Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137332e302f32342d3234203d3e20323638333733.roa
File:                     34352e3233392e3137332e302f32342d3234203d3e20323638333733.roa (raw, json)
Hash identifier:          GJGygJFBsum4msRewpYYoZ7wQSpZ8uenT2SMC7xgLFI=
Subject key identifier:   95:FF:84:7F:C4:56:6E:6A:7D:AF:D4:C3:39:FF:A7:52:E3:27:00:91
Certificate issuer:       /CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
Certificate serial:       0CADD060AE43332B1659AD88ADF7E735E1C0C3C9
Authority key identifier: 70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137332e302f32342d3234203d3e20323638333733.roa
Signing time:             Thu 22 Feb 2024 13:04:31 +0000
ROA not before:           Thu 22 Feb 2024 12:59:31 +0000
ROA not after:            Thu 20 Feb 2025 13:04:31 +0000
asID:                     268373
IP address blocks:        45.239.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ad:d0:60:ae:43:33:2b:16:59:ad:88:ad:f7:e7:35:e1:c0:c3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
        Validity
            Not Before: Feb 22 12:59:31 2024 GMT
            Not After : Feb 20 13:04:31 2025 GMT
        Subject: CN=95FF847FC4566E6A7DAFD4C339FFA752E3270091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:46:c3:9b:a0:5f:8e:cb:0c:d3:4e:b2:b7:
                    2f:11:92:6c:0a:d1:c3:30:5c:90:a8:96:9f:19:96:
                    e7:1e:5e:c0:b6:88:50:73:4b:9f:21:15:3d:12:b2:
                    70:ea:8b:34:b3:a6:0e:81:7f:8c:32:84:1c:9b:90:
                    f3:13:5a:4b:15:43:b8:bf:47:19:31:05:b2:70:8d:
                    7d:47:ac:0f:2a:b6:8d:ec:83:bc:f0:07:6e:f1:f5:
                    ba:65:de:ec:7b:29:5a:b3:93:30:7a:2d:a7:40:c1:
                    f6:db:86:04:12:76:c3:6c:a6:2f:b0:93:ab:74:65:
                    25:4f:76:d3:6b:fc:ca:52:cd:0f:88:62:a7:6b:06:
                    9c:ba:44:c4:a8:ef:2d:c4:68:ba:74:ac:e5:e9:67:
                    6b:c8:a0:b7:be:5b:1d:45:8c:b4:cf:d1:0c:5f:ac:
                    67:f4:5b:36:d5:a0:4a:55:8e:36:c6:db:ac:c2:df:
                    66:2d:04:ac:73:6b:e8:30:81:7b:b1:cf:0a:0a:41:
                    11:31:1b:30:51:64:f8:6f:f3:70:ac:b1:35:8e:d1:
                    33:55:6b:16:60:0c:6e:67:3b:56:86:1d:39:8b:a3:
                    f3:0d:da:e7:1e:ac:81:29:aa:6f:07:68:fe:b3:61:
                    64:7b:f8:b4:d4:af:c6:91:ae:00:12:76:3e:c7:52:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:84:7F:C4:56:6E:6A:7D:AF:D4:C3:39:FF:A7:52:E3:27:00:91
            X509v3 Authority Key Identifier:
                keyid:70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/34352e3233392e3137332e302f32342d3234203d3e20323638333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:73:47:fa:95:4f:d1:80:bb:65:f1:12:83:e6:36:cd:62:5e:
         ba:4f:22:70:ff:32:e4:65:fc:cb:40:1b:19:e4:4f:35:6c:f1:
         a1:a0:9c:9c:40:a0:4c:2c:21:23:90:d2:70:13:93:67:25:02:
         2c:16:2a:b8:9d:25:1d:04:8b:52:e8:e9:05:cc:76:1a:5b:c2:
         cc:19:41:6d:c2:c3:dc:61:9e:d8:c4:d3:44:aa:88:91:43:10:
         e0:de:ea:7c:2b:ce:81:38:98:aa:98:76:6e:12:e5:ac:91:6a:
         c4:7d:72:82:98:70:f9:52:15:7d:dd:8d:96:ca:c6:0a:99:ad:
         b8:b5:d5:13:59:74:a8:98:4a:62:ae:49:c8:01:76:db:93:2d:
         bd:a5:d7:3c:8c:bc:0d:8a:56:7e:47:02:94:c6:96:a8:2e:55:
         a7:85:5f:2e:da:f3:52:d3:1d:b4:16:0f:c7:de:8b:4b:60:e1:
         f3:27:ca:35:6a:c0:33:cf:f7:60:ed:0a:21:dc:fd:c1:08:ad:
         c2:9e:45:b6:97:17:94:8a:1e:a9:60:96:d3:45:fd:9d:f9:de:
         77:c2:2e:03:68:14:1d:8c:86:42:a8:74:5c:ce:9a:ad:68:4b:
         26:d2:23:14:b0:fc:57:2d:a8:af:41:a8:13:5a:65:f9:56:cc:
         cf:d6:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org