Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa
File:                     34352e372e302e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          a8AMBx35J7vUKyzFbgxJrd0UPACDV6T/ZTPkx4U6MA8=
Subject key identifier:   79:AA:8A:C3:C7:44:04:B0:09:53:B3:7E:82:BD:41:34:BE:D1:06:0E
Certificate issuer:       /CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
Certificate serial:       3923F148587484A251DA8B09A8DC70F5A9F50E85
Authority key identifier: BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa
Signing time:             Tue 12 Mar 2024 21:17:27 +0000
ROA not before:           Tue 12 Mar 2024 21:12:27 +0000
ROA not after:            Tue 11 Mar 2025 21:17:27 +0000
asID:                     267388
IP address blocks:        45.7.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:23:f1:48:58:74:84:a2:51:da:8b:09:a8:dc:70:f5:a9:f5:0e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
        Validity
            Not Before: Mar 12 21:12:27 2024 GMT
            Not After : Mar 11 21:17:27 2025 GMT
        Subject: CN=79AA8AC3C74404B00953B37E82BD4134BED1060E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:e0:d1:c8:a6:8d:e9:1c:7f:ad:61:be:1c:
                    b4:03:1b:05:01:09:37:12:fd:f0:7d:ef:e7:9f:6e:
                    10:ea:67:56:39:3a:7e:e2:63:be:3f:d5:b9:12:bd:
                    f2:c0:83:d1:86:c4:ad:6d:71:35:a5:7e:91:9c:60:
                    10:4c:4c:03:40:05:d9:aa:c2:41:ff:41:c5:09:36:
                    e1:a3:13:c1:d4:d8:6f:96:b2:ac:37:53:4b:37:b8:
                    94:0b:40:67:ed:a0:00:2f:d7:b2:34:7e:35:0f:d6:
                    16:fe:17:a2:6d:0e:49:7a:c9:8d:bb:b1:60:0a:d9:
                    fc:3d:0a:4a:f2:b8:6d:28:34:9f:2a:a7:d2:8e:ef:
                    80:af:c0:1b:97:81:66:f9:c0:c5:6a:ef:fd:eb:39:
                    bc:2b:3e:77:24:9c:c9:77:bd:17:aa:1c:79:95:8c:
                    57:df:b8:58:9a:8b:25:19:14:45:90:53:99:01:bd:
                    46:10:1f:5d:a3:06:3d:bc:87:36:fd:32:b0:03:f7:
                    21:16:ac:0c:cd:41:71:54:a4:60:c4:2d:0e:cb:0f:
                    77:b9:e5:dd:49:13:a9:e7:51:b8:ba:ec:3d:67:4e:
                    13:70:66:4d:e9:b0:4d:3f:c2:9f:86:38:11:f8:ae:
                    d4:db:62:bd:be:f3:f2:e3:6a:a6:a9:f8:e0:9c:61:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:8A:C3:C7:44:04:B0:09:53:B3:7E:82:BD:41:34:BE:D1:06:0E
            X509v3 Authority Key Identifier:
                keyid:BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:9a:69:23:6a:d9:bd:2a:08:15:ba:c3:c3:51:37:12:43:8b:
         bf:c2:60:ac:a3:5f:e4:bb:e6:67:f8:bf:7e:70:ca:07:19:79:
         19:7e:01:bb:c5:a2:89:46:78:ad:38:c4:69:c6:b9:2d:70:91:
         f2:aa:27:01:06:c4:36:04:30:6e:e1:d1:7a:3d:7a:cb:85:e0:
         5e:13:79:a4:e4:5a:c1:ca:40:9d:67:2a:76:ee:ef:4f:b6:7e:
         89:7d:7a:df:07:1c:ed:93:c0:86:44:1e:d2:62:4e:09:7d:f8:
         d1:2b:f5:7a:31:5d:0a:c4:be:dc:b7:78:e3:3b:eb:7c:09:2e:
         be:db:04:ca:71:84:88:d0:a6:66:9d:fd:f5:99:8d:e6:dd:3f:
         66:d9:13:1a:35:00:a5:c2:d7:3e:43:7a:c5:24:9c:0d:32:a2:
         68:24:d7:4f:de:c6:ca:d9:0b:ea:3a:04:0e:d7:a7:50:43:6c:
         db:bd:eb:b8:2d:05:03:9a:02:21:c3:3d:b1:f3:b4:4f:40:e0:
         11:39:5e:c8:50:b3:8b:d4:f4:e0:3e:73:c2:26:e2:e0:f5:77:
         a5:38:36:4b:84:4e:88:4c:96:1f:56:ab:a6:d8:fe:f1:6c:cb:
         d8:4f:49:82:df:ec:68:9f:cf:d7:3f:50:3c:08:62:56:1e:53:
         04:eb:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org