Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32312e302f32342d3234203d3e20323637353936.roa
File:                     34352e37312e32312e302f32342d3234203d3e20323637353936.roa (raw, json)
Hash identifier:          FBx3997iX1noBuP6wJ8q/iLsPJN7TY8AonelSsB4/S4=
Subject key identifier:   5C:A1:43:01:09:69:8A:78:9D:A2:68:42:C0:31:82:B1:EF:06:1E:DD
Certificate issuer:       /CN=7A6E161A8B2B31DB30E03A950051D8233F43BE11
Certificate serial:       03F6A75F838F02544A42414E3A96DD8ECDF22C98
Authority key identifier: 7A:6E:16:1A:8B:2B:31:DB:30:E0:3A:95:00:51:D8:23:3F:43:BE:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32312e302f32342d3234203d3e20323637353936.roa
Signing time:             Thu 15 Feb 2024 17:54:21 +0000
ROA not before:           Thu 15 Feb 2024 17:49:21 +0000
ROA not after:            Thu 13 Feb 2025 17:54:21 +0000
asID:                     267596
IP address blocks:        45.71.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f6:a7:5f:83:8f:02:54:4a:42:41:4e:3a:96:dd:8e:cd:f2:2c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A6E161A8B2B31DB30E03A950051D8233F43BE11
        Validity
            Not Before: Feb 15 17:49:21 2024 GMT
            Not After : Feb 13 17:54:21 2025 GMT
        Subject: CN=5CA1430109698A789DA26842C03182B1EF061EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:5d:8a:1d:d7:d3:b9:44:c9:1f:05:20:8b:
                    de:8a:fc:da:02:2d:ba:08:6d:53:82:3e:7b:a1:44:
                    a3:84:4b:dd:f1:5b:17:2b:2d:be:23:65:a5:44:f4:
                    63:a4:95:8e:35:dc:e1:b4:a9:89:f6:43:4d:4c:5e:
                    2f:9e:69:88:a4:7a:5e:72:fe:5f:ac:fe:34:4e:f3:
                    6b:fe:41:a5:9c:51:4c:06:44:ea:7c:ed:15:11:c4:
                    66:6c:34:bc:f5:a1:d7:b5:72:2c:3a:13:b2:7e:ab:
                    18:a5:21:54:7b:32:cf:27:8d:c2:45:db:3e:9f:9f:
                    9d:f1:0b:1b:94:89:cd:8a:5f:a4:a5:48:d9:7c:1d:
                    c5:7d:2d:0c:5d:d7:9d:bf:42:87:6d:e9:a5:7f:59:
                    f1:3e:38:c2:75:6f:28:e8:51:fa:f7:d9:63:58:36:
                    d5:45:30:bc:eb:fd:d8:0f:09:84:7f:49:97:4e:6c:
                    15:f8:42:92:a6:6b:02:35:27:f9:54:e7:13:08:64:
                    e9:26:ba:85:c4:e4:1f:6f:92:aa:71:17:63:ac:34:
                    01:64:38:c2:c2:53:7c:1b:88:ea:cd:3d:a5:2f:72:
                    33:f3:2b:04:df:40:88:b5:87:a9:63:ae:a7:81:1a:
                    11:c3:78:ae:9c:a8:1a:4b:07:78:99:9b:fc:80:90:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A1:43:01:09:69:8A:78:9D:A2:68:42:C0:31:82:B1:EF:06:1E:DD
            X509v3 Authority Key Identifier:
                keyid:7A:6E:16:1A:8B:2B:31:DB:30:E0:3A:95:00:51:D8:23:3F:43:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32312e302f32342d3234203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:a4:68:75:ab:25:be:7f:82:59:ab:b2:23:04:5e:1d:46:
         7e:42:d8:d3:27:f8:ff:46:40:30:0c:d3:9a:c6:af:25:e2:ac:
         09:51:4f:54:b7:a5:8d:d2:a3:59:31:f1:3b:d2:d6:ee:b0:a1:
         c1:d9:1c:b2:66:b9:ad:98:be:02:b9:fd:ac:18:f5:53:1e:22:
         8e:26:a1:7d:f8:31:61:7b:fa:c8:a6:a5:55:be:57:b3:f1:a3:
         83:d4:6f:e7:6b:ae:0c:8c:fb:88:f0:d9:25:6e:b2:88:b0:ca:
         a6:28:b2:87:dc:26:20:3a:39:d9:40:4b:5a:8b:95:7b:41:c8:
         74:9e:a8:5e:d7:17:a6:e2:bb:bb:b9:c2:9a:ae:4d:42:74:fb:
         2e:cd:95:c2:25:ba:21:9a:38:2b:40:2f:cf:e7:df:b6:f6:82:
         c9:56:6f:c4:9b:e9:47:9f:ae:ca:c5:34:7e:3e:a0:73:46:a4:
         2e:3b:ef:3e:5b:d7:86:b9:dd:72:e3:1e:c6:5a:dd:6e:8d:eb:
         2a:c4:6a:31:6c:68:26:56:a5:e3:2a:e3:75:ff:81:a9:da:a9:
         14:ab:dc:6c:07:05:cf:73:c1:d7:47:ea:5c:0a:06:40:c0:19:
         00:2e:8b:fe:23:4c:58:03:dd:46:94:5d:bf:86:5b:d7:13:d1:
         a5:4e:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org