Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/34352e37312e38342e302f32322d3234203d3e20323637363032.roa
File:                     34352e37312e38342e302f32322d3234203d3e20323637363032.roa (raw, json)
Hash identifier:          DUvLAxvSESIY9FPJHAtDIQh2OMCbAsYfqUVXTFa8m2k=
Subject key identifier:   AA:89:AA:1C:5D:3F:51:AF:CE:50:1E:32:AC:05:7F:01:59:3A:C8:7D
Certificate issuer:       /CN=AFA3BA1E41526FCAF71A02A06CE46CD901C069C6
Certificate serial:       02C3EAB65ABA34862924DB5164FF482950F5EA30
Authority key identifier: AF:A3:BA:1E:41:52:6F:CA:F7:1A:02:A0:6C:E4:6C:D9:01:C0:69:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/34352e37312e38342e302f32322d3234203d3e20323637363032.roa
Signing time:             Thu 09 Nov 2023 14:47:48 +0000
ROA not before:           Thu 09 Nov 2023 14:42:48 +0000
ROA not after:            Thu 07 Nov 2024 14:47:48 +0000
asID:                     267602
IP address blocks:        45.71.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c3:ea:b6:5a:ba:34:86:29:24:db:51:64:ff:48:29:50:f5:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA3BA1E41526FCAF71A02A06CE46CD901C069C6
        Validity
            Not Before: Nov  9 14:42:48 2023 GMT
            Not After : Nov  7 14:47:48 2024 GMT
        Subject: CN=AA89AA1C5D3F51AFCE501E32AC057F01593AC87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:33:4e:f7:19:00:cc:86:84:d1:8b:9b:9e:
                    d9:3c:ba:21:5d:5a:fd:34:49:02:cd:12:de:b0:7b:
                    b9:8b:b9:b5:cb:90:5c:52:93:7a:5b:c3:8b:0a:dc:
                    bc:e5:f4:06:ea:e5:85:fe:44:35:55:2f:08:ab:e9:
                    4b:eb:23:35:f8:9a:67:5f:a1:ee:c1:ea:27:b7:b0:
                    45:1e:26:11:c5:56:0e:37:f3:5e:6b:0e:a2:53:dd:
                    24:fe:e8:43:c5:0c:25:09:7c:8a:9f:2e:e3:a2:6e:
                    e9:6f:a6:dc:11:4b:21:f9:47:30:73:c5:06:2b:16:
                    36:df:b7:01:1d:1f:f2:7d:8f:c3:86:8b:5f:e1:32:
                    5d:84:8c:f3:cf:ed:31:7e:31:62:88:3f:22:a7:5d:
                    b2:99:b2:12:04:1b:71:bf:e0:df:3a:9c:d8:fa:38:
                    93:51:b6:7d:b3:fd:53:57:36:88:8e:f2:98:a7:d2:
                    4a:31:b3:14:77:ed:6d:37:48:03:36:5f:49:32:37:
                    0e:c2:34:4c:21:cc:44:1f:8e:64:27:40:61:2f:b3:
                    57:ed:68:dd:42:94:75:ad:b6:b4:66:4d:51:8f:1f:
                    1a:09:0f:0b:a5:d5:60:c1:a9:39:27:1e:02:29:7a:
                    6b:f2:55:e2:51:68:81:72:ad:89:9a:92:f7:75:ea:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:89:AA:1C:5D:3F:51:AF:CE:50:1E:32:AC:05:7F:01:59:3A:C8:7D
            X509v3 Authority Key Identifier:
                keyid:AF:A3:BA:1E:41:52:6F:CA:F7:1A:02:A0:6C:E4:6C:D9:01:C0:69:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/34352e37312e38342e302f32322d3234203d3e20323637363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:7e:7d:59:a5:77:69:33:1b:d0:38:97:4e:88:78:66:4e:ea:
         cd:03:2c:3e:2a:00:ea:a3:6b:89:bc:94:e2:f1:e1:42:42:ee:
         a5:bb:99:6f:ab:6b:94:2f:1d:00:d4:66:e6:12:59:6a:bd:c2:
         42:3d:23:27:c3:d5:0b:07:1f:24:9d:cf:a5:5e:1b:30:a2:f1:
         2d:40:fc:15:6e:3b:ae:9e:1e:dd:8e:b8:dc:e4:2e:5a:04:b0:
         23:a7:19:7c:7c:f2:b7:29:cc:a3:a6:28:2f:23:4f:b5:87:19:
         da:f6:cf:e4:c2:6a:60:2d:1e:22:1b:a2:9e:0a:e3:75:8c:5a:
         e9:75:8b:20:0a:5f:43:11:1d:f6:17:51:1f:f6:9c:cf:01:96:
         aa:98:f4:1c:ec:3b:dc:13:82:c6:c5:c4:0d:01:a0:cb:52:eb:
         9a:1d:3b:30:1d:00:75:08:62:0a:0f:86:a1:01:e1:7a:dd:3f:
         d0:ba:ba:00:8e:89:98:68:38:a1:dc:d2:2e:55:a3:77:1a:ab:
         9a:69:39:c0:2a:35:9c:c3:57:48:97:d0:aa:d6:b7:30:22:40:
         13:e6:91:0e:97:48:32:c9:17:ec:24:2b:96:fc:ba:b0:e7:25:
         53:51:f8:e1:e6:b8:93:ea:ef:57:cf:2c:ed:57:5f:aa:0b:d0:
         ea:f9:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org