Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
File:                     34352e37302e3130302e302f32322d3235203d3e20323637353637.roa (raw, json)
Hash identifier:          8tKg7LLskrfm+8iVzzwsp7URmvcDRoh5kG9/qQEZ+jo=
Subject key identifier:   92:36:27:BD:E0:CA:9A:EA:54:A6:9A:CD:0B:D9:0C:07:0A:1E:58:89
Certificate issuer:       /CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
Certificate serial:       6AC06DC868393F51550ADBF1EFE1C90408FE0F3B
Authority key identifier: 3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
Signing time:             Wed 29 Nov 2023 13:03:41 +0000
ROA not before:           Wed 29 Nov 2023 12:58:41 +0000
ROA not after:            Wed 27 Nov 2024 13:03:41 +0000
asID:                     267567
IP address blocks:        45.70.100.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c0:6d:c8:68:39:3f:51:55:0a:db:f1:ef:e1:c9:04:08:fe:0f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
        Validity
            Not Before: Nov 29 12:58:41 2023 GMT
            Not After : Nov 27 13:03:41 2024 GMT
        Subject: CN=923627BDE0CA9AEA54A69ACD0BD90C070A1E5889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:ec:33:5f:ce:0c:74:ba:32:0e:73:92:4d:
                    5d:c1:de:89:b7:ff:69:b6:d2:b6:67:4e:ab:04:ff:
                    f6:d2:7d:21:0c:67:ef:bd:30:09:19:87:3f:e2:47:
                    53:eb:63:dd:e3:6d:06:53:58:48:6c:76:10:75:8d:
                    e9:9a:74:93:19:30:0c:9c:e7:46:be:0d:52:89:ce:
                    ef:11:ce:42:40:d0:1b:21:1d:52:a6:6a:26:00:bf:
                    6c:1c:cc:83:1e:6a:6b:dc:92:12:01:12:c7:15:d7:
                    f9:64:20:36:30:72:4b:5a:fe:23:48:4e:f6:82:52:
                    3c:41:fb:2d:2d:79:42:16:23:19:e3:e3:65:37:3a:
                    b2:97:65:aa:1c:bd:86:c4:ea:e6:f1:b4:e2:4e:0b:
                    51:b8:ab:06:b6:20:9b:29:7c:0c:2e:ac:1f:a5:61:
                    6d:68:83:f6:89:a5:38:28:33:8a:82:b8:fc:90:d9:
                    f3:ca:f3:7f:e3:c2:8f:1b:e5:4c:75:e5:d5:37:74:
                    1c:90:d7:20:b2:06:d6:8a:ee:8c:45:0d:37:4e:39:
                    70:4d:3f:0e:f2:08:62:d2:b8:0d:25:ac:48:6d:9e:
                    01:8b:c0:31:96:18:9c:54:35:87:17:ae:da:08:34:
                    e8:67:6d:97:13:9f:7b:9c:f9:78:11:7e:8c:6e:2a:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:36:27:BD:E0:CA:9A:EA:54:A6:9A:CD:0B:D9:0C:07:0A:1E:58:89
            X509v3 Authority Key Identifier:
                keyid:3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:af:f6:de:94:67:28:68:6c:19:c6:e8:19:55:c2:a3:4b:4c:
         c3:ef:06:16:c6:c3:64:8d:45:18:46:a0:21:1d:e5:30:79:71:
         d7:72:99:75:2a:77:63:8c:d2:71:5d:03:ea:3e:de:f8:b6:66:
         a3:0a:00:d7:68:78:35:01:85:70:11:14:94:7d:98:7e:c7:58:
         25:10:7e:0d:27:88:c2:56:53:3a:35:e7:65:13:bc:89:4c:ac:
         98:67:9b:6f:7d:61:28:cf:40:a5:ed:c6:a6:84:5b:35:20:5a:
         b0:a3:a1:7a:ec:47:8b:07:e5:79:62:b4:ef:83:5b:6f:19:be:
         65:f5:69:ef:ca:1b:72:cf:f5:cf:44:55:08:c7:ae:05:c9:ea:
         2f:01:d3:19:b2:a6:af:3f:b2:b8:ac:85:e7:af:b7:3b:81:47:
         ed:a2:26:b0:33:41:11:94:c3:7e:c9:e5:1e:fe:f3:3a:62:7c:
         12:84:2e:35:cd:63:87:15:36:b5:fb:6b:7e:30:34:71:91:3f:
         3e:95:44:d9:20:22:10:34:6c:02:bd:07:63:78:f6:b3:af:41:
         99:71:70:d3:c1:da:a7:b9:23:83:d7:5b:98:0a:98:fd:4b:94:
         8b:eb:d4:dc:53:9a:b3:68:2a:f0:6e:0b:16:26:6d:e0:ca:d8:
         aa:00:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org