Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/34352e37312e38382e302f32342d3234203d3e20323637363138.roa
File:                     34352e37312e38382e302f32342d3234203d3e20323637363138.roa (raw, json)
Hash identifier:          aepW/SVHTUKqYtf8bQuXuyBEjZD/itWmHtLiTH2Cb38=
Subject key identifier:   D8:0C:BD:F2:6D:51:29:9C:78:E8:3C:FC:9D:B9:0B:0E:59:B2:A6:4C
Certificate issuer:       /CN=2A9491BBFAE9B6CD47E6034CAABF35450DF91E46
Certificate serial:       564E0203E5AF1AFF647184EF61A2691B1BD189AB
Authority key identifier: 2A:94:91:BB:FA:E9:B6:CD:47:E6:03:4C:AA:BF:35:45:0D:F9:1E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A9491BBFAE9B6CD47E6034CAABF35450DF91E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/34352e37312e38382e302f32342d3234203d3e20323637363138.roa
Signing time:             Fri 08 Mar 2024 13:45:46 +0000
ROA not before:           Fri 08 Mar 2024 13:40:46 +0000
ROA not after:            Fri 07 Mar 2025 13:45:46 +0000
asID:                     267618
IP address blocks:        45.71.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4e:02:03:e5:af:1a:ff:64:71:84:ef:61:a2:69:1b:1b:d1:89:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9491BBFAE9B6CD47E6034CAABF35450DF91E46
        Validity
            Not Before: Mar  8 13:40:46 2024 GMT
            Not After : Mar  7 13:45:46 2025 GMT
        Subject: CN=D80CBDF26D51299C78E83CFC9DB90B0E59B2A64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:47:f8:b3:b4:52:96:a7:0c:f3:c6:23:00:
                    28:85:38:8d:f9:b3:e4:17:06:35:6d:e1:cb:38:ef:
                    ad:05:77:7e:38:57:98:cf:95:83:e3:15:24:74:d8:
                    50:a6:31:a1:9e:22:f3:c9:e4:39:e7:c6:5a:08:43:
                    d9:4a:29:35:02:76:46:4e:78:0e:f6:81:1f:1c:96:
                    9f:73:0a:4a:56:23:3b:47:5c:dd:cc:51:eb:64:ab:
                    00:36:14:e7:33:c8:29:17:58:c6:9b:0b:bc:d2:d3:
                    b9:c0:e4:a7:23:e2:ac:d2:7f:4b:fe:c6:e7:36:ac:
                    22:72:f2:c2:f9:a5:b4:54:10:86:d2:2a:31:9d:ca:
                    d2:14:9a:70:9f:9a:22:75:bc:1d:1a:b7:92:df:92:
                    10:ab:5c:f2:41:a1:77:ff:cd:bc:dd:40:37:d2:51:
                    87:2f:61:54:13:64:be:ad:ef:5c:e8:74:7c:73:bf:
                    0e:28:4b:0b:a7:bd:29:00:c0:fa:10:60:91:a9:b5:
                    64:05:98:63:c0:81:3b:29:b1:d7:a5:7a:38:b2:58:
                    26:3e:b0:89:37:9c:65:73:f4:77:06:bb:cd:f2:4e:
                    e0:1b:28:8b:f1:d3:bc:cc:7b:41:cb:a2:4f:5c:1e:
                    0e:53:c4:bf:fa:eb:8d:25:79:65:e5:cd:55:0b:c2:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0C:BD:F2:6D:51:29:9C:78:E8:3C:FC:9D:B9:0B:0E:59:B2:A6:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:91:BB:FA:E9:B6:CD:47:E6:03:4C:AA:BF:35:45:0D:F9:1E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/2A9491BBFAE9B6CD47E6034CAABF35450DF91E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A9491BBFAE9B6CD47E6034CAABF35450DF91E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/34352e37312e38382e302f32342d3234203d3e20323637363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:da:f2:3f:90:63:21:e7:48:d3:46:61:06:f4:83:f2:46:31:
         ae:e3:67:01:b8:53:2f:73:57:b9:7c:33:d5:8e:fd:f4:84:30:
         97:45:ea:57:1e:57:ee:67:a8:3d:fa:4f:c6:84:f9:08:a5:fb:
         40:42:1b:7a:dd:5e:c7:54:4f:95:71:2f:08:96:b8:ef:e6:27:
         c8:e6:8b:6f:12:95:59:ce:6c:b7:14:c0:9e:f1:e3:1d:b1:6b:
         18:0d:57:e9:6b:05:ef:5d:7c:c6:03:26:c0:81:7f:9a:32:ed:
         e8:81:12:24:88:86:b6:ac:69:15:26:7f:23:5c:2e:30:6e:b3:
         17:64:c8:73:94:c6:94:04:5b:52:e5:c7:90:01:11:5f:62:44:
         49:cb:2b:8d:a2:cc:04:2a:21:57:ce:c7:7c:55:77:7b:cc:f8:
         c6:09:a8:1a:f6:83:f4:96:e3:d7:0a:34:f9:2e:cb:b7:af:f2:
         5f:83:ef:be:16:3a:1b:b7:bf:db:f5:0f:de:48:d5:68:09:58:
         3f:2c:d1:d2:de:7d:f2:d1:ec:4f:ae:7b:98:61:18:55:72:a5:
         1e:44:25:98:01:fe:29:e3:18:6e:b4:a5:13:6e:83:bf:46:97:
         df:27:6f:f7:2b:9f:b0:ec:ac:23:f2:c4:5f:d4:f2:ac:1b:25:
         05:07:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org