Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136392e302f32342d3234203d3e20323637363232.roa
File:                     34352e37312e3136392e302f32342d3234203d3e20323637363232.roa (raw, json)
Hash identifier:          5546t7lts4AHIvyvrALVelGtW8u/G5Eeebh4IfVg+yg=
Subject key identifier:   DD:03:DB:C7:5A:81:5D:38:24:CB:1F:08:30:86:1A:8E:16:56:8B:4D
Certificate issuer:       /CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
Certificate serial:       6B9482548060D65AB28BFF977CFF891D9E993A72
Authority key identifier: BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136392e302f32342d3234203d3e20323637363232.roa
Signing time:             Wed 29 Nov 2023 03:49:48 +0000
ROA not before:           Wed 29 Nov 2023 03:44:48 +0000
ROA not after:            Wed 27 Nov 2024 03:49:48 +0000
asID:                     267622
IP address blocks:        45.71.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:94:82:54:80:60:d6:5a:b2:8b:ff:97:7c:ff:89:1d:9e:99:3a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
        Validity
            Not Before: Nov 29 03:44:48 2023 GMT
            Not After : Nov 27 03:49:48 2024 GMT
        Subject: CN=DD03DBC75A815D3824CB1F0830861A8E16568B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:eb:14:c8:fc:96:bb:ab:ba:bc:73:24:cb:
                    bf:b7:2e:84:c1:6b:d8:44:9f:a6:05:6d:47:8a:13:
                    e2:3c:38:5f:2a:97:0c:e0:ff:d9:25:3e:c6:b1:33:
                    32:ce:c7:cc:13:7e:1f:e8:9a:69:4f:69:e5:68:a8:
                    e8:17:1f:d8:e8:8a:1f:be:6a:dc:ce:d0:5b:53:cc:
                    4b:f8:a8:4e:38:af:06:b1:61:70:c0:3f:c8:44:f8:
                    c8:f0:02:21:d5:55:2f:91:07:6b:3a:04:17:06:f7:
                    b5:cb:aa:e4:ab:51:f0:5e:69:ef:58:f8:38:55:5c:
                    2f:ef:10:1b:4d:db:32:0a:37:29:4e:a6:03:c2:2e:
                    67:4a:e7:42:18:2d:d5:46:f8:79:28:9f:da:36:73:
                    5e:4f:c8:8f:fa:79:20:6d:03:17:2c:f2:d7:dd:03:
                    10:70:93:f6:5b:aa:db:9c:3c:0e:2e:8a:34:55:9e:
                    8f:b6:11:d8:af:34:79:d3:42:23:7e:22:18:3e:17:
                    a1:a5:e8:0b:6a:1a:97:06:a5:44:53:10:45:69:3d:
                    b1:ab:5d:4d:6c:ac:d4:92:0a:e2:57:1b:d2:97:99:
                    95:ca:86:16:96:c5:23:97:37:00:b4:c2:e2:de:c1:
                    31:7a:24:17:2a:1e:a7:36:ad:73:34:43:30:e9:f0:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:03:DB:C7:5A:81:5D:38:24:CB:1F:08:30:86:1A:8E:16:56:8B:4D
            X509v3 Authority Key Identifier:
                keyid:BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136392e302f32342d3234203d3e20323637363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8f:0d:fa:60:f2:26:e3:d9:cb:f5:c4:e0:0a:8f:dd:da:c8:
         6e:03:f9:46:a7:4e:1a:9d:8c:62:bc:9c:dc:80:51:54:b2:9b:
         7d:0e:05:39:9a:5c:69:5e:15:3f:94:cd:cf:bf:f4:d4:32:29:
         55:9f:3f:bf:1d:47:d4:cd:4a:36:70:b4:25:42:a5:a9:46:0e:
         6b:b1:db:a0:2a:1c:e2:3f:8a:dc:b5:aa:dc:d1:e6:a7:98:5d:
         fa:e7:ce:a3:ae:d7:22:c0:e7:d4:73:db:e8:2b:97:f6:9c:39:
         19:e0:98:0b:08:c1:96:59:8e:5f:82:07:98:a0:18:3e:b6:24:
         13:04:8f:88:d1:b7:e4:72:cf:a4:51:b8:0b:5d:aa:c6:55:6b:
         09:e5:90:6e:41:74:57:f7:f5:9c:28:35:da:f2:4c:96:b5:93:
         fe:88:02:be:1d:26:36:74:ae:05:81:02:14:74:c5:a7:78:bc:
         75:97:05:f7:13:07:10:e2:d0:2e:04:c6:22:22:43:77:3e:9f:
         cb:e9:d4:7a:52:d0:e5:1a:41:a9:2e:3c:b0:5e:88:67:7f:f7:
         28:06:f9:44:4f:be:cc:fd:9d:66:10:ca:df:d7:9d:9a:23:34:
         49:db:37:96:5d:fd:7b:ec:4a:7c:5f:76:c6:bd:a9:8a:b5:60:
         64:a6:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:08 2024 by rpki-client on console.sobornost.net