Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34322e302f32332d3233203d3e20323733333136.roa
File:                     34352e37312e34322e302f32332d3233203d3e20323733333136.roa (raw, json)
Hash identifier:          P22eYNHZG/LbWiWy8FmfC3sHazESmtkW4p9/uYb4ZkU=
Subject key identifier:   C7:67:07:A2:71:48:B8:B5:5E:91:1A:C9:4E:F8:93:C1:36:22:71:E6
Certificate issuer:       /CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
Certificate serial:       050D8CA8DAAB2DBC359C2649A4D218C85CBA1D62
Authority key identifier: F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34322e302f32332d3233203d3e20323733333136.roa
Signing time:             Thu 15 Feb 2024 11:47:22 +0000
ROA not before:           Thu 15 Feb 2024 11:42:22 +0000
ROA not after:            Thu 13 Feb 2025 11:47:22 +0000
asID:                     273316
IP address blocks:        45.71.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0d:8c:a8:da:ab:2d:bc:35:9c:26:49:a4:d2:18:c8:5c:ba:1d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
        Validity
            Not Before: Feb 15 11:42:22 2024 GMT
            Not After : Feb 13 11:47:22 2025 GMT
        Subject: CN=C76707A27148B8B55E911AC94EF893C1362271E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:73:b3:41:2d:b1:49:98:43:ef:d6:fb:21:
                    ba:6e:b1:7e:3f:26:5c:ed:ec:48:02:7f:ea:c5:3f:
                    a5:07:35:e8:3e:e0:29:e1:41:b3:05:11:f5:78:3b:
                    c4:94:6f:fd:b4:e6:3f:e7:61:37:30:41:a4:e8:a3:
                    f2:6d:1c:4f:71:7f:12:5e:4a:70:5a:e0:a9:64:77:
                    f0:b5:e8:8d:37:03:e8:f9:78:54:35:60:ab:20:5b:
                    b0:a6:71:a5:48:85:d9:c9:70:d7:d1:36:26:53:c8:
                    6e:be:99:d4:35:fa:51:40:1c:95:cb:db:42:23:84:
                    0a:b0:5b:d0:53:0f:a2:24:91:5c:8f:75:98:00:e7:
                    b6:19:5e:a8:4f:96:c6:0a:63:54:30:71:83:8e:3d:
                    8c:18:da:31:29:84:c0:a6:cd:7c:e7:82:2e:83:71:
                    e5:f8:ab:92:7b:a3:8c:d8:08:e9:a6:67:51:92:4e:
                    88:76:fa:53:b0:2b:08:7c:9e:08:a6:0a:8c:5f:17:
                    46:7f:43:a6:84:3f:38:09:4c:30:89:fc:83:5e:a7:
                    90:75:f1:06:b6:c9:90:02:27:ab:14:40:9c:d1:db:
                    ab:45:99:ee:f6:48:e9:45:fb:cc:c7:2b:e3:ac:46:
                    6a:d3:ae:d5:b9:45:e4:90:0d:b3:0b:97:1b:2f:3b:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:67:07:A2:71:48:B8:B5:5E:91:1A:C9:4E:F8:93:C1:36:22:71:E6
            X509v3 Authority Key Identifier:
                keyid:F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34322e302f32332d3233203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:9e:b2:70:1d:7e:3d:5f:97:14:ed:c6:cb:b5:a6:f1:39:
         30:b3:14:8e:d7:7a:11:ee:29:c3:47:1f:26:52:61:1e:76:c1:
         90:06:e1:ab:fc:a8:56:7a:b7:3d:75:54:9b:6a:5e:14:1c:8e:
         78:18:9d:7f:c7:7c:b7:02:ce:51:56:5d:22:1e:2c:ca:09:38:
         1c:ca:b0:60:ca:2d:cd:a4:94:33:e7:61:37:18:b2:03:f0:b2:
         45:53:67:99:de:90:77:02:80:0a:58:25:2d:73:07:97:3e:1d:
         cf:c2:2f:0b:89:a3:59:2b:10:7d:7d:2d:f6:20:4e:d9:ed:cf:
         15:e3:b4:99:c7:91:60:98:68:b9:34:6c:58:79:c2:06:e1:41:
         ac:41:3d:96:31:b8:92:2c:26:e7:07:b4:cf:63:23:82:73:d1:
         68:9e:f2:49:18:3c:e6:80:ff:6f:12:56:57:fe:71:f9:cd:b4:
         b3:c2:c4:16:30:f5:ab:d0:a0:2f:44:01:0b:46:96:bf:af:81:
         af:23:f6:9a:91:80:2f:98:ca:d0:d7:5d:01:07:25:f0:06:72:
         77:e8:4d:26:36:67:ab:a6:eb:42:5a:2a:40:5c:7f:77:6b:ff:
         ea:d8:75:fe:28:9b:9b:38:9f:51:bb:b1:4a:ff:6c:b9:20:2f:
         97:37:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org