Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32332e302f32342d3234203d3e20323637353936.roa
File:                     34352e37312e32332e302f32342d3234203d3e20323637353936.roa (raw, json)
Hash identifier:          E2564nRayd0yqkjHUaT5PxfgC4CwP6XQpzlt7GZ9gDs=
Subject key identifier:   A9:CD:7C:B9:04:D7:98:52:69:A0:E8:85:02:30:55:82:C9:C0:1A:90
Certificate issuer:       /CN=61FAAA30490638B45CAC59240695D24F3F9F5A15
Certificate serial:       4B4CBE3EC02788C2D8D54C6F432BE40D3734B452
Authority key identifier: 61:FA:AA:30:49:06:38:B4:5C:AC:59:24:06:95:D2:4F:3F:9F:5A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32332e302f32342d3234203d3e20323637353936.roa
Signing time:             Wed 29 Mar 2023 21:40:41 +0000
ROA not before:           Wed 29 Mar 2023 21:35:41 +0000
ROA not after:            Wed 27 Mar 2024 21:40:41 +0000
asID:                     267596
IP address blocks:        45.71.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4c:be:3e:c0:27:88:c2:d8:d5:4c:6f:43:2b:e4:0d:37:34:b4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61FAAA30490638B45CAC59240695D24F3F9F5A15
        Validity
            Not Before: Mar 29 21:35:41 2023 GMT
            Not After : Mar 27 21:40:41 2024 GMT
        Subject: CN=A9CD7CB904D7985269A0E88502305582C9C01A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:bf:57:2e:4d:71:b4:04:28:55:e7:df:b5:
                    29:09:e5:68:45:be:bf:e6:b4:76:8f:47:eb:31:f4:
                    f9:13:8c:32:69:6b:20:85:f0:15:1c:4c:19:ac:e1:
                    e8:81:f1:fd:a2:cd:f0:90:ad:ef:93:44:44:61:ba:
                    f2:6a:23:c0:ec:24:e0:3d:a6:27:74:5f:65:54:fa:
                    1d:de:84:4e:f5:f1:19:69:39:5d:a5:6d:74:21:92:
                    ad:21:cc:74:ad:7e:6b:bd:23:ed:15:ba:6a:f6:5a:
                    87:7c:23:58:dd:58:b6:1c:40:91:85:93:83:d1:e4:
                    83:04:03:e4:eb:f5:02:d2:0e:50:a5:dc:90:52:62:
                    4c:b0:1b:af:0c:4c:b6:3d:8e:47:df:45:fb:72:bf:
                    33:41:84:01:2d:78:9a:0a:0b:ab:47:4d:84:c7:de:
                    f3:73:f6:33:9c:98:5b:ce:b5:6f:44:b1:75:12:6d:
                    48:a0:30:37:e7:bc:67:1d:1b:3f:19:92:c5:7f:59:
                    f6:3c:e1:bc:c3:b3:82:2c:e4:31:c0:40:81:ae:7a:
                    63:f6:8e:ca:4b:80:27:ec:d7:3a:9f:6c:7e:ef:1a:
                    ac:f6:d1:d1:82:22:58:98:1b:f9:26:c0:6d:13:f2:
                    3f:7f:b1:0f:70:8d:84:ee:79:12:8d:c1:ab:a4:f9:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CD:7C:B9:04:D7:98:52:69:A0:E8:85:02:30:55:82:C9:C0:1A:90
            X509v3 Authority Key Identifier:
                keyid:61:FA:AA:30:49:06:38:B4:5C:AC:59:24:06:95:D2:4F:3F:9F:5A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32332e302f32342d3234203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:b3:18:12:32:72:8a:7d:a7:ac:6d:44:78:5d:cc:97:7d:0f:
         d3:76:8e:03:00:81:6f:d8:20:1e:20:b4:40:e0:79:8f:c1:98:
         0e:aa:84:f1:19:a4:6d:8f:be:2b:a6:cb:15:f9:d8:41:27:36:
         e8:d2:ce:af:22:25:b6:64:36:fa:6b:e6:5b:71:ae:94:0a:27:
         65:e4:92:8b:21:d2:3f:98:80:07:89:67:2d:56:73:6e:32:d2:
         23:ca:0e:27:53:04:3e:17:bb:63:6f:ba:a0:2b:bb:5d:73:8e:
         1a:bb:e6:9c:4a:a9:b8:2a:8b:35:7e:5d:8a:aa:ac:44:54:a9:
         a3:5c:ae:0a:ef:1a:2d:9f:8f:c6:9a:cc:33:b4:57:84:06:9d:
         fe:44:4d:2c:bb:86:9b:e2:85:18:d3:38:b0:f6:b6:6c:de:22:
         5f:c1:d6:cd:83:d9:ce:b5:0d:f7:43:4c:4e:df:e8:6d:2a:ee:
         b1:77:f4:d0:80:16:60:4e:04:f1:b9:e0:6a:cd:1f:62:69:b0:
         0e:4d:2b:cc:be:de:06:a6:7f:8b:9d:3b:2e:9b:a9:00:9d:29:
         89:81:76:e3:d5:54:8a:38:47:5e:3a:c6:c0:ec:db:10:97:8e:
         fe:39:3a:b1:70:b5:d0:9d:fd:5e:e0:8f:83:c3:52:5a:27:7e:
         78:8c:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org