Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/34352e37302e3137322e302f32322d3234203d3e20323637353834.roa
File:                     34352e37302e3137322e302f32322d3234203d3e20323637353834.roa (raw, json)
Hash identifier:          kYr8MJWLTxL4COK1LEJjZYRGFIlAn/8KR+MtPLV5jzQ=
Subject key identifier:   0E:8C:01:D9:10:24:0E:B5:E8:50:DD:15:9F:AB:0D:7E:F2:BC:81:D1
Certificate issuer:       /CN=61E2D2B53D81871EEFCB177DBA0D5F4ED947B790
Certificate serial:       72EB895AF4E2F2E99495805C79025868E349DA88
Authority key identifier: 61:E2:D2:B5:3D:81:87:1E:EF:CB:17:7D:BA:0D:5F:4E:D9:47:B7:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/34352e37302e3137322e302f32322d3234203d3e20323637353834.roa
Signing time:             Tue 22 Aug 2023 15:25:41 +0000
ROA not before:           Tue 22 Aug 2023 15:20:41 +0000
ROA not after:            Tue 20 Aug 2024 15:25:41 +0000
asID:                     267584
IP address blocks:        45.70.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:eb:89:5a:f4:e2:f2:e9:94:95:80:5c:79:02:58:68:e3:49:da:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E2D2B53D81871EEFCB177DBA0D5F4ED947B790
        Validity
            Not Before: Aug 22 15:20:41 2023 GMT
            Not After : Aug 20 15:25:41 2024 GMT
        Subject: CN=0E8C01D910240EB5E850DD159FAB0D7EF2BC81D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:c2:1c:f0:07:0c:3f:13:41:25:80:84:df:
                    ee:04:85:99:cd:b7:3d:e5:a4:fe:91:dc:9c:4e:18:
                    1c:ec:3f:98:c9:4a:16:b0:00:8c:d2:4a:66:0e:16:
                    6f:28:bb:65:73:69:70:36:30:53:0c:de:5c:17:00:
                    4a:b6:b6:e6:7a:34:9e:9e:a5:a4:f8:ad:21:77:91:
                    f1:4d:25:43:eb:a1:d4:32:53:f4:4c:62:c0:3c:83:
                    8f:e6:75:8e:20:8c:aa:4c:cb:e5:1c:15:9c:69:cf:
                    5d:42:bf:f6:99:83:28:97:96:b0:ed:7a:3d:37:96:
                    0e:ba:5e:5b:b4:b8:e9:b8:3d:b6:14:92:1b:11:b9:
                    e7:dc:bb:3c:e3:17:61:f9:9b:d0:ce:0d:b7:4e:22:
                    8a:3f:70:57:4f:f6:26:85:2a:e1:ea:26:71:ec:4a:
                    56:d4:cb:35:11:be:d5:3a:26:df:26:6f:d8:05:a4:
                    65:ce:e7:eb:48:d7:8b:65:88:26:97:b7:ab:e8:9d:
                    88:16:d9:69:fe:bd:d0:99:f4:b9:07:81:96:32:10:
                    b1:a5:2f:c3:02:22:cb:77:48:2b:cd:be:79:b5:2d:
                    dc:7e:a9:aa:21:3b:ef:5d:65:81:cb:cb:10:d9:fe:
                    b2:6e:68:1e:06:a6:33:5c:d2:dc:25:70:e4:11:21:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8C:01:D9:10:24:0E:B5:E8:50:DD:15:9F:AB:0D:7E:F2:BC:81:D1
            X509v3 Authority Key Identifier:
                keyid:61:E2:D2:B5:3D:81:87:1E:EF:CB:17:7D:BA:0D:5F:4E:D9:47:B7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/34352e37302e3137322e302f32322d3234203d3e20323637353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:fe:6d:58:70:53:c2:88:72:f0:ee:60:81:8d:ad:4f:a5:
         e7:94:f3:38:4f:97:3a:d1:14:9e:35:e1:4b:18:39:d2:f3:86:
         b7:bf:d5:26:68:87:82:0a:d9:fe:6d:6d:8f:06:b5:6d:d0:1a:
         e8:23:a6:8c:b9:0e:f5:97:68:34:56:a2:ee:8a:e6:af:64:f3:
         97:fc:e1:e2:33:df:0f:a6:6c:e4:c7:3e:81:e7:5c:c8:b3:6b:
         41:f1:c5:5a:27:59:52:a2:3d:f5:0f:96:96:b1:23:ed:08:9c:
         f1:92:56:d7:a3:c8:f1:c0:f3:61:2f:90:fb:1a:90:ca:e4:9b:
         2d:a1:1d:c0:1d:23:e2:4f:2e:cc:7b:28:12:c6:fd:fd:05:78:
         7c:01:96:22:93:0e:80:b4:26:84:77:01:18:8c:41:9e:79:ae:
         ea:72:c6:2c:83:c6:b2:2a:cf:f2:88:a1:d7:1a:e4:ca:47:22:
         4b:08:6f:ff:23:4c:12:96:25:eb:de:01:69:83:a3:b0:ce:0f:
         19:bd:ba:e0:54:74:1a:dc:84:0c:be:41:e5:03:10:6d:0b:ea:
         47:d5:b8:49:25:ae:97:91:e1:e6:96:8f:d1:d5:81:d1:1e:54:
         9e:15:7e:c8:4a:cf:3b:64:74:f0:82:1c:28:5a:83:97:26:78:
         da:a9:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org