Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130392e302f32342d3234203d3e20323636393131.roa
File:                     34352e3232342e3130392e302f32342d3234203d3e20323636393131.roa (raw, json)
Hash identifier:          LMf6BsaTxJYuDSrhx6/xWOhrv9cbLFpmbaqPLKk4ffM=
Subject key identifier:   8C:B0:86:3F:D4:4C:3D:AC:1C:0A:84:17:14:05:13:7D:D9:33:C5:B1
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       7270F247506E9B463D4BD0EE86D1650B2A96ABFE
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130392e302f32342d3234203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:48:04 +0000
ROA not before:           Wed 16 Aug 2023 13:43:04 +0000
ROA not after:            Wed 14 Aug 2024 13:48:04 +0000
asID:                     266911
IP address blocks:        45.224.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:70:f2:47:50:6e:9b:46:3d:4b:d0:ee:86:d1:65:0b:2a:96:ab:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:43:04 2023 GMT
            Not After : Aug 14 13:48:04 2024 GMT
        Subject: CN=8CB0863FD44C3DAC1C0A84171405137DD933C5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:f0:a9:e9:a3:79:90:65:38:1e:0f:cc:7e:
                    73:99:3b:ae:15:6f:67:83:28:50:d9:e5:a8:f3:26:
                    38:19:29:a0:1c:ae:d2:af:e5:2b:0f:e8:07:05:4c:
                    89:95:60:13:9a:36:81:7f:2a:7d:1c:e4:32:69:00:
                    20:51:fc:b4:71:7c:6f:9a:ea:4b:8c:a6:2f:6d:d8:
                    ae:07:ac:b3:0f:89:19:0a:d7:85:29:9f:ed:fc:3d:
                    3b:0a:29:76:fb:9c:f5:51:06:28:d1:eb:ea:57:95:
                    8d:c9:6f:68:1a:99:e1:3e:a9:b1:15:2f:69:b8:80:
                    09:16:4c:5d:82:cb:bf:38:f6:07:e4:aa:cb:bb:c7:
                    71:d2:d7:76:d0:7c:ed:c0:58:37:ae:39:87:7c:89:
                    21:c8:19:67:00:10:c9:4f:82:4e:b0:de:c6:0d:a7:
                    70:a2:2c:cc:4b:35:57:2a:02:e8:08:c4:fb:34:d1:
                    29:45:15:bc:76:c8:77:83:e7:f9:ff:8e:63:dc:5b:
                    0b:c0:27:35:7f:22:d3:33:7a:0a:82:ff:7f:66:60:
                    52:4d:0a:99:28:a9:23:c5:9e:6e:3f:32:bc:38:79:
                    2e:bb:45:69:26:e1:a2:20:22:12:a4:be:61:71:49:
                    b6:d6:fc:d8:c2:65:84:62:35:a1:10:90:e4:ba:3d:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:86:3F:D4:4C:3D:AC:1C:0A:84:17:14:05:13:7D:D9:33:C5:B1
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3130392e302f32342d3234203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:ef:58:16:61:2c:97:ba:4b:a4:be:65:35:31:c4:6c:76:
         e4:a3:1a:3c:ce:bd:45:4b:c4:1c:19:95:85:63:d0:d3:af:c5:
         ab:b1:0f:10:4c:5c:1b:e7:0c:83:26:59:14:56:e4:c7:c7:d1:
         e5:9b:a3:e9:4f:f0:7b:ec:77:28:cd:d5:11:93:2c:4c:ea:64:
         35:a2:ee:1c:fc:cf:8c:78:b5:b1:a1:b9:9e:bc:b9:86:25:31:
         89:16:1f:2d:15:e8:cd:70:98:e3:5f:e5:f6:89:de:8f:9a:e3:
         a4:c8:ef:f7:b8:d3:3d:28:a7:eb:e5:aa:4b:8c:5f:83:31:73:
         2c:ad:e6:88:6e:38:55:e4:7e:3d:a0:de:76:4c:d9:0c:81:e8:
         67:2e:c3:7e:7e:d6:3f:ed:b8:5a:50:e4:df:01:ea:cd:51:06:
         51:e2:ab:d4:d5:97:7b:d6:df:d1:b7:46:77:51:74:f4:03:01:
         e5:00:d7:61:90:e7:53:ce:50:7c:ea:db:d9:f0:c4:4f:fc:8d:
         82:d6:f9:dc:7e:ba:53:11:c9:ae:b8:96:ef:16:ee:06:7d:62:
         81:2d:0b:bd:00:dc:bc:75:d9:fe:37:26:76:bd:28:55:e8:f4:
         57:75:69:b0:0f:29:3f:1d:8b:7f:1e:33:cb:11:07:2d:06:00:
         64:17:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org