Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3133302e302f32332d3233203d3e20323637353633.roa
File:                     34352e37302e3133302e302f32332d3233203d3e20323637353633.roa (raw, json)
Hash identifier:          r44b+/z0OoTDFCps7UCiGlkvXf1zt+tF01rYdPPE/j0=
Subject key identifier:   7D:44:CB:76:91:B1:8F:F8:EC:AC:4B:FD:5F:7E:9F:1F:8A:8A:ED:C5
Certificate issuer:       /CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
Certificate serial:       402D2B8CA1D6A5AA191A2AFB229728A69F7AA2DE
Authority key identifier: 73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3133302e302f32332d3233203d3e20323637353633.roa
Signing time:             Tue 08 Aug 2023 12:59:56 +0000
ROA not before:           Tue 08 Aug 2023 12:54:56 +0000
ROA not after:            Tue 06 Aug 2024 12:59:56 +0000
asID:                     267563
IP address blocks:        45.70.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2d:2b:8c:a1:d6:a5:aa:19:1a:2a:fb:22:97:28:a6:9f:7a:a2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
        Validity
            Not Before: Aug  8 12:54:56 2023 GMT
            Not After : Aug  6 12:59:56 2024 GMT
        Subject: CN=7D44CB7691B18FF8ECAC4BFD5F7E9F1F8A8AEDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:74:2c:46:c5:64:5e:23:ae:9c:90:27:06:
                    35:cf:18:67:43:59:9c:14:e4:5b:f8:39:a2:0d:cb:
                    ba:ee:a5:f5:63:1c:71:04:b3:1e:48:e4:5a:d2:68:
                    6e:30:fc:03:2e:e9:36:95:c5:c1:4f:25:b9:58:e4:
                    0a:57:fe:56:fb:5c:32:8f:7a:9c:bc:e8:37:8c:46:
                    74:6e:85:dc:47:e0:1c:7e:b1:f6:5a:41:d2:8e:2a:
                    17:55:dd:3b:31:b1:84:d7:f7:e8:27:c3:69:81:9c:
                    9d:03:63:4e:8f:bc:0e:50:0f:7f:6f:cf:65:46:ad:
                    45:99:12:38:2f:8e:55:0f:38:bc:14:cb:1a:a6:7d:
                    57:93:a9:6d:3a:79:81:c0:eb:1c:f1:d5:3a:b9:55:
                    f4:1b:9d:3a:b9:6f:8d:a1:2d:e1:d0:db:af:e9:3a:
                    2e:ce:35:55:52:14:c7:6c:df:88:9d:95:9f:2f:cc:
                    5c:97:fd:48:80:4b:e7:00:1e:14:c2:7f:c7:b6:2e:
                    b4:53:9d:bf:29:2a:82:ae:34:79:73:46:57:ff:f1:
                    67:f9:93:4d:8a:d9:0f:df:99:cb:b6:e4:4e:5a:04:
                    19:a5:1b:85:d5:87:95:ca:76:33:0a:46:31:46:cb:
                    53:fe:c8:2e:81:92:cf:14:d3:6f:f2:9c:48:80:b0:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:44:CB:76:91:B1:8F:F8:EC:AC:4B:FD:5F:7E:9F:1F:8A:8A:ED:C5
            X509v3 Authority Key Identifier:
                keyid:73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3133302e302f32332d3233203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:34:6e:65:f9:a1:50:2d:29:7a:83:70:b9:a4:00:d9:49:64:
         1e:09:8a:8d:d5:68:38:fa:e9:cd:2c:24:94:2c:19:2b:f2:9e:
         b6:47:96:5c:ca:4b:a2:ba:d3:62:d8:21:13:b9:45:8e:c1:68:
         43:19:57:1f:17:f9:94:bc:79:88:f4:cd:66:cf:ad:d6:4a:a8:
         2f:88:67:f8:e0:a7:8d:9a:48:68:54:c9:04:b0:8e:56:96:ed:
         6d:54:04:b6:38:10:c4:51:6d:b7:ba:04:1a:3d:32:1b:97:aa:
         b2:a9:23:05:6a:f8:d5:1b:60:92:84:2c:ba:41:35:8d:0e:e9:
         56:3b:e4:f0:ec:ef:4b:bf:d1:79:4b:85:4b:61:b2:4d:eb:df:
         31:51:2b:8f:25:4f:53:a4:c3:a7:40:71:4a:3f:cf:c0:a5:13:
         f2:b6:a7:5d:b5:0a:64:ce:47:30:d6:ce:f6:52:61:33:cb:2e:
         2d:6a:63:74:e0:56:82:56:46:a9:9d:d0:36:d8:a1:f9:99:4c:
         e2:08:ce:a8:1f:23:1a:79:9f:88:d4:3c:31:59:41:09:16:2f:
         ea:b2:9e:b9:0a:c3:87:38:5e:50:07:5d:63:55:06:07:c8:54:
         4c:a6:a0:87:db:2f:96:29:58:3d:bc:72:d6:5d:b6:3b:24:90:
         ac:bf:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org