Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32342d3234203d3e20323638383930.roa
File:                     34352e3137352e37362e302f32342d3234203d3e20323638383930.roa (raw, json)
Hash identifier:          RjcsR6sw/GCJp3JmfMAmraox/y/lTMhW6WUjUzYJlPY=
Subject key identifier:   BF:4E:E1:EF:4F:0A:A2:9E:52:24:6C:CD:39:0C:70:4E:72:45:DD:B8
Certificate issuer:       /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial:       44A601B6E16BD0B42603E7BDF0D8C30411DA505E
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32342d3234203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:49:59 +0000
ROA not before:           Tue 09 Apr 2024 19:44:59 +0000
ROA not after:            Tue 08 Apr 2025 19:49:59 +0000
asID:                     268890
IP address blocks:        45.175.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a6:01:b6:e1:6b:d0:b4:26:03:e7:bd:f0:d8:c3:04:11:da:50:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
        Validity
            Not Before: Apr  9 19:44:59 2024 GMT
            Not After : Apr  8 19:49:59 2025 GMT
        Subject: CN=BF4EE1EF4F0AA29E52246CCD390C704E7245DDB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:aa:65:4f:e1:95:d2:fa:35:84:f4:5f:b7:
                    e5:23:7c:a0:1c:96:27:50:59:8c:38:2d:25:3e:f4:
                    4f:44:5a:66:71:e7:85:91:11:ed:04:b7:7d:12:0d:
                    aa:4a:3d:3e:18:7d:d3:08:c9:5e:37:90:13:9a:11:
                    43:60:ad:ee:3b:40:d6:aa:d8:e5:43:b1:87:cb:f5:
                    b7:52:f1:3d:75:d6:77:f6:7b:b1:89:ad:09:41:06:
                    e5:0f:e3:31:b0:fd:3b:d2:0d:3e:ec:99:90:5e:87:
                    1c:02:76:13:eb:8f:a1:ce:31:15:c3:d3:b1:f6:fb:
                    4a:5b:b2:55:95:de:8b:1b:5e:b8:ef:49:97:21:34:
                    50:64:57:c5:17:79:e9:48:c4:c7:64:c7:1f:a3:be:
                    66:38:dc:3e:ef:98:e5:82:cc:2c:14:9d:73:6f:95:
                    95:ce:b6:6b:10:6e:28:1c:b6:a3:6b:ad:6a:c6:0a:
                    71:fb:68:11:2f:15:61:02:29:e7:d6:30:15:f8:b9:
                    9f:f4:57:c3:e4:e8:2f:b5:97:9a:ee:91:43:85:e2:
                    02:2f:cb:11:b2:b9:1b:3e:b3:39:f3:c4:1e:c6:63:
                    b4:ea:6b:6f:b3:eb:64:bb:4e:c6:3b:b0:e2:08:f1:
                    81:29:32:55:69:54:aa:90:bc:72:1a:4e:b3:7c:04:
                    d6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4E:E1:EF:4F:0A:A2:9E:52:24:6C:CD:39:0C:70:4E:72:45:DD:B8
            X509v3 Authority Key Identifier:
                keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32342d3234203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:9f:c6:4b:9a:9d:1f:07:5d:bb:15:5a:a0:77:7c:47:48:
         dc:5d:51:d7:84:e0:40:f2:58:5b:b7:c2:be:09:5b:7f:f4:43:
         06:ba:e1:f9:b7:8d:b4:b5:de:5f:61:0a:4e:be:8d:ce:ff:ce:
         57:09:b9:d6:b6:a2:1f:35:12:09:e8:b8:f6:c1:99:a6:a1:d3:
         22:77:bd:7e:e7:83:de:fc:e0:fc:46:72:db:b5:a9:9f:f3:0f:
         24:81:03:ed:8c:76:00:4b:70:10:b6:9f:e6:e1:8f:d5:de:fa:
         aa:53:76:a4:9e:45:92:ec:c6:39:8d:a1:9e:e7:e8:95:80:f8:
         2b:8f:3c:2c:90:81:ba:66:cc:3f:a8:9e:8d:42:cf:0f:47:a9:
         56:08:1d:0b:88:5b:a8:e7:96:e1:5d:4b:ff:9b:41:df:5f:88:
         20:24:e1:9c:b2:73:05:39:fa:1a:ed:fc:86:96:e1:1c:1b:2e:
         20:34:ca:76:5d:d9:16:ed:4f:b6:59:c9:0f:55:d7:21:0c:f3:
         4e:40:14:fe:3d:95:13:e7:c1:a5:77:19:f7:7a:d0:fa:d7:09:
         af:c2:ec:54:f3:9f:95:c5:57:c5:45:85:16:85:0e:89:a5:e5:
         71:4a:ed:66:71:11:82:d4:34:ba:a4:14:ae:6f:6a:8a:95:b9:
         d2:c6:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org