Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37372e302f32342d3234203d3e20323638383930.roa
File:                     34352e3137352e37372e302f32342d3234203d3e20323638383930.roa (raw, json)
Hash identifier:          hwmx0EevPUSInRT4DgYkizoas4IIYU3NwiyDXTGt0Rw=
Subject key identifier:   F7:64:31:4A:2E:2C:4C:40:59:4A:D6:7E:0B:08:87:81:DC:8E:EF:14
Certificate issuer:       /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial:       15D195B32F110EAD1536FC17464417E8EE9D53AE
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37372e302f32342d3234203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:50:03 +0000
ROA not before:           Tue 09 Apr 2024 19:45:03 +0000
ROA not after:            Tue 08 Apr 2025 19:50:03 +0000
asID:                     268890
IP address blocks:        45.175.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d1:95:b3:2f:11:0e:ad:15:36:fc:17:46:44:17:e8:ee:9d:53:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
        Validity
            Not Before: Apr  9 19:45:03 2024 GMT
            Not After : Apr  8 19:50:03 2025 GMT
        Subject: CN=F764314A2E2C4C40594AD67E0B088781DC8EEF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:52:ee:0c:fb:57:12:12:2c:d1:ba:df:c8:
                    e1:0a:2e:04:79:ac:fc:bf:90:de:ed:b5:90:83:42:
                    d1:0b:94:05:9c:02:4c:a5:8b:bb:55:85:e4:8d:3d:
                    9c:15:b0:fb:03:e4:54:d1:9c:b5:df:0c:2d:b1:65:
                    3c:63:ae:09:f9:f3:50:ce:bc:59:72:ea:cb:61:58:
                    9a:42:55:e0:55:db:7d:35:ff:2d:00:cd:a1:3a:9d:
                    e4:21:52:7a:6b:92:88:34:d4:4f:8e:f3:6d:9b:b1:
                    5a:5a:3a:db:6f:13:bb:af:90:14:4d:c7:91:8d:e0:
                    cc:52:6f:b4:d4:65:b8:3f:77:9d:4e:55:fe:f1:14:
                    18:0d:fc:60:f9:9f:1d:e8:7a:7e:b4:77:9c:1d:8f:
                    88:14:55:2d:df:8e:d4:1d:22:38:65:73:76:a7:cf:
                    88:77:20:fd:20:9c:cb:26:a0:15:e0:76:7c:67:ba:
                    92:3c:e0:27:74:94:fe:f3:90:7c:bc:54:e3:63:ce:
                    6d:71:dc:24:d9:40:de:84:dd:e0:a7:b3:24:0c:1a:
                    ae:47:56:13:7c:fe:a4:31:42:62:fe:6f:7c:03:94:
                    1a:4d:49:af:3f:07:12:54:39:3f:a0:3e:c3:1d:cf:
                    76:87:88:6c:49:5e:5a:9d:64:a9:f9:68:33:51:a0:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:31:4A:2E:2C:4C:40:59:4A:D6:7E:0B:08:87:81:DC:8E:EF:14
            X509v3 Authority Key Identifier:
                keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37372e302f32342d3234203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:10:ad:7b:01:7e:2e:f1:e8:0a:9c:db:cc:66:ad:e3:82:1d:
         e2:ac:e1:4b:e9:e1:e6:69:11:45:c9:7b:66:61:32:8c:e0:e9:
         e0:09:e1:9b:3e:79:eb:de:b5:f2:de:b9:8d:2a:06:31:4d:32:
         18:69:8c:20:6d:1c:6a:5f:15:23:74:8b:45:59:0d:9c:75:c7:
         6c:6c:19:89:e8:20:05:b2:3f:f3:f0:c7:db:20:00:d2:d8:d8:
         e8:9d:ac:2d:dc:1a:14:57:99:37:3c:72:41:f7:23:7b:9f:0d:
         d5:ea:13:5c:6d:6b:d6:8f:ca:ae:8b:31:63:59:16:64:a5:93:
         dc:04:c9:1b:41:7f:44:8e:c7:f3:23:5e:12:32:5d:31:94:eb:
         79:fa:1d:ff:10:a2:73:60:c2:ae:c4:91:a5:18:cf:d7:4f:b1:
         84:54:8e:2b:40:7b:ca:a7:c5:1b:51:9b:62:36:a8:1b:9e:b5:
         4a:2a:09:b0:77:eb:a7:30:39:3d:78:18:f7:1f:9e:5b:de:d3:
         77:d0:4c:0e:e8:6a:0c:39:54:eb:e4:3c:9a:d5:08:54:3f:6e:
         b5:74:f2:d2:6a:11:25:33:67:71:2c:6e:69:76:01:2a:6c:1a:
         1c:6d:2d:0a:64:c6:22:39:52:5f:a0:71:55:c8:cc:23:ef:e9:
         be:e7:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org