Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
File:                     34352e3137392e32302e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          +Rp7BV7jv6Tnc1Fa3fCORkMD1Xdumo9jLUkTsoSk7y4=
Subject key identifier:   B8:66:17:D4:79:D5:04:FA:80:32:7D:A5:64:89:93:C9:CC:EC:02:D8
Certificate issuer:       /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial:       727F30E04E1CFF2CB65A5B3F25437A9FAF467FB7
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
Signing time:             Tue 23 Jul 2024 12:02:28 +0000
ROA not before:           Tue 23 Jul 2024 11:57:28 +0000
ROA not after:            Tue 22 Jul 2025 12:02:28 +0000
asID:                     61844
IP address blocks:        45.179.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7f:30:e0:4e:1c:ff:2c:b6:5a:5b:3f:25:43:7a:9f:af:46:7f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
        Validity
            Not Before: Jul 23 11:57:28 2024 GMT
            Not After : Jul 22 12:02:28 2025 GMT
        Subject: CN=B86617D479D504FA80327DA5648993C9CCEC02D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:a6:ec:89:96:d7:d9:f1:68:7f:1e:eb:d1:
                    ff:72:a8:c8:bc:8b:ee:8c:ae:da:84:a1:3d:b5:c4:
                    fb:51:7f:d2:c6:dd:80:a5:65:12:30:71:fa:4b:b4:
                    4d:da:53:62:6e:20:b5:3e:c0:06:be:0d:b6:0c:e6:
                    70:ca:c0:52:1d:e6:2b:cb:5f:11:cf:bf:b6:c3:43:
                    24:c3:b4:ce:1d:63:1f:b9:73:38:e4:cc:f1:cc:74:
                    08:49:96:9e:31:82:29:e7:82:f0:ed:c5:a5:96:39:
                    99:bf:57:c5:c4:9b:95:10:e2:73:b9:02:8d:e8:47:
                    09:e9:10:64:47:f9:84:c3:88:7a:41:4a:4e:f6:10:
                    2a:06:68:e8:d1:3f:6c:c2:67:3c:95:c0:33:57:ef:
                    ac:35:28:ac:c1:01:59:2d:f4:a7:1e:97:4c:c7:72:
                    a5:e5:c7:2e:e5:f4:88:40:26:b2:b5:68:d2:b4:48:
                    27:24:97:79:8e:2c:53:da:be:65:bf:c3:03:64:5f:
                    13:de:c8:97:b4:c0:6a:7a:92:1a:3d:47:0e:72:a2:
                    38:06:64:fc:94:cd:bd:02:31:d8:84:74:5e:a0:48:
                    c1:4f:f6:88:d5:0e:db:2a:db:dc:cf:49:46:32:5e:
                    1c:21:fb:f7:27:0f:5d:63:7a:12:04:bd:3c:16:af:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:66:17:D4:79:D5:04:FA:80:32:7D:A5:64:89:93:C9:CC:EC:02:D8
            X509v3 Authority Key Identifier:
                keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/34352e3137392e32302e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:d0:b4:0a:c0:26:9a:f8:2f:11:99:da:24:e3:64:18:33:6f:
         ca:08:fb:2c:0c:cf:81:9f:b9:38:70:03:b3:61:4c:91:8e:23:
         44:7c:e6:be:b7:24:02:9c:f5:20:db:f3:fa:38:a8:32:45:b2:
         5e:5c:5f:05:a1:ca:e6:db:69:c5:86:d2:bc:9b:09:56:99:96:
         ea:72:72:5f:46:a0:0b:06:cc:5f:6d:48:71:87:75:3d:cf:53:
         0f:77:22:43:41:06:96:8f:78:ee:fc:22:03:b8:8c:76:09:0b:
         ba:a5:ea:aa:a7:8e:f8:e5:64:7f:08:ac:b9:d5:35:b6:13:b3:
         6e:e1:81:9f:cf:14:ad:11:21:12:59:01:75:81:07:01:1d:df:
         ae:0e:74:4d:52:e1:a2:bd:1a:6e:df:c9:83:22:3a:08:aa:cd:
         2b:49:3b:37:43:8e:ef:aa:ef:fc:fe:68:02:fe:64:ac:e7:24:
         95:fd:22:db:09:dc:3a:9a:1b:39:d8:9a:f4:dc:48:14:11:09:
         b5:c8:23:8b:68:ad:db:5f:70:a1:1e:63:46:52:f7:d6:03:12:
         08:86:5d:a8:8a:9e:a9:dc:10:7f:b5:c9:4d:7e:4f:c1:3c:c7:
         b4:3b:37:e4:71:c8:dc:92:b3:1f:20:04:24:3a:ac:81:4d:0b:
         43:5c:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:32 2024 by rpki-client on console-ams.rpki-client.org