Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134302e302f32332d3234203d3e20323636303732.roa
File:                     34352e342e3134302e302f32332d3234203d3e20323636303732.roa (raw, json)
Hash identifier:          pTfSrBq9w0Lib3Ai+SJZ48x/YzoYG4yHbuccyzJ4O7M=
Subject key identifier:   E0:A7:81:73:DB:BC:08:4F:24:72:85:BE:CB:BA:8A:0B:B1:B1:42:8B
Certificate issuer:       /CN=70F328D45D107EED518BF45C7006F09DC10AF7BD
Certificate serial:       7B3920632B8EBFBEE81C0C9288310B1AFBA64CBE
Authority key identifier: 70:F3:28:D4:5D:10:7E:ED:51:8B:F4:5C:70:06:F0:9D:C1:0A:F7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134302e302f32332d3234203d3e20323636303732.roa
Signing time:             Tue 24 Jan 2023 19:57:58 +0000
ROA not before:           Tue 24 Jan 2023 19:52:58 +0000
ROA not after:            Tue 23 Jan 2024 19:57:58 +0000
asID:                     266072
IP address blocks:        45.4.140.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:39:20:63:2b:8e:bf:be:e8:1c:0c:92:88:31:0b:1a:fb:a6:4c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F328D45D107EED518BF45C7006F09DC10AF7BD
        Validity
            Not Before: Jan 24 19:52:58 2023 GMT
            Not After : Jan 23 19:57:58 2024 GMT
        Subject: CN=E0A78173DBBC084F247285BECBBA8A0BB1B1428B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:93:22:a2:44:74:e1:82:4e:18:57:7f:07:
                    08:8d:46:c3:cb:88:47:09:ee:ac:78:fc:61:24:4a:
                    c8:48:e2:9d:60:fd:89:73:6a:31:35:c2:2f:32:19:
                    3d:45:48:e8:40:ee:b0:69:8a:c3:96:29:65:ff:61:
                    09:d1:36:62:61:81:9d:cb:76:5d:09:80:5a:d4:5b:
                    ba:07:7f:1c:f1:ba:17:1d:5d:20:d7:fa:89:4d:f1:
                    29:8a:0d:3c:2f:66:5d:20:57:29:ef:6d:0c:50:be:
                    c1:fc:98:10:60:da:81:82:9e:5d:2b:ee:e1:fc:e1:
                    0b:f3:3c:34:c7:8a:0a:80:e2:04:cd:ed:9f:50:4e:
                    3a:8f:00:d1:0b:ac:34:04:bf:a8:29:ae:c3:4b:c4:
                    68:4c:ad:dc:db:c9:ee:d6:b5:21:c3:57:9f:06:f4:
                    9e:f0:52:48:7e:9f:e1:d8:fd:57:4c:9f:47:45:28:
                    a0:cb:e8:28:10:72:94:06:46:6e:94:f7:81:44:ec:
                    31:01:4b:89:4f:0c:bb:fd:49:3f:e6:2d:b0:d3:97:
                    15:a3:27:91:d0:38:23:fa:23:bd:12:93:22:e1:0b:
                    0f:ab:2a:c6:c1:39:3f:1d:95:9f:8f:d3:9b:30:2e:
                    51:08:64:8a:70:cd:45:09:39:98:2b:b1:2d:74:ea:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A7:81:73:DB:BC:08:4F:24:72:85:BE:CB:BA:8A:0B:B1:B1:42:8B
            X509v3 Authority Key Identifier:
                keyid:70:F3:28:D4:5D:10:7E:ED:51:8B:F4:5C:70:06:F0:9D:C1:0A:F7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134302e302f32332d3234203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:cb:4a:d0:f0:8e:2b:65:21:5d:ea:d5:cb:0e:cc:28:cf:12:
         1f:af:8d:d1:4a:5d:55:75:02:00:8d:ea:43:f9:b7:5b:bd:a9:
         be:c0:12:9b:e0:1c:ba:e9:4e:97:a5:02:7d:8e:a2:a9:2a:39:
         9e:f2:4f:54:81:40:f7:de:22:74:70:f3:e7:51:54:23:79:ae:
         9d:ec:5e:2b:9e:7b:58:5f:42:2b:91:af:64:31:64:49:7a:b3:
         d4:df:39:37:75:39:72:06:6d:8f:0b:c9:e1:21:5f:e2:b2:77:
         33:0b:7e:43:21:98:9f:b1:7a:b9:a3:e5:5c:99:b6:ac:02:46:
         3f:6b:f5:80:de:49:5b:95:ea:6d:76:c8:7a:d7:79:ba:97:30:
         1d:d5:e6:04:b5:ff:a6:53:7b:4e:d8:21:af:ac:27:24:fc:c7:
         e1:d6:04:6a:19:23:7b:ec:1d:0d:ac:c9:39:af:52:0a:d8:c4:
         19:27:30:d3:9c:e8:98:5f:51:7d:e3:8d:b8:e9:ff:1d:e5:ae:
         15:91:80:72:89:d6:2c:25:2a:88:ef:47:fb:2f:db:6f:6c:89:
         64:3d:0e:c1:d8:93:ae:46:c3:84:38:6d:eb:cb:84:5f:90:e0:
         83:ab:08:87:dd:6a:75:64:25:0a:4c:5d:cf:57:a3:66:8c:2a:
         0b:8d:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org