Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32322d3234203d3e203631383434.roa
File:                     34352e3137372e3235322e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          rXRZP2qPwFEeBSZjrC1l+SwUEXsJRsXnXMLYH2P5mnM=
Subject key identifier:   C7:E1:4E:90:3B:34:BE:3A:26:6D:1F:30:48:F4:A1:31:FE:F1:7D:78
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       5B4B3D9466E0238CF5CB78CAD818FD7CC0D49EB7
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32322d3234203d3e203631383434.roa
Signing time:             Fri 03 May 2024 21:06:08 +0000
ROA not before:           Fri 03 May 2024 21:01:08 +0000
ROA not after:            Fri 02 May 2025 21:06:08 +0000
asID:                     61844
IP address blocks:        45.177.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4b:3d:94:66:e0:23:8c:f5:cb:78:ca:d8:18:fd:7c:c0:d4:9e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 21:01:08 2024 GMT
            Not After : May  2 21:06:08 2025 GMT
        Subject: CN=C7E14E903B34BE3A266D1F3048F4A131FEF17D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:e0:e9:9f:82:82:7c:88:d0:ea:85:21:38:
                    08:14:c7:06:e1:46:bd:a2:fb:48:b3:e9:c9:0e:27:
                    03:58:06:59:b7:bc:f5:c0:c1:a6:19:4a:9c:65:1b:
                    99:c7:c8:3c:b7:7e:ec:f6:97:92:f3:15:9a:26:ce:
                    78:1d:65:ae:08:fe:fa:9c:79:15:8e:28:b0:2b:3f:
                    1c:8f:c8:1f:63:24:a6:15:97:0a:41:47:f4:42:ac:
                    16:1c:db:44:30:3b:9c:60:ce:03:c9:dd:36:5a:05:
                    07:ff:60:d6:79:45:a7:22:e5:1a:c7:78:99:65:4b:
                    8b:8d:50:2c:20:c2:39:c8:20:c4:17:fa:50:4e:6b:
                    72:a7:1c:18:4d:0d:e3:c8:6f:fa:99:aa:00:d3:60:
                    92:b6:0d:0c:84:c9:3f:1d:53:74:f3:e5:ef:13:d6:
                    2b:c1:da:d4:1a:a6:b8:f3:03:6a:1b:3a:df:65:1f:
                    6d:74:f9:0e:85:2d:c9:70:58:70:ce:4a:f5:6d:62:
                    19:d8:7f:c6:2c:a8:9b:4e:8f:17:2d:d4:0d:96:5d:
                    ea:23:ee:21:83:3c:3a:c6:79:f6:6a:75:6d:84:67:
                    a3:9b:8c:5d:5b:75:a6:94:86:84:07:6c:f4:4b:41:
                    4f:d4:d8:52:b8:7c:a3:35:e0:aa:2b:c8:3e:91:8c:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:4E:90:3B:34:BE:3A:26:6D:1F:30:48:F4:A1:31:FE:F1:7D:78
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:6a:04:eb:54:75:b4:b2:6a:8e:d0:fd:1e:34:4f:5a:55:67:
         32:45:70:a9:a2:8b:a1:2c:51:80:1b:95:bd:49:fa:5c:27:d1:
         74:bf:47:cb:e7:bd:56:35:bb:21:ca:75:a1:c7:6d:f8:1c:0e:
         cd:90:d8:b4:1b:f6:2c:bd:60:f9:1c:78:33:ad:3f:a1:05:78:
         a7:ec:d1:29:c8:bc:09:84:6b:c3:02:0a:47:83:8d:41:be:a4:
         09:00:ab:a9:ee:41:bd:d1:e7:8a:46:3b:f2:63:83:4d:e8:d5:
         1b:4a:02:e0:03:6b:b0:1c:23:93:3f:26:47:21:51:90:92:80:
         ad:04:f0:06:f5:9c:26:ae:28:43:3e:40:28:4b:23:05:fd:ef:
         fe:60:53:59:ad:c0:cf:eb:f9:0f:9a:e2:ee:02:63:20:c9:ed:
         2e:44:38:88:2c:70:04:1c:07:44:b8:f9:fd:39:11:7f:37:25:
         c3:dc:67:50:f9:f9:2a:6c:c3:b4:f2:b9:d1:54:11:2d:04:d3:
         d6:d0:6c:a6:22:53:4c:59:0c:05:c9:e7:d8:13:f0:79:8b:4c:
         05:ec:73:ac:52:aa:7e:51:38:63:16:33:99:f9:4b:64:ab:4e:
         98:41:8a:77:77:d2:b9:20:5c:89:35:dd:55:f1:79:0b:52:6a:
         1e:fb:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org