Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134322e302f32342d3234203d3e20323636303732.roa
File:                     34352e342e3134322e302f32342d3234203d3e20323636303732.roa (raw, json)
Hash identifier:          ea9JKBdzCxVi14gZYOD1Bwcs30tEQg7Rhg8KcfTuEL4=
Subject key identifier:   CC:FC:48:60:DB:12:76:8A:3B:27:90:6F:91:E1:76:9D:6A:91:BF:82
Certificate issuer:       /CN=70F328D45D107EED518BF45C7006F09DC10AF7BD
Certificate serial:       8B57721C078C885B5CDC82283ECAF83D8A4A6A
Authority key identifier: 70:F3:28:D4:5D:10:7E:ED:51:8B:F4:5C:70:06:F0:9D:C1:0A:F7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134322e302f32342d3234203d3e20323636303732.roa
Signing time:             Thu 26 Jan 2023 18:18:23 +0000
ROA not before:           Thu 26 Jan 2023 18:13:23 +0000
ROA not after:            Thu 25 Jan 2024 18:18:23 +0000
asID:                     266072
IP address blocks:        45.4.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8b:57:72:1c:07:8c:88:5b:5c:dc:82:28:3e:ca:f8:3d:8a:4a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F328D45D107EED518BF45C7006F09DC10AF7BD
        Validity
            Not Before: Jan 26 18:13:23 2023 GMT
            Not After : Jan 25 18:18:23 2024 GMT
        Subject: CN=CCFC4860DB12768A3B27906F91E1769D6A91BF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:cd:e3:97:95:83:fd:74:23:15:02:3a:34:
                    b7:46:aa:17:1a:6d:79:84:63:a2:9f:eb:f2:61:b9:
                    63:7a:ca:76:95:2e:3b:79:57:4c:e6:b2:1e:7d:f9:
                    f8:f7:f4:da:2b:54:fd:1e:13:08:da:cb:95:9e:c3:
                    c8:ac:7e:16:4e:53:91:23:7b:ef:fc:4e:48:4b:f7:
                    35:54:27:71:1f:3b:12:6a:b0:30:61:a8:05:fd:b1:
                    16:dc:28:56:b7:94:be:86:e6:74:de:79:6e:ef:5e:
                    0d:cf:3d:33:d8:4d:d4:eb:09:d2:c9:51:4f:1e:fe:
                    0a:eb:69:8f:00:42:bf:fb:e2:27:24:f0:b1:71:3f:
                    2a:6f:5e:83:ad:29:16:af:4d:c5:9d:c9:78:92:c1:
                    1b:cd:fa:da:a8:cd:e1:36:34:e1:f3:05:9f:bf:fc:
                    a6:16:ee:07:dc:d7:71:ae:62:91:73:10:ba:b6:85:
                    7f:a4:c2:4e:f4:7b:6d:97:2a:03:78:e3:63:e3:96:
                    1f:4b:37:23:23:41:46:31:74:03:a1:bc:92:e8:fd:
                    aa:d8:03:bb:dc:30:2b:40:51:fc:41:ad:b0:36:1d:
                    5b:c9:46:77:01:23:ef:0d:ac:5b:39:3e:7c:4c:78:
                    1c:a8:17:cc:83:51:71:39:5b:9c:bb:07:2d:39:cc:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FC:48:60:DB:12:76:8A:3B:27:90:6F:91:E1:76:9D:6A:91:BF:82
            X509v3 Authority Key Identifier:
                keyid:70:F3:28:D4:5D:10:7E:ED:51:8B:F4:5C:70:06:F0:9D:C1:0A:F7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70F328D45D107EED518BF45C7006F09DC10AF7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134322e302f32342d3234203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:17:b9:5c:d8:fd:53:5d:c1:23:29:c5:95:72:55:8e:97:42:
         85:a7:ec:71:9f:0c:43:5e:29:32:f1:f0:93:8f:40:a9:a5:06:
         bf:40:65:fe:23:ff:9c:42:03:ee:52:aa:49:1e:07:93:43:34:
         93:46:87:ab:53:d5:6f:32:30:9c:cd:09:7a:be:37:06:f3:74:
         5f:bd:1c:a1:d2:8f:b0:b3:5c:fe:6e:22:f6:d4:44:b6:14:2f:
         00:b0:79:40:d0:ce:ad:68:bc:3c:fb:30:23:57:03:27:f0:ef:
         a3:92:73:8f:c6:a8:15:0c:62:96:ae:2c:3b:c8:72:9a:13:0d:
         51:c3:2d:35:bb:b3:fb:7b:e1:6d:a6:16:57:f2:54:3f:27:f3:
         18:99:92:f5:63:2a:7c:62:24:ac:17:ec:04:8d:60:d5:12:7b:
         77:71:a9:c4:40:36:44:b9:34:e6:9a:4b:d8:06:d6:8e:4b:ad:
         db:1e:00:0c:eb:fa:a8:eb:23:6a:a1:b9:61:ea:4b:b5:41:d9:
         6a:79:3f:2d:5c:37:ec:a5:12:e8:1e:82:ef:7a:43:dd:a2:e7:
         53:a1:38:09:8a:27:d2:3a:48:64:20:dc:0e:64:fd:94:1d:52:
         dc:65:51:f3:32:9a:dd:b1:a4:f5:ef:f1:3a:70:77:0e:7e:aa:
         ed:9f:d9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org