Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323732363730.roa
File:                     34352e372e3231382e302f32342d3234203d3e20323732363730.roa (raw, json)
Hash identifier:          ybjLnNT58SYy+i7zNk7OZ7MskD27Vk7/R/ObLfKxj+E=
Subject key identifier:   A2:2A:18:3B:7F:AB:F7:57:AB:71:80:00:D2:AB:E2:5B:14:5B:C8:F2
Certificate issuer:       /CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
Certificate serial:       4F8D783AD70080630714DC1F929DA20BD2E64E58
Authority key identifier: 7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323732363730.roa
Signing time:             Wed 06 Dec 2023 12:20:43 +0000
ROA not before:           Wed 06 Dec 2023 12:15:43 +0000
ROA not after:            Wed 04 Dec 2024 12:20:43 +0000
asID:                     272670
IP address blocks:        45.7.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8d:78:3a:d7:00:80:63:07:14:dc:1f:92:9d:a2:0b:d2:e6:4e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
        Validity
            Not Before: Dec  6 12:15:43 2023 GMT
            Not After : Dec  4 12:20:43 2024 GMT
        Subject: CN=A22A183B7FABF757AB718000D2ABE25B145BC8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:99:e2:c5:78:b8:18:7c:ac:d6:8e:18:fa:84:
                    ec:1c:6f:9a:fa:1d:58:ca:c8:de:58:97:66:29:e3:
                    9e:2c:3e:54:ed:a4:25:0c:ac:7d:97:96:4d:24:34:
                    75:78:57:f4:c9:d3:5f:9c:14:72:b9:67:09:57:a1:
                    7a:ed:2b:f8:1f:85:b7:cd:79:c6:de:0d:df:79:65:
                    74:be:c0:26:18:cc:39:43:10:06:50:10:bf:d2:f1:
                    a3:ab:23:b0:b4:cd:57:54:75:5d:76:6e:f6:b9:cd:
                    37:1a:21:9d:16:30:9d:80:20:ed:48:dc:11:07:64:
                    c4:db:70:d7:64:22:c7:11:7e:08:e0:6f:9e:85:c5:
                    22:d2:4b:7c:0e:ef:87:a4:d7:e4:ab:28:62:4f:80:
                    cf:e3:b7:4c:fb:07:c5:40:a3:6e:8c:92:b7:07:b3:
                    5d:1d:a8:08:3c:14:74:0c:65:25:f0:c9:ae:83:cf:
                    96:54:77:61:dc:3f:3e:b1:a9:07:ec:39:23:e1:15:
                    5d:f1:36:24:62:99:01:55:f0:06:81:86:d4:c2:69:
                    0b:b7:ac:0e:86:54:50:c1:ab:4d:3e:2b:22:e9:71:
                    06:53:84:c2:35:4f:77:a9:c2:2d:bb:ca:ce:77:62:
                    47:f8:71:4c:27:3b:a6:e5:fa:cc:51:4b:6a:b8:08:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2A:18:3B:7F:AB:F7:57:AB:71:80:00:D2:AB:E2:5B:14:5B:C8:F2
            X509v3 Authority Key Identifier:
                keyid:7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323732363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:2a:b3:23:21:21:1b:5f:5c:e0:e3:cd:33:5f:af:10:1b:
         e7:50:1a:56:3c:ad:2c:96:69:5e:2c:46:54:2e:f0:08:ce:5c:
         f9:ee:d0:e3:77:b6:8a:ba:02:88:d6:1a:05:61:da:23:1f:87:
         b7:c1:96:fc:05:cb:10:b6:3f:a0:21:c9:dc:bf:a0:97:be:23:
         5b:4c:95:4f:b1:4c:0f:c0:7e:68:33:f0:f4:44:ec:bf:01:65:
         8a:80:87:3d:0b:c8:92:88:6a:1c:f1:9e:6e:41:c0:e1:cc:dc:
         54:ad:95:87:a5:d1:bc:ea:16:3c:4a:25:d2:7a:8a:2f:9e:10:
         07:ff:6b:e9:a9:c8:36:f1:45:52:6e:49:5b:67:8b:9d:cd:bc:
         cb:da:76:bb:ef:4b:66:bb:a1:c2:ef:69:7e:fb:eb:b2:fa:f3:
         3c:d1:2d:c3:b8:c6:b9:fc:b2:c4:05:81:d5:d1:a5:29:c8:a0:
         08:25:ce:54:c0:ab:72:c9:78:01:9f:58:5c:b8:97:66:3f:21:
         26:d2:4e:56:3d:9b:c5:fe:96:61:b4:15:cc:99:3f:d1:26:14:
         bf:9b:eb:8e:98:6d:cb:31:b1:e2:cd:21:d4:8a:14:91:d4:3f:
         c8:b5:c2:da:db:6d:fe:4a:72:3a:4a:56:d1:92:66:18:c8:60:
         7b:ce:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org