Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3132382e302f32342d3234203d3e20323637353633.roa
File:                     34352e37302e3132382e302f32342d3234203d3e20323637353633.roa (raw, json)
Hash identifier:          f2uDWHQJenj4VduE7NU9jXqqRfEBapFmI7CJpGBILMI=
Subject key identifier:   D1:E5:4E:E5:73:42:9E:11:BB:CA:05:97:C4:F6:DD:2A:D2:3F:0B:D5
Certificate issuer:       /CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
Certificate serial:       4A6E11B76E745F065E5379A4A001510F2BB02592
Authority key identifier: 73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3132382e302f32342d3234203d3e20323637353633.roa
Signing time:             Tue 08 Aug 2023 12:59:54 +0000
ROA not before:           Tue 08 Aug 2023 12:54:54 +0000
ROA not after:            Tue 06 Aug 2024 12:59:54 +0000
asID:                     267563
IP address blocks:        45.70.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6e:11:b7:6e:74:5f:06:5e:53:79:a4:a0:01:51:0f:2b:b0:25:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
        Validity
            Not Before: Aug  8 12:54:54 2023 GMT
            Not After : Aug  6 12:59:54 2024 GMT
        Subject: CN=D1E54EE573429E11BBCA0597C4F6DD2AD23F0BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:bf:45:fc:cb:93:88:01:92:f5:8c:92:4d:
                    95:97:9e:60:73:a8:26:81:23:02:b8:bc:c7:6a:84:
                    e9:9f:d6:bf:90:b7:07:b2:93:98:9e:55:6e:b5:a3:
                    b4:a9:f3:9a:5c:90:16:de:01:ad:aa:ac:7d:f8:c9:
                    e7:bb:89:f8:0b:9c:a6:6d:6f:fa:0d:61:97:da:24:
                    4d:f1:4a:64:24:0a:8e:66:34:0b:58:32:47:37:9f:
                    e3:de:3b:49:cf:5e:05:17:93:0c:91:34:f6:fa:35:
                    5b:18:0c:1b:61:e3:45:bf:69:76:71:a5:24:13:2e:
                    68:4d:a9:87:76:44:26:1d:4c:20:47:b0:f5:ae:ea:
                    2a:79:07:13:cc:d5:9e:cb:6b:17:c8:9c:f9:4d:a2:
                    a0:eb:23:71:30:f5:80:5a:70:77:6f:9a:1e:cb:80:
                    66:72:ec:cf:a9:50:b0:fe:7a:6c:32:41:82:df:be:
                    e2:30:4c:1e:e1:88:ca:fa:39:0d:32:50:33:90:26:
                    c9:05:5b:31:bf:bd:7c:8d:8a:b2:3e:6e:d7:16:bb:
                    51:79:33:c8:81:5e:11:f5:79:b7:30:ed:87:dd:0a:
                    f7:3c:1d:62:2f:dc:6a:af:f4:f3:8b:b3:9d:02:6c:
                    60:aa:22:aa:3d:10:23:82:b0:4a:27:67:da:2a:fd:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E5:4E:E5:73:42:9E:11:BB:CA:05:97:C4:F6:DD:2A:D2:3F:0B:D5
            X509v3 Authority Key Identifier:
                keyid:73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3132382e302f32342d3234203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:92:b2:ac:65:e3:64:98:85:3c:16:41:64:27:a7:fe:2e:
         5b:00:51:5e:bd:09:5b:ca:b1:e1:bc:e5:65:79:17:70:d1:d5:
         ef:bd:26:aa:ac:2e:d9:f4:25:65:ce:ca:5e:57:c8:b6:e4:b3:
         d5:5c:69:b1:a3:98:28:b0:72:87:d6:a0:c4:5f:f4:de:91:59:
         68:c7:27:11:c0:04:d7:d0:26:0a:cf:73:20:35:67:ae:1a:fc:
         73:8f:69:64:c6:c5:78:bd:67:dc:13:5a:af:01:50:10:6e:60:
         08:e9:ed:7d:21:aa:e0:fe:67:5a:16:d8:31:07:44:11:9c:0e:
         38:f5:32:41:28:63:61:f4:be:76:0a:b2:fc:4a:83:5d:e9:0d:
         2f:47:53:00:ee:4e:65:1c:ea:a2:a5:e2:20:1e:f5:28:26:d4:
         16:0b:1d:0e:6e:4e:8d:30:38:80:f3:42:8d:2a:2b:dd:93:1f:
         f7:9c:20:2a:f0:45:b0:3f:a4:80:cb:17:7e:8f:03:04:f2:9c:
         a3:48:86:5a:72:e9:11:3b:03:dc:9d:b9:ca:2a:7b:ed:79:f6:
         9b:8a:3e:a0:0b:e2:f6:14:ee:ef:cf:1c:bd:06:80:7e:4a:70:
         6b:c9:6d:94:98:33:86:16:4a:d2:cb:89:db:74:c0:c1:7d:72:
         dc:51:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org