Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/34352e37312e3231362e302f32322d3332203d3e20323637363239.roa
File:                     34352e37312e3231362e302f32322d3332203d3e20323637363239.roa (raw, json)
Hash identifier:          LFg/46c901fjMcxNPTniZFrs3+g+x597rhePueaoDoA=
Subject key identifier:   7C:0D:DC:33:9E:E3:7C:78:0A:20:F1:C3:8E:9C:55:87:6E:D2:3C:1A
Certificate issuer:       /CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
Certificate serial:       6A17DCEBD086BA90D1F8D05273E9CD990226CC28
Authority key identifier: 91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/34352e37312e3231362e302f32322d3332203d3e20323637363239.roa
Signing time:             Fri 08 Dec 2023 20:51:15 +0000
ROA not before:           Fri 08 Dec 2023 20:46:15 +0000
ROA not after:            Fri 06 Dec 2024 20:51:15 +0000
asID:                     267629
IP address blocks:        45.71.216.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:17:dc:eb:d0:86:ba:90:d1:f8:d0:52:73:e9:cd:99:02:26:cc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
        Validity
            Not Before: Dec  8 20:46:15 2023 GMT
            Not After : Dec  6 20:51:15 2024 GMT
        Subject: CN=7C0DDC339EE37C780A20F1C38E9C55876ED23C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:1b:8c:03:68:74:bc:c9:84:dc:86:0d:b4:
                    1e:7b:1c:64:38:eb:7a:b9:3c:64:3f:a8:f7:22:c8:
                    f2:5b:12:da:fd:a5:25:bf:e3:fe:1f:4d:db:b3:ae:
                    4b:19:94:d6:4f:c2:1c:75:35:30:0a:18:f3:a7:33:
                    b3:9d:c8:3b:73:fa:8b:23:73:0e:54:f4:29:a4:b0:
                    c5:4f:60:6a:db:c0:08:aa:b3:52:d2:6c:7c:a7:3b:
                    11:d4:19:3d:1f:63:09:e7:fb:a0:f6:75:11:23:1b:
                    fd:19:c8:e4:96:8f:d4:64:57:f7:c4:a9:bd:51:e0:
                    73:41:41:7f:4a:83:f7:6a:74:8b:d0:90:c2:a6:d7:
                    c1:76:eb:23:0e:c6:6a:d4:25:0a:1e:7a:9f:f8:09:
                    44:61:88:30:29:6a:8f:6e:a1:95:c6:41:be:3b:40:
                    5d:19:4a:e7:50:56:d4:2a:fb:1c:49:db:e9:a4:67:
                    be:0d:3f:e6:77:14:c0:2d:4f:81:5a:77:a4:21:8b:
                    5a:36:68:d8:6e:06:48:e5:c8:93:23:27:ac:a7:75:
                    df:6c:fc:b4:12:56:c3:91:d8:99:48:eb:10:fd:09:
                    b9:31:be:f8:de:65:5f:43:b6:8c:16:ea:c9:1f:62:
                    a0:d9:d6:1e:96:17:36:61:fb:14:3e:38:1e:b9:06:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0D:DC:33:9E:E3:7C:78:0A:20:F1:C3:8E:9C:55:87:6E:D2:3C:1A
            X509v3 Authority Key Identifier:
                keyid:91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/34352e37312e3231362e302f32322d3332203d3e20323637363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:e7:bf:83:a5:fe:51:73:6f:48:3c:f8:bf:b9:18:82:53:0b:
         b8:1b:63:15:4f:df:38:c2:23:61:e5:c3:4f:ef:69:ea:9c:a7:
         8e:72:87:07:7c:34:fd:97:bd:27:84:c8:1f:a7:cd:1a:dd:7b:
         0d:22:4f:ae:60:d3:17:83:b9:58:2f:1d:70:f5:10:fb:af:03:
         e4:59:81:36:db:fe:ba:93:25:fd:1b:9b:a8:74:fa:02:af:48:
         90:e7:3d:26:d5:8f:0b:2d:b6:30:94:8c:1d:66:d5:ab:dd:7a:
         8f:17:a7:95:48:da:96:35:73:86:42:8d:ae:2f:80:86:55:9f:
         f6:dc:54:1c:91:c2:33:39:f3:5c:6d:6f:34:af:81:64:8d:5e:
         e7:9f:73:20:9e:23:43:5c:4f:7c:c9:04:07:f6:67:98:c8:e3:
         a8:79:86:a7:06:7a:6a:f4:9d:9b:0e:70:49:b8:33:3d:68:05:
         03:66:3d:07:b4:c8:09:70:25:9f:e1:92:85:b8:3b:b4:dd:9f:
         ac:2c:dd:5d:05:22:15:1c:31:0d:63:af:e8:e5:53:d9:47:14:
         fa:ae:da:84:42:79:b8:e7:47:74:36:98:67:90:63:13:dd:d8:
         db:18:ba:b5:1c:f6:32:1d:e0:85:4b:73:31:83:44:bd:d5:b8:
         9f:ea:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org