Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137322e302f32322d3232203d3e20323638333733.roa
File:                     34352e3233392e3137322e302f32322d3232203d3e20323638333733.roa (raw, json)
Hash identifier:          cj+Em2iSZB/eSiil+F/QnmPXVg52fY7sJnAuiRR2xtk=
Subject key identifier:   FD:5E:EB:FF:BB:45:BD:EB:76:3F:CC:65:03:60:62:2C:89:CA:2F:AF
Certificate issuer:       /CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
Certificate serial:       0435E9B5F3D741680BB1A3C4C0087ACE93C75300
Authority key identifier: 70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137322e302f32322d3232203d3e20323638333733.roa
Signing time:             Thu 22 Feb 2024 13:04:31 +0000
ROA not before:           Thu 22 Feb 2024 12:59:31 +0000
ROA not after:            Thu 20 Feb 2025 13:04:31 +0000
asID:                     268373
IP address blocks:        45.239.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:35:e9:b5:f3:d7:41:68:0b:b1:a3:c4:c0:08:7a:ce:93:c7:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
        Validity
            Not Before: Feb 22 12:59:31 2024 GMT
            Not After : Feb 20 13:04:31 2025 GMT
        Subject: CN=FD5EEBFFBB45BDEB763FCC650360622C89CA2FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:32:91:51:cc:dc:40:db:f1:1f:c9:ff:44:
                    d7:8e:62:a0:78:6d:c5:3b:dd:ce:8c:5f:4b:05:5a:
                    7f:b3:25:65:99:3a:f8:43:14:05:68:5e:33:80:b0:
                    d2:93:18:5c:17:27:c1:21:d4:9a:c2:b4:f8:04:58:
                    bf:e3:5b:e3:da:85:c4:6f:c4:15:7c:9a:61:10:94:
                    14:64:37:5a:40:d2:3b:6e:32:1a:3b:7c:9b:49:fd:
                    41:56:cb:3f:a7:51:da:b6:de:f2:b5:85:8e:63:a3:
                    68:ee:f1:25:a1:f9:85:88:37:f6:09:d3:d9:7c:49:
                    8b:af:32:c5:93:9e:8a:9e:bc:5c:db:03:05:26:84:
                    ef:2e:dd:f8:83:1b:b5:2c:4e:08:fe:33:e9:ab:aa:
                    e5:2e:c9:72:56:05:9c:72:7d:04:20:87:b5:12:90:
                    4c:ab:58:64:6a:e5:73:45:95:ef:c0:ce:0a:e4:5a:
                    5a:cb:17:f3:95:8b:47:b9:34:d7:55:49:30:26:4c:
                    df:f3:37:11:5b:78:bc:72:16:01:02:42:39:5c:d2:
                    f5:07:0d:4c:ec:8a:a5:8b:1a:c4:94:56:f1:2a:8f:
                    f4:b4:11:90:de:ad:a6:2b:83:4f:b2:ea:46:22:18:
                    00:cd:b0:9f:3a:76:8c:20:2b:57:84:aa:74:b2:ec:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5E:EB:FF:BB:45:BD:EB:76:3F:CC:65:03:60:62:2C:89:CA:2F:AF
            X509v3 Authority Key Identifier:
                keyid:70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137322e302f32322d3232203d3e20323638333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e4:73:d0:02:c5:5e:32:47:50:1f:60:06:74:a7:62:7c:e3:ea:
         32:9d:c2:e0:4f:80:de:07:d7:bf:b7:8c:9e:43:f4:2c:cb:ad:
         f0:d8:00:ec:53:62:ae:f1:16:89:7a:db:c7:24:17:83:c4:e5:
         45:4d:e9:f2:1d:4c:a3:07:64:86:74:4a:3c:50:2a:03:c9:1a:
         10:98:c3:a3:02:ec:11:70:20:46:7a:e0:bf:71:1e:1b:be:16:
         a3:35:db:9d:7f:e5:81:09:1b:50:cc:ef:d5:ca:70:84:96:95:
         4b:22:51:9f:7d:61:b6:c8:a4:37:c6:43:ba:f0:6f:7a:80:37:
         f6:9b:d4:f0:79:8f:20:ab:02:06:6e:69:a6:76:38:61:7d:c4:
         c5:6b:07:5f:3f:97:b6:62:88:9e:81:bd:0f:4f:6a:fd:3e:46:
         36:96:b4:0c:d8:03:af:87:be:ec:9f:f4:b7:72:e9:15:db:55:
         b4:cc:b6:7b:d3:90:4d:01:b6:c8:5c:af:09:45:ed:80:5c:aa:
         f8:3a:8f:3a:3d:46:75:f5:26:64:82:a4:bb:27:47:19:c6:67:
         c3:8b:18:dd:fc:43:5e:66:6d:fa:12:b3:54:14:5d:f2:66:12:
         14:f3:f4:6d:d0:c1:93:ab:46:3d:95:bf:5f:35:77:00:63:8e:
         35:72:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org