Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa
File:                     34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa (raw, json)
Hash identifier:          W/k6BiaupmJ4zPw9qEt9N7lJP+R7rkI5b0IRXDCPV6o=
Subject key identifier:   55:70:24:73:D1:1D:1F:5A:31:34:94:2D:67:38:33:29:87:03:02:8B
Certificate issuer:       /CN=4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138
Certificate serial:       42BCE6A6B2B253B799556D7A44F929ED5A0FAB61
Authority key identifier: 4F:B6:27:5B:5B:B3:6F:13:35:FA:0B:FA:E0:C2:FA:2E:D5:7F:F1:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa
Signing time:             Fri 25 Nov 2022 12:53:45 +0000
ROA not before:           Fri 25 Nov 2022 12:48:45 +0000
ROA not after:            Fri 24 Nov 2023 12:53:45 +0000
asID:                     268737
IP address blocks:        45.171.252.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bc:e6:a6:b2:b2:53:b7:99:55:6d:7a:44:f9:29:ed:5a:0f:ab:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138
        Validity
            Not Before: Nov 25 12:48:45 2022 GMT
            Not After : Nov 24 12:53:45 2023 GMT
        Subject: CN=55702473D11D1F5A3134942D673833298703028B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:dd:58:ff:37:25:f9:28:f8:3d:88:8e:00:5b:
                    24:46:d2:e1:6b:ab:e2:89:bb:6a:ce:80:ae:87:b3:
                    6b:af:9e:db:41:9a:7f:4b:85:44:56:20:fa:dd:a1:
                    c9:32:a5:b4:da:8b:72:43:ea:f9:12:eb:99:a0:fa:
                    1c:23:7d:37:db:67:04:dc:68:9d:45:63:54:3c:21:
                    8d:63:e0:08:73:c9:71:16:7e:50:d8:d2:50:27:fc:
                    0c:b4:b0:f1:8e:73:bb:03:8c:40:3c:78:1a:ce:90:
                    4a:4f:e2:fc:4c:e2:49:6a:f0:ab:46:18:63:11:c8:
                    6f:d0:0c:9c:c4:e1:59:31:08:75:dc:3f:a2:62:0e:
                    79:4e:63:f0:68:3d:a2:10:67:b6:ba:bc:60:27:72:
                    81:e8:ef:db:69:55:0c:b5:be:62:a9:af:aa:a6:7e:
                    33:66:39:29:25:98:2d:e5:82:0a:a6:00:e8:d2:a8:
                    a2:72:4f:19:f1:a1:83:1c:0e:c5:d0:9f:7e:2d:b9:
                    d7:87:c3:83:44:6d:b8:9c:69:ed:dc:8d:8c:c0:56:
                    6e:76:db:49:94:da:d9:9d:e3:a8:03:2d:16:11:ec:
                    e2:e1:ca:82:24:ad:7b:3e:ed:8e:54:5d:93:24:6c:
                    aa:db:0b:31:45:18:6f:2f:b3:be:f5:51:cf:7b:81:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:70:24:73:D1:1D:1F:5A:31:34:94:2D:67:38:33:29:87:03:02:8B
            X509v3 Authority Key Identifier:
                keyid:4F:B6:27:5B:5B:B3:6F:13:35:FA:0B:FA:E0:C2:FA:2E:D5:7F:F1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:71:2f:3d:a9:b2:88:3e:90:0c:d0:a3:d4:43:86:e2:d4:da:
         df:84:d2:b1:08:f3:a2:dc:fe:29:90:bf:49:be:42:fe:80:09:
         6b:9a:2d:37:84:ad:ae:c1:4a:a0:75:34:01:94:7d:98:43:3d:
         8a:a2:5a:5b:8c:d5:b5:23:85:eb:2e:ab:af:c0:41:61:67:f0:
         1e:16:1a:ae:e4:89:1b:c0:aa:ce:c8:6b:7e:cb:24:04:c3:3d:
         74:f5:4d:c2:1b:ad:79:01:e7:ea:a5:9a:81:b0:6c:c3:24:5b:
         9a:16:54:19:94:72:ff:15:ca:1a:30:dc:7c:7b:ff:c6:ea:f0:
         d5:a2:66:3b:4e:8f:2d:9f:b6:be:b5:c5:7b:6c:b7:dd:67:cf:
         f5:2f:a2:43:50:7a:bb:1f:05:05:a0:f9:b6:86:e1:1f:6e:29:
         3e:d9:11:38:91:9b:d3:37:40:97:bd:58:4a:bc:3c:e7:d7:4b:
         74:68:e6:c0:12:db:92:e4:0b:4d:83:26:17:86:d0:b3:52:4f:
         4a:17:a8:b5:9d:bc:3b:0b:d1:e5:85:42:4f:47:d3:78:f4:d0:
         b8:c7:3f:bf:f0:2c:a3:53:5b:59:e9:32:6e:bc:f9:df:6a:af:
         56:82:88:cf:c8:a6:2e:46:71:b3:bb:56:f9:e4:ad:a1:20:04:
         ee:da:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org