Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa
File:                     34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (raw, json)
Hash identifier:          cyhJN6g6dDmcQWkPwonhUuHzxBnLxcs2qkuL0f7JCZU=
Subject key identifier:   D9:AF:D3:35:F7:6E:76:6F:D1:63:0F:75:0F:E3:81:6A:2C:2B:0E:E9
Certificate issuer:       /CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
Certificate serial:       1F043B020327689849BE3B9E61C47F1E3CDC25A7
Authority key identifier: 4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa
Signing time:             Fri 09 Feb 2024 17:00:02 +0000
ROA not before:           Fri 09 Feb 2024 16:55:02 +0000
ROA not after:            Fri 07 Feb 2025 17:00:02 +0000
asID:                     269471
IP address blocks:        45.187.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:3b:02:03:27:68:98:49:be:3b:9e:61:c4:7f:1e:3c:dc:25:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
        Validity
            Not Before: Feb  9 16:55:02 2024 GMT
            Not After : Feb  7 17:00:02 2025 GMT
        Subject: CN=D9AFD335F76E766FD1630F750FE3816A2C2B0EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:85:b2:ca:ee:6c:5f:a7:88:3d:26:37:4a:
                    4a:90:a4:4e:f2:d8:e7:69:df:73:78:b8:57:94:6d:
                    24:40:6e:f5:fa:29:f0:b9:e1:9e:4e:94:4e:fd:a1:
                    52:b6:f4:f1:12:1d:11:7d:0f:51:c6:5d:c6:f6:ea:
                    5d:ce:e9:5a:a5:ea:b4:b2:18:ec:bf:72:ae:66:2d:
                    7c:ef:38:5c:2d:af:75:ed:c9:58:81:a9:bc:1a:f2:
                    cf:ab:de:9a:92:30:80:a3:ea:f0:10:4d:76:8e:07:
                    42:85:4e:d6:ac:0c:2f:c0:19:ec:73:37:45:49:ca:
                    79:98:8e:12:dc:55:f3:91:0b:ca:dd:4d:e2:12:6b:
                    bf:53:a2:e5:b0:04:70:6a:ac:30:a0:97:79:fb:dc:
                    09:1b:ce:67:00:06:31:3a:94:29:ab:73:b8:ca:f6:
                    96:ef:78:0d:57:f4:65:2b:cf:c1:af:99:31:d1:cc:
                    4f:33:81:71:26:5f:33:83:c2:12:4b:00:04:53:cb:
                    58:87:fe:5f:93:2e:87:b1:2d:74:bf:9c:d2:c6:9d:
                    1b:34:39:fb:c3:39:4c:58:ae:f6:5d:70:45:b7:13:
                    ab:e6:c0:59:ae:1b:18:52:9b:eb:e2:2a:e5:d9:a7:
                    d2:2b:4f:44:0f:e6:3a:dd:ec:94:28:8e:05:ee:28:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AF:D3:35:F7:6E:76:6F:D1:63:0F:75:0F:E3:81:6A:2C:2B:0E:E9
            X509v3 Authority Key Identifier:
                keyid:4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:6f:4e:ab:df:f5:e5:e1:ae:0f:2d:27:74:6a:66:e1:49:a8:
         c7:f7:a8:b0:ac:a4:5d:12:75:05:15:9f:3e:c6:00:8a:3b:fe:
         7a:28:a1:44:75:a7:57:ea:b8:12:1f:a3:fa:f3:3e:79:3e:5b:
         3e:dd:40:9a:92:e6:6f:3b:47:d2:02:1e:6b:ac:ae:88:9c:1c:
         82:57:26:5f:44:7d:a1:70:70:8a:d0:81:6f:eb:e2:19:26:ab:
         7a:66:06:66:d0:ff:ab:01:35:68:e8:26:83:c0:27:14:c6:6b:
         0f:73:e1:03:fc:84:57:6c:bd:91:1d:6c:f3:80:cc:16:4c:06:
         2e:e4:37:c5:7e:fc:1e:0d:6b:84:78:64:67:99:de:b9:d1:fa:
         25:22:05:79:d3:f1:0d:4c:0b:c5:1d:6c:ce:3d:66:eb:b5:df:
         36:aa:6a:72:5b:6e:ed:8a:a8:1a:b1:d5:80:6b:a1:c1:f4:26:
         c7:2b:f0:5b:6a:3e:fd:c1:98:c4:94:aa:0f:b2:3e:80:6b:1a:
         e3:99:b5:99:83:7d:47:f3:a5:48:7c:02:af:72:56:50:1a:cc:
         81:71:95:c9:50:d6:b5:45:87:ae:f5:11:c8:f7:1f:cf:00:25:
         40:4a:64:be:c7:53:8b:9f:6e:a6:74:b7:b7:de:1a:d9:d7:bc:
         75:de:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org