Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137342e302f32342d3234203d3e20323638333733.roa
File:                     34352e3233392e3137342e302f32342d3234203d3e20323638333733.roa (raw, json)
Hash identifier:          gWFE3PA9JLmjbwUWbHhzZSJjkBmOJNO2poLSrvyz6ik=
Subject key identifier:   0A:28:B1:AE:5D:AF:C5:47:8B:7F:16:23:9F:5D:23:9B:07:B9:D5:3E
Certificate issuer:       /CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
Certificate serial:       794798EE4413602CAE4493F9FAB09AD669F926FC
Authority key identifier: 70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137342e302f32342d3234203d3e20323638333733.roa
Signing time:             Thu 22 Feb 2024 13:04:31 +0000
ROA not before:           Thu 22 Feb 2024 12:59:31 +0000
ROA not after:            Thu 20 Feb 2025 13:04:31 +0000
asID:                     268373
IP address blocks:        45.239.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:47:98:ee:44:13:60:2c:ae:44:93:f9:fa:b0:9a:d6:69:f9:26:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
        Validity
            Not Before: Feb 22 12:59:31 2024 GMT
            Not After : Feb 20 13:04:31 2025 GMT
        Subject: CN=0A28B1AE5DAFC5478B7F16239F5D239B07B9D53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:33:c8:ba:56:4f:72:0e:68:6c:8a:3e:39:
                    b6:aa:1e:6b:fa:a1:91:be:98:49:e9:f3:ad:12:68:
                    b7:cc:8e:ce:bf:35:cc:e4:6f:d1:ab:68:97:1c:22:
                    a5:3a:41:db:e8:7d:85:5a:ec:42:25:a9:3f:b4:25:
                    d4:96:61:a8:32:18:a3:01:64:2e:c0:57:ed:02:0d:
                    ef:66:5a:f8:29:bc:c2:b1:8c:4f:a8:6e:d1:ae:ee:
                    ec:0a:f7:ce:55:9e:0f:6d:45:8d:1c:20:9c:53:4d:
                    5c:5f:2e:ce:fd:f3:e5:30:98:c9:50:10:4b:dd:78:
                    39:1b:b2:de:12:7b:4a:9a:ac:41:3f:9e:72:d9:3d:
                    26:dd:8a:82:a8:70:76:97:64:bd:5d:bd:8e:86:78:
                    70:43:6e:8b:e9:4b:a7:48:b8:4e:39:25:5b:91:23:
                    af:9d:19:61:a8:38:fc:92:c0:a7:d8:08:1d:28:28:
                    3e:dd:fa:26:e0:65:ac:fc:7e:52:ad:e2:c2:d1:c7:
                    35:24:d9:e9:58:79:22:82:25:47:a4:9b:42:a2:fd:
                    43:bb:2f:64:62:aa:c0:35:97:59:76:57:6a:62:81:
                    be:66:8f:84:98:b6:73:95:f8:f3:f8:87:fb:43:6d:
                    da:e2:40:31:b4:33:61:4c:46:d9:d8:eb:d1:26:61:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:28:B1:AE:5D:AF:C5:47:8B:7F:16:23:9F:5D:23:9B:07:B9:D5:3E
            X509v3 Authority Key Identifier:
                keyid:70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137342e302f32342d3234203d3e20323638333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:54:32:f4:f5:6e:6c:8f:8d:64:0c:2f:78:66:e4:43:67:84:
         84:10:04:1b:5a:9f:2a:83:c6:06:94:9e:58:78:e8:c2:e0:92:
         4b:f6:25:9b:3d:43:ad:f3:a5:65:0c:26:37:bd:8a:85:67:a7:
         3a:05:e4:46:23:f3:c3:f6:19:3b:31:a5:aa:0f:14:67:2f:f7:
         6c:05:42:1a:5b:e5:6b:3e:da:f1:e2:98:db:0e:53:81:d1:22:
         23:4f:a1:c8:dc:80:a8:d1:45:3e:90:3b:4e:7c:ac:7f:7b:71:
         89:94:e9:69:56:4b:7e:98:9e:0a:00:d5:06:d6:a2:c8:7a:e4:
         31:8a:b6:32:e4:0c:02:7e:47:a9:5c:73:17:94:ab:4d:dc:f0:
         c7:39:7b:3a:a9:f3:36:df:98:0c:70:83:c1:7d:c0:2b:5e:18:
         9f:9f:23:ff:05:1f:86:ed:59:53:08:9c:e4:27:8f:ef:c0:4a:
         72:f6:d8:50:a7:8d:bd:52:5c:1c:72:13:d2:83:4d:86:14:59:
         5b:93:de:66:77:19:66:f2:00:7f:82:fd:0f:22:23:d0:1d:5e:
         07:bd:fb:21:87:a7:cc:28:8d:dd:51:df:26:65:17:f5:d0:e1:
         54:f8:69:0e:74:da:80:48:d0:54:65:f2:d2:7d:c5:91:67:35:
         e8:3d:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org