Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3133312e302f32342d3234203d3e20323637353633.roa
File:                     34352e37302e3133312e302f32342d3234203d3e20323637353633.roa (raw, json)
Hash identifier:          +SK1QvmpiwWHt6f39Gh2QpwPrpv5i2nO74j5ZBu9vN8=
Subject key identifier:   82:5A:FD:25:00:6E:B6:28:47:27:C2:5D:5B:CF:DB:F7:15:15:B9:95
Certificate issuer:       /CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
Certificate serial:       5B3F143D7C41E78E1FE145E638713BED62E91067
Authority key identifier: 73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3133312e302f32342d3234203d3e20323637353633.roa
Signing time:             Tue 08 Aug 2023 12:59:56 +0000
ROA not before:           Tue 08 Aug 2023 12:54:56 +0000
ROA not after:            Tue 06 Aug 2024 12:59:56 +0000
asID:                     267563
IP address blocks:        45.70.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3f:14:3d:7c:41:e7:8e:1f:e1:45:e6:38:71:3b:ed:62:e9:10:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739F0E02F6964FCCC4767D5C27A0198D6FD1034B
        Validity
            Not Before: Aug  8 12:54:56 2023 GMT
            Not After : Aug  6 12:59:56 2024 GMT
        Subject: CN=825AFD25006EB6284727C25D5BCFDBF71515B995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:36:66:8a:9d:96:99:eb:5d:70:0f:c7:c8:
                    a0:f7:f5:2b:7c:73:43:94:c8:49:ec:f3:08:5b:e9:
                    78:f3:dc:91:91:46:07:00:2c:69:63:0c:64:78:7d:
                    fc:f6:17:e1:db:94:20:e8:1a:29:44:9b:34:f3:a3:
                    f9:29:9f:61:3d:70:69:b3:b1:74:93:c1:5c:a6:1e:
                    8d:70:1c:55:34:a5:90:ff:ff:ef:c5:1e:45:8d:29:
                    0b:c2:b9:c4:e0:86:44:bf:39:b7:6b:f2:b3:71:d9:
                    a5:46:3b:b5:df:64:02:b2:38:1b:d9:cd:28:9b:a8:
                    ab:40:43:15:45:58:03:a1:fa:ef:d0:20:10:cf:36:
                    61:2e:3c:f4:01:35:b2:74:cd:43:11:2c:f4:7b:62:
                    7a:cd:ca:cd:e9:95:46:51:32:b5:e3:51:1e:4e:42:
                    c1:51:b8:e5:7f:56:8e:5f:4b:d8:f2:7d:80:47:78:
                    4d:8d:c3:b2:09:9f:0b:89:10:30:49:94:00:f6:72:
                    df:03:7e:b7:54:b6:dd:96:44:8d:e4:59:44:e5:4b:
                    e0:a8:95:16:a2:08:46:39:04:a7:b6:1c:fd:71:45:
                    6f:5a:b7:a1:c9:4e:0a:0b:bb:6b:21:e4:99:77:05:
                    76:0b:51:e3:bd:1d:6c:1b:c2:ea:23:83:9e:84:98:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5A:FD:25:00:6E:B6:28:47:27:C2:5D:5B:CF:DB:F7:15:15:B9:95
            X509v3 Authority Key Identifier:
                keyid:73:9F:0E:02:F6:96:4F:CC:C4:76:7D:5C:27:A0:19:8D:6F:D1:03:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739F0E02F6964FCCC4767D5C27A0198D6FD1034B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/34352e37302e3133312e302f32342d3234203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:51:3d:5a:ab:76:9a:60:54:ec:18:d6:43:d6:6f:41:37:1d:
         87:2d:d6:ea:6b:6e:17:d1:f1:66:86:6b:89:2f:06:47:e2:55:
         76:ab:7c:c9:e9:d8:7e:20:52:8e:77:a0:b7:bb:24:0b:e8:09:
         f7:a5:59:03:35:19:47:7f:2c:84:f1:2c:27:5d:1d:bb:36:fe:
         49:5a:40:c6:21:03:36:73:87:0a:2a:64:0a:5c:d4:c4:b3:7d:
         ea:91:9a:bf:e7:23:95:54:a0:18:da:b5:9a:d4:07:fe:7a:61:
         11:15:3e:6f:0c:db:3b:dd:cb:22:26:3c:7b:3b:b9:bf:f2:8b:
         56:9a:d7:bf:d2:ee:02:17:99:b9:30:13:8b:0d:78:76:86:40:
         f7:86:e9:92:ae:95:f1:a1:65:43:7c:f6:54:9b:ac:25:f6:58:
         d5:21:44:2c:85:e0:f7:c4:64:95:75:65:90:ca:ce:cf:91:87:
         a4:40:3d:68:2e:2b:54:5d:97:d2:42:a1:99:cc:57:6a:08:bb:
         3e:08:8b:4d:4b:99:ad:bf:09:4e:69:51:80:9b:34:5f:62:bc:
         73:44:ba:6d:3a:d0:6f:a3:73:d3:76:9a:62:28:f0:af:5a:c9:
         b8:da:a8:4d:0e:83:21:0f:35:1a:6f:01:a6:65:61:8e:33:bd:
         04:67:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org