Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e372e302f32342d3234203d3e20323637333531.roa
File:                     34352e3233342e372e302f32342d3234203d3e20323637333531.roa (raw, json)
Hash identifier:          ZnFXlTOqqo4ri0v5mIDOpivmIT1skpFeAqK34rqM+Co=
Subject key identifier:   A9:8A:A6:39:B1:E6:A0:B3:94:A6:D0:C0:35:9F:D9:FF:13:6B:97:F7
Certificate issuer:       /CN=FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC
Certificate serial:       639D20EA335FA9C1A6FB33FF1664CFBE275493BA
Authority key identifier: FE:FF:28:BF:1C:F3:87:F9:46:C0:97:5B:91:E4:10:AA:2F:0F:A4:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e372e302f32342d3234203d3e20323637333531.roa
Signing time:             Tue 14 Jun 2022 04:59:06 +0000
ROA not before:           Tue 14 Jun 2022 04:54:06 +0000
ROA not after:            Tue 13 Jun 2023 04:59:06 +0000
asID:                     267351
IP address blocks:        45.234.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9d:20:ea:33:5f:a9:c1:a6:fb:33:ff:16:64:cf:be:27:54:93:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC
        Validity
            Not Before: Jun 14 04:54:06 2022 GMT
            Not After : Jun 13 04:59:06 2023 GMT
        Subject: CN=A98AA639B1E6A0B394A6D0C0359FD9FF136B97F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:dc:2c:67:7a:64:d6:55:fe:0a:14:96:b1:
                    81:5d:0d:81:c9:8c:c1:ff:be:3b:00:b9:c5:ad:1a:
                    37:3a:19:f9:0f:63:c2:f5:d8:f0:14:f9:c8:16:0a:
                    52:41:5b:0b:9a:69:9d:b8:b5:30:6a:5f:cb:84:7f:
                    94:b6:83:37:2f:c4:3b:0b:fe:99:7c:6d:3f:56:3c:
                    5b:b5:5b:93:97:fb:e6:a7:6a:f8:3d:6c:d6:97:ce:
                    c8:6f:96:6c:67:1f:1c:47:5f:47:55:94:ae:ed:23:
                    88:09:d1:f3:d3:ef:73:d1:79:33:62:0c:5f:9e:43:
                    a2:4d:9c:09:29:74:52:68:51:95:f7:43:38:2d:4c:
                    21:27:ba:c1:d8:c5:a4:4b:43:19:34:ef:1d:6d:c1:
                    92:91:c5:8e:85:68:b1:d1:8a:19:c7:bf:77:22:62:
                    90:bf:b1:b9:64:01:29:1e:b8:3c:0d:f0:8e:0c:23:
                    88:19:9c:4e:12:c4:91:72:51:3a:c3:4c:0d:d9:42:
                    86:c0:e2:6a:89:c8:20:96:07:65:22:05:c6:52:6b:
                    0e:13:61:0f:da:e3:95:d7:e1:94:da:3f:00:a4:5b:
                    44:8b:2e:52:70:f8:66:77:28:41:16:51:c0:20:54:
                    ab:f7:47:25:7a:ed:23:27:29:38:9b:39:d6:4c:36:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8A:A6:39:B1:E6:A0:B3:94:A6:D0:C0:35:9F:D9:FF:13:6B:97:F7
            X509v3 Authority Key Identifier:
                keyid:FE:FF:28:BF:1C:F3:87:F9:46:C0:97:5B:91:E4:10:AA:2F:0F:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e372e302f32342d3234203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:ad:98:0e:80:0f:59:5a:fe:58:06:1c:6c:7c:42:4d:31:
         e6:d8:ea:8d:c7:61:9a:90:95:89:07:f0:d0:48:ab:d7:a0:4e:
         bc:91:4b:7e:56:b0:ce:81:77:1c:8e:53:dd:5d:5a:d7:72:c3:
         7b:1f:f0:b8:df:eb:3e:d2:cb:19:ad:ec:e6:9c:e9:76:d7:9d:
         db:1f:c9:7e:f6:92:9b:99:91:d3:f6:72:4d:fa:5a:57:6c:5f:
         2c:12:2d:c6:cf:07:22:b4:69:02:35:b8:64:0f:50:78:0e:39:
         ac:07:31:cd:98:c3:47:1c:65:1f:c2:90:9d:e6:18:f1:d4:f3:
         c0:92:d6:bc:9a:6e:8b:a6:8b:20:3e:53:ef:f1:5c:34:ac:af:
         47:51:98:d3:0d:8f:ff:f5:5e:a8:7a:fa:cb:65:35:1b:57:55:
         8c:ef:df:5f:9c:ba:1d:22:c7:be:3c:6b:b3:82:80:ed:c5:10:
         6e:20:bd:07:46:25:79:e2:27:23:fd:b7:97:b1:37:6d:b5:7a:
         bc:2a:d0:f7:64:a3:aa:34:79:26:a1:45:9e:4e:b0:a7:d5:d8:
         71:5e:1a:41:22:5c:e6:2f:b0:df:18:30:66:26:aa:24:44:a9:
         0b:3b:3d:92:80:59:89:9c:fc:84:a9:2f:f4:4b:fd:82:34:df:
         d2:a5:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org