Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3134382e302f32322d3234203d3e20323637353839.roa
File:                     34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (raw, json)
Hash identifier:          Mx2VruVIAVzYZcs/ryAzscQJg3Y2GOPdjLL5qH4c0mk=
Subject key identifier:   82:DB:8B:C5:6A:2F:F6:AB:2C:9C:FC:A7:63:02:CC:8D:3A:6B:E4:A1
Certificate issuer:       /CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
Certificate serial:       8826770EC5E62C9F22FE567F9C93DB676F3C11
Authority key identifier: BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3134382e302f32322d3234203d3e20323637353839.roa
Signing time:             Fri 16 Feb 2024 13:49:26 +0000
ROA not before:           Fri 16 Feb 2024 13:44:26 +0000
ROA not after:            Fri 14 Feb 2025 13:49:26 +0000
asID:                     267589
IP address blocks:        45.70.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            88:26:77:0e:c5:e6:2c:9f:22:fe:56:7f:9c:93:db:67:6f:3c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
        Validity
            Not Before: Feb 16 13:44:26 2024 GMT
            Not After : Feb 14 13:49:26 2025 GMT
        Subject: CN=82DB8BC56A2FF6AB2C9CFCA76302CC8D3A6BE4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:1a:43:ba:38:42:ac:01:b5:26:c6:bd:b9:
                    da:a4:96:88:0a:2b:8e:e2:22:31:59:87:51:13:63:
                    90:e9:0f:d0:59:a6:db:ee:79:8f:0b:49:4d:24:4b:
                    6e:f5:56:30:0a:6c:ca:35:31:e9:5e:a5:b0:04:9d:
                    11:3e:ea:95:7b:dd:dc:83:1a:97:9a:f8:de:1d:24:
                    c9:3c:88:57:a7:de:48:49:f6:41:1d:0b:41:fd:9d:
                    b0:b6:c8:a6:37:8c:b9:e6:29:47:e1:67:fc:d1:cf:
                    28:38:7e:cb:d6:bf:ab:8d:67:11:62:24:d8:7f:66:
                    b9:7e:69:b0:a7:69:32:a1:9a:89:9b:8d:7b:2f:35:
                    e0:68:e2:08:3d:f1:89:69:a7:7b:4b:96:9e:40:aa:
                    3a:a2:0a:22:e2:8c:7f:83:9b:34:fc:1d:47:a3:80:
                    19:4b:5e:19:86:e4:92:da:e9:db:8d:aa:f4:bb:b0:
                    16:07:ff:88:70:aa:ec:4c:81:a5:12:28:13:b1:44:
                    91:c3:b9:f8:5e:35:b5:d5:3c:cc:d4:ef:80:b8:c8:
                    b9:17:87:c0:8f:ba:e2:9b:ba:63:2f:09:2f:be:6b:
                    df:a7:0e:42:ed:36:12:2c:89:b0:3d:7c:5f:b3:8c:
                    e9:d1:01:1d:6e:cd:84:6a:af:14:69:a9:a3:80:32:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:8B:C5:6A:2F:F6:AB:2C:9C:FC:A7:63:02:CC:8D:3A:6B:E4:A1
            X509v3 Authority Key Identifier:
                keyid:BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3134382e302f32322d3234203d3e20323637353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:a1:f6:23:52:50:b1:f3:18:f6:a5:48:75:96:97:ab:7d:a8:
         9f:fc:78:e0:c7:0d:e2:da:6e:98:68:db:c6:b5:86:6a:e3:b0:
         8f:8d:5a:82:ae:9a:09:97:1c:34:a4:7b:fc:36:ad:cd:2e:c3:
         ab:45:7a:a9:26:b5:60:92:c8:d6:48:55:d9:65:59:a4:fe:1b:
         93:b1:06:16:38:8e:27:33:7c:61:d6:cb:44:6b:be:33:f7:21:
         14:c7:7e:9b:1d:7c:a0:a4:21:0e:d5:52:bc:ba:0f:08:42:bd:
         79:52:d2:63:d1:54:a1:67:67:52:70:45:ea:7a:7c:f8:19:53:
         5f:33:56:08:51:3a:dd:ea:f6:f8:22:57:85:75:e5:d9:ea:89:
         e7:6c:27:19:0c:2b:e2:36:8b:7a:01:6e:3d:61:0e:a6:c9:3d:
         46:ba:bf:29:57:2f:48:58:42:b6:e8:62:db:49:b8:7b:59:24:
         cc:a5:4a:1e:ca:c7:e0:83:2f:a0:4f:89:f7:76:0d:0a:3c:02:
         0f:d6:30:90:a2:75:ec:d3:82:2c:4f:cc:94:79:30:f3:d3:8d:
         44:a8:57:00:41:59:78:03:5b:f1:2c:b3:33:6e:df:97:e0:20:
         18:07:b8:af:b9:8d:f5:b1:ef:77:c5:df:26:77:10:69:98:a0:
         7a:db:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org