Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/1/34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa
File:                     34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa (raw, json)
Hash identifier:          WtKNEI/mjkuStq1UQy7afaUAh/dJZprzRq2+dzWhasI=
Subject key identifier:   B4:34:D9:65:7C:CA:20:21:17:5F:4F:19:40:0E:90:23:40:B7:08:9E
Certificate issuer:       /CN=B701661D0786F450AC9334C4A061B64DF27F953A
Certificate serial:       70D6055F9E09E07AAB1BA035F2A8A6B5BCE2C686
Authority key identifier: B7:01:66:1D:07:86:F4:50:AC:93:34:C4:A0:61:B6:4D:F2:7F:95:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B701661D0786F450AC9334C4A061B64DF27F953A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/1/34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa
Signing time:             Thu 04 Apr 2024 12:09:05 +0000
ROA not before:           Thu 04 Apr 2024 12:04:05 +0000
ROA not after:            Thu 03 Apr 2025 12:09:05 +0000
asID:                     268798
IP address blocks:        45.171.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d6:05:5f:9e:09:e0:7a:ab:1b:a0:35:f2:a8:a6:b5:bc:e2:c6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B701661D0786F450AC9334C4A061B64DF27F953A
        Validity
            Not Before: Apr  4 12:04:05 2024 GMT
            Not After : Apr  3 12:09:05 2025 GMT
        Subject: CN=B434D9657CCA2021175F4F19400E902340B7089E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:82:fd:f1:b4:57:e4:e1:f9:09:de:47:48:
                    5e:9d:40:c5:8d:cd:7e:f4:9c:51:65:1a:f4:5b:28:
                    2f:22:98:54:2c:37:8e:0b:21:f7:fd:fe:cb:a6:eb:
                    70:0f:52:73:8a:61:b6:c3:57:c5:76:5c:ca:73:32:
                    6e:ac:d0:c5:9a:03:b1:e0:d5:7d:5b:06:4f:42:0a:
                    51:96:e5:1f:7d:1e:32:34:91:e7:0f:ab:8f:ae:8a:
                    fb:1c:f5:09:58:94:e2:a3:a4:ba:8e:db:3d:01:30:
                    e0:5f:e6:27:56:bd:9b:b2:0d:d9:8f:71:be:89:7f:
                    47:41:8d:a8:53:b4:58:b3:4d:41:ed:6d:c6:f1:cd:
                    4b:9b:38:67:65:68:5d:79:f2:f8:2d:6c:2a:93:bf:
                    7c:29:29:56:50:1f:27:ec:3d:28:d5:52:c1:c6:db:
                    95:fb:0d:25:40:e6:e9:67:eb:1c:83:15:67:1f:a4:
                    08:05:bd:b6:4f:56:38:a8:a9:b2:52:d2:28:9b:04:
                    d1:4d:f1:f0:db:53:cb:93:5e:8c:7d:ec:35:2e:e3:
                    89:92:8e:db:fe:eb:e7:4b:b4:c3:68:ae:32:67:54:
                    d8:a7:48:04:15:df:33:6e:80:c1:43:4b:17:87:34:
                    ce:b8:e9:5c:46:e5:21:c6:5a:ff:b9:03:e9:13:7f:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:34:D9:65:7C:CA:20:21:17:5F:4F:19:40:0E:90:23:40:B7:08:9E
            X509v3 Authority Key Identifier:
                keyid:B7:01:66:1D:07:86:F4:50:AC:93:34:C4:A0:61:B6:4D:F2:7F:95:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/1/B701661D0786F450AC9334C4A061B64DF27F953A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B701661D0786F450AC9334C4A061B64DF27F953A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/1/34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:89:1a:1e:8d:9f:ce:3b:c4:49:b1:b7:c3:87:bf:83:1f:
         28:50:49:7a:a4:1a:82:4a:d8:96:b0:d4:40:8a:13:bd:c2:6e:
         d6:8c:75:56:03:0a:6f:35:dd:b8:50:fa:98:03:df:eb:e6:bb:
         d2:5e:cd:bf:49:32:ae:48:52:c7:7b:22:0d:9f:64:1a:97:f3:
         00:c4:37:d8:b2:e8:63:b9:7f:9f:11:11:ea:ce:af:ba:bc:c1:
         7d:6b:6a:4c:91:d6:31:f9:45:e1:f0:d5:8e:13:f4:92:61:62:
         21:5d:12:df:25:3c:6c:08:bd:99:bc:8a:53:ee:07:33:1e:22:
         d7:6c:a4:88:03:16:61:60:6f:f7:1c:b8:1a:b5:97:43:ec:f4:
         2f:5c:46:05:9c:19:46:61:91:bc:3c:80:e6:ec:87:bf:bd:54:
         4a:7f:8d:8d:28:64:75:ce:58:b9:60:33:84:1c:51:a5:0a:93:
         dd:f8:c3:cc:cb:3a:e8:f2:7c:fe:91:62:de:37:dd:62:8a:62:
         89:24:91:c5:96:20:07:20:a4:68:1a:c1:ff:7e:51:ad:8a:d2:
         2b:ae:74:27:b5:dd:83:bc:10:3f:8f:6b:83:76:3d:f6:f3:26:
         d8:a7:06:b7:e4:dc:17:ba:97:2f:31:a1:9c:e4:45:72:fe:7a:
         34:f4:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org