Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31352e302f32342d3234203d3e20323638373739.roa
File:                     34352e3137322e31352e302f32342d3234203d3e20323638373739.roa (raw, json)
Hash identifier:          i814PNzqFflrapmlkOJT95fZn7DA1YPBN5FNk2hvdmg=
Subject key identifier:   7C:FA:1C:D4:60:40:8E:97:6F:FF:C3:8C:AD:64:64:53:45:D7:CC:98
Certificate issuer:       /CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
Certificate serial:       4EB3B463B7F7203BB29082380040F59376E0907F
Authority key identifier: AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31352e302f32342d3234203d3e20323638373739.roa
Signing time:             Tue 02 Jan 2024 14:13:55 +0000
ROA not before:           Tue 02 Jan 2024 14:08:55 +0000
ROA not after:            Tue 31 Dec 2024 14:13:55 +0000
asID:                     268779
IP address blocks:        45.172.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b3:b4:63:b7:f7:20:3b:b2:90:82:38:00:40:f5:93:76:e0:90:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
        Validity
            Not Before: Jan  2 14:08:55 2024 GMT
            Not After : Dec 31 14:13:55 2024 GMT
        Subject: CN=7CFA1CD460408E976FFFC38CAD64645345D7CC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:0e:63:35:bf:48:bd:58:72:58:db:cf:15:
                    f5:65:6d:12:d4:45:08:16:6c:92:5d:b7:ce:5c:16:
                    90:f9:12:d4:80:2e:49:72:80:04:26:8d:59:06:62:
                    fc:9e:28:79:99:8a:b5:f0:65:b4:ab:41:29:e5:a7:
                    f2:87:35:11:52:f7:57:9a:55:46:4a:57:32:f7:3f:
                    8e:8b:2b:d4:1e:02:03:41:61:10:d8:37:bf:90:2d:
                    39:da:97:15:85:64:41:72:54:d0:eb:74:f8:c6:72:
                    9b:65:74:c2:61:8f:28:cb:c7:c0:a8:9a:9b:fb:45:
                    d0:c5:7c:ed:bb:d3:ff:16:36:38:83:c3:c4:91:f0:
                    53:64:85:5f:bc:70:5a:32:fa:a9:65:4b:cd:c4:78:
                    20:18:bd:9e:a1:32:7e:37:4f:7e:bf:5f:dc:27:8d:
                    7d:76:16:2c:f4:2a:fb:1c:4b:60:c5:5b:4f:0e:37:
                    fc:09:28:80:ff:f1:c8:0b:d8:6c:b2:42:57:43:f8:
                    ba:0c:cf:ff:aa:a2:a0:1f:45:06:81:31:51:3f:79:
                    db:2b:1c:4b:82:2e:6a:ab:48:4d:d8:f4:71:fb:cb:
                    80:51:f9:8b:e5:5d:cc:7d:c0:7e:67:3c:f2:73:54:
                    19:13:78:df:ca:82:0a:fa:90:b5:55:64:dd:74:98:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:1C:D4:60:40:8E:97:6F:FF:C3:8C:AD:64:64:53:45:D7:CC:98
            X509v3 Authority Key Identifier:
                keyid:AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31352e302f32342d3234203d3e20323638373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:16:1c:19:d2:38:5f:c1:59:a6:ba:42:ac:13:62:c3:60:5c:
         67:b1:be:7b:66:2f:94:54:e6:21:ad:e2:cd:4d:5b:8b:be:f0:
         60:45:e7:f3:d1:ad:be:7a:37:96:ba:b6:72:60:37:71:ba:eb:
         f3:60:23:79:bc:29:24:b8:ab:87:78:3c:1e:d1:8d:e9:4d:56:
         1e:66:b6:f4:65:d6:53:3b:89:c0:7e:f2:02:2e:5e:2e:6b:03:
         99:63:09:df:91:46:73:96:5c:a1:6f:ea:72:f7:6b:1f:58:62:
         7d:b1:11:42:23:ae:86:dc:12:40:37:50:00:c5:cd:88:93:ef:
         53:ec:2f:5d:9b:ef:9e:4c:8a:0c:4e:7c:7a:c5:76:74:b3:ab:
         e4:5b:cf:cc:a5:90:f3:7d:46:6b:76:b7:43:e6:dd:68:b6:40:
         b7:48:27:cd:0d:42:00:0f:40:90:70:97:d3:6a:b1:1f:1e:ed:
         54:90:3a:8e:07:e2:24:5d:f1:9a:74:2e:19:c7:c9:dc:f4:1f:
         fa:92:dd:af:1e:ee:b6:4d:64:df:84:eb:58:34:65:a6:10:f8:
         5f:6f:b9:42:f3:be:c4:12:b0:24:6e:de:7e:24:97:04:70:b7:
         de:4f:ab:94:c3:3f:5c:cb:b4:d4:ac:ab:5a:bd:23:57:63:67:
         29:5c:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:53 2024 by rpki-client on console-ams.rpki-client.org