Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3132382e302f32322d3232203d3e20323637353633.roa
File:                     34352e37302e3132382e302f32322d3232203d3e20323637353633.roa (raw, json)
Hash identifier:          Nw1GH60rITj5cwZafH222dUQquwVhcNGfIG5dLNVg4w=
Subject key identifier:   6D:D3:F1:B6:C8:65:2E:4A:5E:17:0F:1E:7F:EB:FF:47:FB:B3:A6:C2
Certificate issuer:       /CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
Certificate serial:       469DAEBB7576CE643ADE54922290C9D7C4DF64AD
Authority key identifier: 73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3132382e302f32322d3232203d3e20323637353633.roa
Signing time:             Tue 08 Aug 2023 12:59:56 +0000
ROA not before:           Tue 08 Aug 2023 12:54:56 +0000
ROA not after:            Tue 06 Aug 2024 12:59:56 +0000
asID:                     267563
IP address blocks:        45.70.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9d:ae:bb:75:76:ce:64:3a:de:54:92:22:90:c9:d7:c4:df:64:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
        Validity
            Not Before: Aug  8 12:54:56 2023 GMT
            Not After : Aug  6 12:59:56 2024 GMT
        Subject: CN=6DD3F1B6C8652E4A5E170F1E7FEBFF47FBB3A6C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:3b:61:97:20:89:a7:4c:04:61:99:a0:d9:
                    c5:5c:aa:ac:02:6f:23:67:58:2a:2a:b5:07:70:54:
                    89:e3:58:51:34:51:69:a0:3f:9f:91:e3:ac:30:9a:
                    24:08:4b:68:1f:bf:fa:7c:11:32:31:bc:1f:d8:94:
                    68:5d:b2:5c:a0:98:9e:fa:39:ec:c1:33:a6:b1:90:
                    f0:9f:05:d5:e2:98:de:7a:cf:3b:73:26:f7:b5:2b:
                    3f:c7:a3:fe:0b:c3:d9:41:46:ee:86:58:3f:f5:d5:
                    da:8d:3f:88:76:8b:71:f0:b6:d9:9f:b1:c1:7f:cf:
                    de:cf:02:41:82:eb:86:6d:bb:58:e2:b4:c3:e9:65:
                    c7:e3:65:7a:89:79:f3:ab:7d:a5:f1:03:f0:7e:99:
                    7c:45:0a:c7:be:fd:a2:e4:24:5b:37:ce:0c:a6:54:
                    b1:44:41:70:c2:b8:4c:24:44:09:ff:5c:6f:73:fb:
                    52:3b:53:c9:43:aa:2c:55:cc:5a:77:51:fe:a4:59:
                    69:c0:ff:15:4f:68:81:c9:6a:7d:3e:f1:65:59:2d:
                    2b:ca:32:85:4f:90:59:fd:6a:ed:74:6e:a0:34:e4:
                    ba:6e:0f:56:dd:75:0f:41:e2:33:51:82:21:b4:24:
                    94:00:38:74:f7:44:02:c6:64:3f:b5:76:81:7e:d5:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D3:F1:B6:C8:65:2E:4A:5E:17:0F:1E:7F:EB:FF:47:FB:B3:A6:C2
            X509v3 Authority Key Identifier:
                keyid:73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3132382e302f32322d3232203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:37:bf:65:3b:4a:cc:95:40:cd:2f:77:e2:2f:67:01:b9:
         3c:64:53:5f:0b:f6:78:57:6e:52:47:05:19:64:11:1f:0d:ef:
         f6:b3:af:8d:b4:4b:04:28:e9:a7:e6:fe:1b:b0:ee:dc:94:d6:
         59:85:b6:77:33:13:89:1d:09:fb:ba:a2:85:51:06:d1:88:0d:
         dd:51:28:3e:60:8c:70:5d:71:d1:64:5a:8f:2d:f6:44:51:8e:
         24:f7:8d:c2:7a:db:85:1f:e6:2b:d4:70:89:ef:13:50:6a:d5:
         62:4f:35:fc:45:87:1d:b0:8b:17:b7:76:b7:a9:a6:f2:b9:59:
         93:2e:e8:e3:ec:16:ef:f0:66:c6:c2:e4:f8:ea:6f:e5:a6:9e:
         31:f2:3f:a0:10:df:f3:f5:f2:ea:4a:e5:5b:ac:15:2b:07:c1:
         0f:db:af:ad:1f:7e:1d:83:cb:41:36:c4:17:08:d5:ed:7e:7f:
         b6:21:71:83:11:d9:85:52:2c:96:ff:5f:bb:39:7a:a5:92:e2:
         c4:4d:8b:bb:cf:f9:55:db:4d:08:a8:db:1e:47:ff:fe:d8:81:
         46:49:93:46:8f:dc:60:85:f8:66:92:de:66:27:86:5c:62:4e:
         67:43:1f:7f:f9:32:d7:3d:23:b4:25:2e:b3:11:5b:43:6e:33:
         2f:df:e4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org