Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134322e302f32332d3234203d3e20323636303732.roa
File:                     34352e342e3134322e302f32332d3234203d3e20323636303732.roa (raw, json)
Hash identifier:          aL9Yu1QXe6UknfRlkrKU8odDK4u4TM0BkXq89dRcBrk=
Subject key identifier:   8B:6A:3E:4F:3E:DE:DB:39:1B:4A:A8:80:E9:BD:8B:01:FF:4D:53:8B
Certificate issuer:       /CN=70F328D45D107EED518BF45C7006F09DC10AF7BD
Certificate serial:       7066296D19CC185D8FC2D03768DFC54DF0EB1328
Authority key identifier: 70:F3:28:D4:5D:10:7E:ED:51:8B:F4:5C:70:06:F0:9D:C1:0A:F7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134322e302f32332d3234203d3e20323636303732.roa
Signing time:             Tue 24 Jan 2023 19:58:06 +0000
ROA not before:           Tue 24 Jan 2023 19:53:06 +0000
ROA not after:            Tue 23 Jan 2024 19:58:06 +0000
asID:                     266072
IP address blocks:        45.4.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:66:29:6d:19:cc:18:5d:8f:c2:d0:37:68:df:c5:4d:f0:eb:13:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F328D45D107EED518BF45C7006F09DC10AF7BD
        Validity
            Not Before: Jan 24 19:53:06 2023 GMT
            Not After : Jan 23 19:58:06 2024 GMT
        Subject: CN=8B6A3E4F3EDEDB391B4AA880E9BD8B01FF4D538B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:47:1b:58:6d:24:79:c2:7d:6a:ef:9c:81:
                    dc:bc:27:77:e2:1e:5f:48:cd:91:22:fb:96:e8:44:
                    e8:33:85:73:99:5e:87:3b:7a:e5:07:ae:bb:96:92:
                    e5:30:e6:77:17:68:e9:6c:4a:0d:ce:16:30:4d:3c:
                    33:0d:60:ac:90:0c:68:7d:05:b8:ff:ec:1d:e4:41:
                    3f:dd:51:e3:f7:6b:72:e9:47:a1:cc:68:5e:37:1f:
                    d3:4e:27:00:41:0e:fc:10:03:d8:f1:2a:33:79:bb:
                    7e:40:94:4a:b3:d4:d6:8c:46:2e:51:d2:66:ce:71:
                    66:2d:9e:20:54:58:10:31:8f:0d:95:5e:4f:7f:0d:
                    2e:9d:31:6f:08:ae:a4:6f:47:3b:5f:06:38:f6:79:
                    6e:d8:8c:c9:63:c4:45:6f:8a:90:34:19:4b:b3:da:
                    52:28:56:c8:a9:07:b1:7a:2b:f0:c0:87:3f:c7:5b:
                    ea:a7:7c:ad:79:1e:1b:54:5a:40:38:a5:a9:c2:ae:
                    ec:93:5e:80:d8:5c:3d:0f:27:70:0f:1b:22:0a:fc:
                    92:7f:9d:2c:79:2c:af:a2:05:55:85:a8:f7:b7:73:
                    96:2e:31:21:28:bf:b4:ad:13:e0:fa:97:36:50:7e:
                    da:44:82:51:aa:f7:3f:a4:b4:e0:8e:e4:cd:fa:25:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6A:3E:4F:3E:DE:DB:39:1B:4A:A8:80:E9:BD:8B:01:FF:4D:53:8B
            X509v3 Authority Key Identifier:
                keyid:70:F3:28:D4:5D:10:7E:ED:51:8B:F4:5C:70:06:F0:9D:C1:0A:F7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134322e302f32332d3234203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:18:97:d2:b7:7e:b4:4a:04:24:c8:20:4a:0d:de:72:ba:a0:
         aa:5e:e7:1c:29:29:2f:14:5f:25:fa:5a:28:4e:a3:da:de:ce:
         d8:f1:61:ca:68:b6:54:9a:2e:94:76:e3:99:3b:6d:28:ab:46:
         d8:7d:98:f0:2a:71:67:ce:c3:2e:4f:f1:1a:57:3b:95:2d:f6:
         96:38:30:71:de:81:28:30:d4:90:a4:e4:37:ee:1b:0f:e4:b3:
         29:9f:04:72:98:09:81:7e:5d:39:7a:48:39:56:63:2b:d4:40:
         ae:4e:0c:8c:f3:76:9c:df:9b:a8:94:77:d0:38:06:a6:b8:b4:
         62:be:e8:d2:bc:3c:b0:29:1c:83:f7:c3:bf:f6:e9:d6:ae:d3:
         58:72:8a:eb:d6:b1:8b:0b:a5:b9:67:20:ec:cf:1b:aa:c8:7e:
         73:9d:65:90:46:31:03:3b:5a:e6:93:4b:c8:61:ad:60:9a:6b:
         f0:46:6b:eb:de:0a:ef:66:4c:95:96:ea:ad:2d:8e:a1:f8:64:
         b9:61:81:41:6e:2e:7d:ad:08:f2:08:e5:59:15:75:28:e6:f1:
         db:b4:0a:ee:38:6a:64:c4:ec:bd:da:ec:53:74:3f:a6:df:f2:
         c0:49:e2:0d:ec:69:52:6f:70:57:7c:f9:85:83:d3:96:7c:5a:
         52:10:ac:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org