65:
                    4e:de:01:cb:6f:a7:9e:06:4e:9e:a7:e8:bf:bf:e6:
                    cb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:49:AA:6F:9C:20:70:53:6F:C1:80:B0:95:7E:C1:9C:F0:89:DA:7F
            X509v3 Authority Key Identifier:
                keyid:1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/1C0D57B6A3245283DC081118F5FA77723813EFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132322e302f32342d3234203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:cc:2f:15:7d:06:bc:bb:39:a8:43:62:d9:b8:89:f8:89:b7:
         d8:31:89:06:aa:4b:a1:0a:cc:25:94:d6:3f:d5:ce:8f:37:d2:
         ba:12:8d:95:c7:43:7f:18:ee:1b:c0:de:2e:2b:dd:c7:76:fb:
         c1:bc:84:8d:43:55:55:c4:01:19:01:8c:aa:25:44:b0:ab:0c:
         53:41:1b:aa:44:ec:c9:18:de:f3:6b:52:67:d6:30:c6:50:d7:
         ab:93:2a:d1:a3:5a:a8:81:69:9a:84:9c:44:97:cf:4f:e4:f6:
         5f:5a:dd:2e:10:03:b3:7b:88:91:6a:9b:65:9b:d2:44:6a:4f:
         15:09:09:36:46:dc:d5:90:b2:ca:cc:aa:69:cb:c1:17:5c:cd:
         1c:75:09:46:e1:39:72:dc:ac:70:74:78:be:af:49:26:e0:2a:
         34:fc:3e:cf:38:62:90:de:cf:68:c4:53:0f:bf:0f:38:0f:63:
         11:86:6c:15:4a:27:90:17:9c:76:88:54:29:de:f6:47:3d:d0:
         e7:e8:40:af:c7:7f:06:45:87:9c:0e:3b:7b:22:e8:cb:c8:c9:
         55:26:00:db:17:6a:11:72:c2:9c:a4:a9:78:e0:57:81:3f:d9:
         06:28:16:d2:a3:6b:c7:5b:65:73:64:1a:09:0a:7e:cc:da:ed:
         65:e7:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org