Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134312e302f32342d3234203d3e20323636303732.roa
File:                     34352e342e3134312e302f32342d3234203d3e20323636303732.roa (raw, json)
Hash identifier:          +5DYD6XDBXO7UYONqi8jzg5zercq8L8WPDBycvU8UHQ=
Subject key identifier:   5B:A5:EE:83:B5:0A:6D:9B:39:84:DB:90:9C:F0:01:5F:39:2A:B4:49
Certificate issuer:       /CN=70F328D45D107EED518BF45C7006F09DC10AF7BD
Certificate serial:       53373A0A1481D352625DD18594325400FB8275F0
Authority key identifier: 70:F3:28:D4:5D:10:7E:ED:51:8B:F4:5C:70:06:F0:9D:C1:0A:F7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134312e302f32342d3234203d3e20323636303732.roa
Signing time:             Thu 26 Jan 2023 18:19:48 +0000
ROA not before:           Thu 26 Jan 2023 18:14:48 +0000
ROA not after:            Thu 25 Jan 2024 18:19:48 +0000
asID:                     266072
IP address blocks:        45.4.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:37:3a:0a:14:81:d3:52:62:5d:d1:85:94:32:54:00:fb:82:75:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F328D45D107EED518BF45C7006F09DC10AF7BD
        Validity
            Not Before: Jan 26 18:14:48 2023 GMT
            Not After : Jan 25 18:19:48 2024 GMT
        Subject: CN=5BA5EE83B50A6D9B3984DB909CF0015F392AB449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:62:c1:48:8b:75:a7:db:8b:3f:12:35:12:
                    7f:f1:25:d0:5d:09:3d:e5:ad:0c:83:2b:d3:45:b8:
                    0b:b5:da:3c:eb:d6:76:51:f7:8e:25:3e:1d:9b:62:
                    68:32:dd:ed:ae:f2:34:33:c7:60:3f:ad:46:9a:bd:
                    10:05:5f:89:10:d8:d6:2e:9f:ac:61:01:a1:c8:ae:
                    8d:ad:08:ad:3f:98:6f:a4:26:6d:58:c5:e2:be:27:
                    f7:80:c0:76:d2:52:e3:79:4e:52:89:4e:76:99:7b:
                    a2:ed:2c:db:31:9d:d1:d3:48:8d:00:e7:77:39:79:
                    cc:1f:cb:f3:b1:0b:86:8c:75:3a:41:cb:b4:9e:71:
                    79:dd:5b:88:d5:e6:ec:02:f9:a2:93:f6:0e:0c:e1:
                    ce:03:f9:22:2a:0d:98:d2:a3:ce:33:e3:7e:29:66:
                    a8:6c:a2:b6:ef:ba:4d:ad:79:90:0e:ec:0b:83:6f:
                    6f:d5:bb:df:79:ea:28:4d:2a:1e:6b:34:e9:36:db:
                    1f:fc:47:c6:c1:74:cb:48:f9:5a:d1:3e:c9:90:1c:
                    da:d6:de:02:a5:b0:8a:6f:47:8f:ec:03:11:2c:3a:
                    15:c5:ba:7b:14:c5:48:e7:a1:bf:ac:78:51:03:aa:
                    1c:9e:15:73:e6:79:ea:df:3d:ca:3d:0f:8f:5f:f0:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A5:EE:83:B5:0A:6D:9B:39:84:DB:90:9C:F0:01:5F:39:2A:B4:49
            X509v3 Authority Key Identifier:
                keyid:70:F3:28:D4:5D:10:7E:ED:51:8B:F4:5C:70:06:F0:9D:C1:0A:F7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134312e302f32342d3234203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a9:ea:f7:fc:3d:43:37:89:9a:d3:cc:1b:05:60:63:7c:12:
         70:85:a1:bb:b4:16:4d:c4:d2:90:22:5c:d1:01:eb:25:3a:1f:
         55:e1:47:04:74:a3:cf:0a:84:ee:00:99:88:0d:e9:56:f8:5e:
         81:35:30:f0:30:93:e9:2d:e4:2a:10:92:9a:79:26:b8:2b:d1:
         5a:d9:e0:dd:6a:f8:21:6f:ee:d8:8f:50:51:a4:34:27:8e:f6:
         c9:0e:7a:8d:74:fb:5d:23:7a:a9:88:70:cb:d9:68:ea:38:59:
         43:ea:83:d2:06:53:c5:86:c3:09:b7:59:74:52:f6:0d:9d:e6:
         7a:04:03:df:d8:00:d4:26:29:b0:db:d8:50:15:03:6a:0c:a8:
         0a:b4:de:90:ed:c0:63:cf:61:5d:42:72:86:d0:18:45:8f:2b:
         c3:67:91:90:ae:32:a9:f2:20:8b:60:e5:86:bc:4b:6a:81:46:
         19:c5:bf:18:fe:ed:2d:7d:28:ac:04:82:ab:66:59:4c:42:95:
         46:e4:4d:63:d3:49:95:60:36:3b:4e:2a:de:36:ef:50:ad:61:
         71:c7:19:dd:fc:b3:d1:cd:19:41:3a:b8:d8:89:03:fa:6a:5b:
         bc:5b:1e:ba:8e:ae:f6:89:9a:e7:87:9b:00:4c:4e:d7:4c:9e:
         5b:3a:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org