Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3131312e302f32342d3234203d3e20323637363134.roa
File:                     34352e37312e3131312e302f32342d3234203d3e20323637363134.roa (raw, json)
Hash identifier:          lps/cDiaAfM2Jy39FfYDSR9Gw2f8CitSgWXJbCcYOGo=
Subject key identifier:   86:92:AB:B5:E0:E8:8C:D1:B8:41:C4:E2:E0:33:DA:46:3C:0C:62:06
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       389DF87CA0AAB028BB5D672DF7BF3A3BE71980DC
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3131312e302f32342d3234203d3e20323637363134.roa
Signing time:             Wed 06 Dec 2023 18:21:36 +0000
ROA not before:           Wed 06 Dec 2023 18:16:36 +0000
ROA not after:            Wed 04 Dec 2024 18:21:36 +0000
asID:                     267614
IP address blocks:        45.71.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9d:f8:7c:a0:aa:b0:28:bb:5d:67:2d:f7:bf:3a:3b:e7:19:80:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Dec  6 18:16:36 2023 GMT
            Not After : Dec  4 18:21:36 2024 GMT
        Subject: CN=8692ABB5E0E88CD1B841C4E2E033DA463C0C6206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:76:c1:02:bd:e8:26:b7:bb:b0:7b:f0:9c:
                    2c:eb:58:80:9f:7b:8a:33:a6:a6:0a:97:f8:bb:1c:
                    35:da:ef:ef:e7:ff:95:da:7e:d9:17:12:8f:b7:ad:
                    6d:cf:31:e6:cd:e5:e1:2d:29:c4:fc:5b:3c:02:dd:
                    1c:80:81:02:eb:30:5a:cd:09:8d:de:6e:40:04:19:
                    fc:87:bc:ff:d4:77:34:a7:06:2d:35:3b:f9:23:46:
                    c1:31:6f:2c:6d:36:5f:22:2e:60:69:ed:97:f1:aa:
                    9b:5a:8d:35:3d:51:7b:77:ba:2e:1d:40:a2:46:5c:
                    4e:b8:bc:82:75:98:49:8f:12:4e:ac:8f:8b:ac:d8:
                    44:50:ad:83:d0:de:f8:97:b6:eb:dd:e9:3d:cd:5a:
                    90:5d:20:8f:3a:76:0f:09:c4:27:88:08:2e:86:d6:
                    ca:db:34:54:3b:e8:a0:a9:41:78:36:73:1a:9a:a7:
                    62:c0:68:56:89:db:94:ff:ed:4e:30:9a:1d:f3:f3:
                    92:5e:3c:94:8a:27:8d:3d:34:02:e9:80:93:42:03:
                    3f:14:9d:03:70:38:8f:14:92:86:b5:a0:6f:68:4b:
                    15:ce:15:31:c5:6c:3e:fb:d9:ca:d6:0a:5f:88:bc:
                    ab:11:50:75:09:09:80:5d:6d:f7:14:d5:12:a1:63:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:92:AB:B5:E0:E8:8C:D1:B8:41:C4:E2:E0:33:DA:46:3C:0C:62:06
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3131312e302f32342d3234203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e3:08:86:64:33:94:16:64:ea:65:70:1c:1d:d8:99:26:93:
         23:74:e7:28:84:c0:df:2a:05:48:2c:7c:16:61:4b:82:64:43:
         37:17:fc:45:c9:9a:15:0b:d5:1e:81:49:1e:0b:b9:6d:4f:23:
         16:95:51:d3:02:7c:76:4b:6d:6d:b7:45:19:e7:03:f1:86:03:
         e3:57:9c:22:bb:42:98:45:8b:0e:1b:81:92:b2:b9:8d:4d:35:
         7d:31:82:6e:7d:42:ec:13:76:f0:4d:0e:ab:da:84:c7:b4:3f:
         a5:8e:f2:04:d9:e2:5f:3c:fd:a5:77:7d:9b:b8:27:c0:bf:a8:
         b9:b7:c5:70:87:e6:c5:f5:a9:fe:d7:48:30:32:f2:00:22:51:
         ef:31:6d:fc:9d:83:53:fa:dc:1b:bf:37:07:d6:98:50:67:cf:
         f3:15:ca:c6:95:18:ae:3c:f7:aa:e7:8e:ce:08:46:5f:ad:86:
         ba:b8:81:56:13:55:e7:86:96:13:f5:d4:3d:d5:e9:0e:0c:24:
         69:8b:3f:6a:7c:02:5c:d7:db:51:92:ea:22:5e:09:49:cb:1a:
         04:90:3c:6e:05:db:75:98:74:ae:ee:8c:bd:4f:b7:c3:5d:0a:
         1f:48:fa:9c:a3:d6:55:4a:80:c2:06:30:22:09:1f:3c:72:a2:
         a3:5c:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org