Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34322e302f32342d3234203d3e20323733333136.roa
File:                     34352e37312e34322e302f32342d3234203d3e20323733333136.roa (raw, json)
Hash identifier:          3ruKGSj+tSMpH2WS+26CeXv2TiHrukpJRk3+JxKjpdE=
Subject key identifier:   FC:83:D7:9C:0C:49:9C:75:E0:59:5C:8D:2B:DE:83:DD:32:6C:F8:B0
Certificate issuer:       /CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
Certificate serial:       202B04F85CF64153C289B3DCF42C068F352154A7
Authority key identifier: F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34322e302f32342d3234203d3e20323733333136.roa
Signing time:             Thu 15 Feb 2024 11:47:22 +0000
ROA not before:           Thu 15 Feb 2024 11:42:22 +0000
ROA not after:            Thu 13 Feb 2025 11:47:22 +0000
asID:                     273316
IP address blocks:        45.71.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2b:04:f8:5c:f6:41:53:c2:89:b3:dc:f4:2c:06:8f:35:21:54:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AF358E38DAD66120C87DB6C1201E9E226E2647
        Validity
            Not Before: Feb 15 11:42:22 2024 GMT
            Not After : Feb 13 11:47:22 2025 GMT
        Subject: CN=FC83D79C0C499C75E0595C8D2BDE83DD326CF8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:26:dc:2a:1c:f9:d7:a1:ed:94:7a:f6:26:25:
                    0b:0b:83:bf:02:3d:95:a1:b9:4c:06:1f:00:2a:4d:
                    f9:7f:d4:3a:08:4a:ff:43:f7:b8:41:e6:c2:f3:8e:
                    4e:c3:46:20:7a:80:18:17:8d:e4:c1:a6:5f:14:f0:
                    d0:79:5b:4d:b3:0a:51:7d:a4:79:f4:df:a7:8d:e0:
                    54:1c:3d:67:1f:6b:5c:ac:fb:19:c6:d7:7f:b7:04:
                    48:81:35:a4:9d:ef:fa:29:4e:44:81:ed:00:29:2c:
                    24:6f:89:3c:74:77:e2:41:fb:11:7b:21:b8:53:bf:
                    2c:86:dc:fd:e1:b1:27:02:54:96:ad:35:bc:bd:ec:
                    0e:fa:71:cc:52:44:fe:e3:cc:c6:ee:e4:f1:3a:cb:
                    35:0b:8f:de:c6:04:e3:b0:14:19:37:21:2c:53:0b:
                    87:8d:6d:a0:1d:be:2b:84:8e:50:9f:a9:d8:e7:1d:
                    c7:be:cb:da:fc:21:95:66:db:c8:b6:4b:dc:78:6d:
                    0a:62:8d:f6:c9:f9:7e:7a:1d:b8:18:5e:38:2e:c9:
                    dd:b8:e3:c6:79:61:a2:0d:53:68:04:09:1d:62:63:
                    1c:e6:e5:04:8b:cd:f1:62:37:dd:15:f0:59:4b:5d:
                    b8:05:74:3e:dc:c5:87:67:e5:db:d8:f6:fb:cb:c0:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:83:D7:9C:0C:49:9C:75:E0:59:5C:8D:2B:DE:83:DD:32:6C:F8:B0
            X509v3 Authority Key Identifier:
                keyid:F2:AF:35:8E:38:DA:D6:61:20:C8:7D:B6:C1:20:1E:9E:22:6E:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2AF358E38DAD66120C87DB6C1201E9E226E2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/34352e37312e34322e302f32342d3234203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:03:a7:c1:91:4d:95:50:1d:58:47:ae:95:ed:10:69:22:
         c7:67:38:ea:82:81:ae:cb:cd:5a:54:12:0e:a2:24:db:3b:43:
         70:84:35:bf:41:85:d6:0a:5e:8f:8d:9e:b1:31:d4:13:97:dc:
         7c:be:35:d3:35:64:25:13:4d:9c:99:db:cf:29:59:77:60:55:
         71:cd:9a:76:e5:30:c5:de:ba:8b:c1:9e:22:ae:bd:cc:05:f6:
         34:b0:65:a0:7d:15:9b:29:1a:08:ef:44:7a:04:d7:a8:5c:8a:
         12:8c:74:15:a4:85:6d:ef:78:40:be:8a:26:25:d4:04:1e:bf:
         ad:f1:db:bc:e8:f3:4c:78:40:1d:9f:3a:2a:d9:8c:e4:04:5c:
         18:57:16:7e:db:44:ba:e2:5f:ea:79:80:f7:63:c8:12:3b:9e:
         9e:4f:1c:2a:cb:7f:79:aa:83:77:fa:3f:68:46:68:38:14:fb:
         36:e0:f3:6a:02:39:f8:bf:9d:98:37:92:97:5a:43:9a:be:6e:
         c9:9a:34:d6:98:8b:be:c0:5e:f7:3d:45:f5:43:14:f7:47:18:
         b2:89:83:70:c6:97:4a:f4:d7:a4:05:0b:46:68:b6:55:76:d6:
         13:58:c3:b7:1a:79:eb:06:74:86:97:e1:6b:f4:4c:f1:18:13:
         fc:8f:d2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org