Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137352e302f32342d3234203d3e20323638333733.roa
File:                     34352e3233392e3137352e302f32342d3234203d3e20323638333733.roa (raw, json)
Hash identifier:          gFUtyQc5mWLn4FUNRfPtWofBaUMxCz7kHMdFyhQHndI=
Subject key identifier:   92:55:41:8A:70:DA:B3:87:2F:9B:A2:A5:11:80:E7:25:B0:3C:35:1D
Certificate issuer:       /CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
Certificate serial:       720720ACEED4EF7DA5E4339D6EF7A610F029C813
Authority key identifier: 70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137352e302f32342d3234203d3e20323638333733.roa
Signing time:             Thu 22 Feb 2024 13:04:31 +0000
ROA not before:           Thu 22 Feb 2024 12:59:31 +0000
ROA not after:            Thu 20 Feb 2025 13:04:31 +0000
asID:                     268373
IP address blocks:        45.239.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:07:20:ac:ee:d4:ef:7d:a5:e4:33:9d:6e:f7:a6:10:f0:29:c8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
        Validity
            Not Before: Feb 22 12:59:31 2024 GMT
            Not After : Feb 20 13:04:31 2025 GMT
        Subject: CN=9255418A70DAB3872F9BA2A51180E725B03C351D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:e1:b6:43:9e:1c:92:0f:f6:ce:f7:6c:a2:
                    be:79:33:51:7e:c5:f3:94:60:06:b2:65:b4:51:89:
                    02:06:fe:8a:6d:1c:d7:15:cc:8c:37:9e:a0:d4:9a:
                    65:a8:09:db:65:d9:5e:ad:9d:ad:7c:43:bd:0e:8d:
                    65:41:71:e3:1d:7c:0c:e3:88:cf:28:d2:f2:87:97:
                    fd:b7:f6:88:00:40:62:7a:1a:7b:98:c1:bd:ee:7c:
                    99:df:15:6f:fb:1f:5b:c4:f4:d7:b8:f1:f5:54:67:
                    64:84:5c:88:81:fe:38:e8:84:65:41:46:13:1f:ae:
                    7a:5e:b1:fd:69:0d:44:5d:7b:ef:7d:c1:d1:e8:ce:
                    b8:e1:cd:5c:41:d3:e1:6b:99:df:46:f5:7f:84:60:
                    c0:79:d0:ed:3b:ac:5c:4e:71:dd:8d:e8:b2:00:b8:
                    81:8c:80:1c:18:b8:65:7c:56:23:08:c4:02:66:5d:
                    8c:21:cf:59:19:77:0a:f0:38:00:d8:e3:b7:97:8d:
                    c6:6c:67:38:4c:1e:2c:4c:3d:62:63:49:2a:e4:b0:
                    35:29:2e:cf:29:c9:0e:ba:1a:a6:ae:48:8d:3d:5a:
                    07:3d:60:29:a4:11:d6:79:c0:45:14:d6:92:56:5e:
                    69:e4:44:8f:a1:02:59:b6:8a:69:08:a2:ec:6c:d8:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:55:41:8A:70:DA:B3:87:2F:9B:A2:A5:11:80:E7:25:B0:3C:35:1D
            X509v3 Authority Key Identifier:
                keyid:70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137352e302f32342d3234203d3e20323638333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:8e:2d:0f:d0:7b:02:0e:f5:18:8e:a6:e3:60:1f:f8:2e:2d:
         0a:f5:64:4c:bf:86:23:08:c5:a1:7e:d5:d5:89:65:33:74:a0:
         da:c6:0b:41:2d:17:17:76:60:82:c0:39:f5:6a:2c:b8:2a:59:
         7f:0a:55:0d:11:de:2a:eb:f8:98:61:28:d9:15:f6:fe:f4:87:
         7b:8e:55:52:1f:a9:38:12:a9:4e:98:56:c7:88:d7:5a:ba:d5:
         ce:58:45:c0:48:b4:a8:16:73:fe:84:09:67:c4:b0:1a:b1:7d:
         71:9d:ba:87:ae:9d:55:8c:26:27:65:52:17:94:ca:56:c6:8d:
         85:50:b3:79:e9:ef:81:be:1c:69:0d:db:6b:57:d6:68:2f:b3:
         32:ac:e7:56:f4:3e:a8:df:66:05:40:c9:6c:34:a6:52:1c:19:
         2d:81:44:a3:db:29:26:66:c7:37:32:71:2e:2d:f8:17:a0:7e:
         e7:be:61:39:62:d3:c6:25:37:01:d8:c4:f1:dd:23:a5:03:6c:
         70:ea:1d:a1:68:26:a5:a4:89:32:26:45:7e:d5:0f:43:fb:66:
         ff:6b:32:ab:40:ff:c2:b8:2e:3e:c0:fa:ef:fb:02:a0:0d:ad:
         ec:5f:82:2e:56:4c:3c:e1:00:75:7b:90:16:d3:35:5d:15:a6:
         ef:12:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org