Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3135312e302f32342d3234203d3e20323637353839.roa
File:                     34352e37302e3135312e302f32342d3234203d3e20323637353839.roa (raw, json)
Hash identifier:          cj8NBnwgA6pxB+MtGpvQSKwQ0MXRHqdt3tsFJKfrJRw=
Subject key identifier:   39:25:B0:89:83:28:9E:3E:20:07:EE:4B:42:AF:A5:6C:80:DE:02:FB
Certificate issuer:       /CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
Certificate serial:       04FDCC0C78AFFA9FF6F3C558E0028100E4D1BE39
Authority key identifier: BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3135312e302f32342d3234203d3e20323637353839.roa
Signing time:             Thu 28 Dec 2023 11:44:36 +0000
ROA not before:           Thu 28 Dec 2023 11:39:36 +0000
ROA not after:            Thu 26 Dec 2024 11:44:36 +0000
asID:                     267589
IP address blocks:        45.70.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fd:cc:0c:78:af:fa:9f:f6:f3:c5:58:e0:02:81:00:e4:d1:be:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
        Validity
            Not Before: Dec 28 11:39:36 2023 GMT
            Not After : Dec 26 11:44:36 2024 GMT
        Subject: CN=3925B08983289E3E2007EE4B42AFA56C80DE02FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:59:b5:7f:07:3a:bd:00:8b:70:fe:02:ef:
                    44:bd:6b:ee:cd:5c:31:43:cd:b7:bd:85:4a:a3:ca:
                    8d:5a:98:6f:b2:db:5c:53:2d:c6:fe:67:f0:c4:13:
                    0b:f1:51:b3:55:7c:7e:e5:19:8e:5a:e1:81:2a:3c:
                    3b:75:41:0c:83:57:da:a3:42:11:38:bb:5e:f2:e2:
                    9d:02:92:1b:62:e0:3c:2a:58:a2:ef:a8:19:f4:36:
                    21:76:ae:fd:14:f2:d9:b3:87:cc:3f:24:1b:9e:54:
                    04:e3:a1:04:13:ab:b1:c2:62:04:17:81:47:12:f2:
                    4a:75:e8:2d:8d:4b:16:4d:3f:48:0a:c9:a9:a3:44:
                    e0:63:de:18:42:6d:39:8e:75:b0:4a:ee:d9:a0:39:
                    e2:d4:ef:66:c3:1c:1e:b7:61:98:99:f9:4c:26:ee:
                    2d:6a:d4:80:5a:8b:7b:f3:90:93:f8:33:81:56:22:
                    19:40:93:ed:04:31:7b:72:51:a9:fe:00:76:43:b9:
                    40:01:9c:11:35:59:44:b9:ed:dd:60:83:84:80:55:
                    40:15:3d:71:79:26:56:ed:39:70:5e:1f:97:7d:ab:
                    f3:9e:bd:bc:6f:b5:de:12:34:6a:95:03:57:3f:70:
                    a0:02:72:f5:b5:54:b6:12:e4:9f:6f:4b:9a:a3:64:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:25:B0:89:83:28:9E:3E:20:07:EE:4B:42:AF:A5:6C:80:DE:02:FB
            X509v3 Authority Key Identifier:
                keyid:BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3135312e302f32342d3234203d3e20323637353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:d0:f2:ff:7d:13:74:f5:34:b4:1c:62:ad:aa:0f:df:b7:e6:
         03:42:ff:0f:b4:b1:8a:78:05:ca:98:a9:ba:60:a5:98:0f:9d:
         f5:fd:9f:d8:e9:0e:7a:0c:71:04:f2:a8:10:35:79:11:43:9d:
         4d:20:ce:4a:dd:b3:ed:d3:1b:ba:9c:5a:90:10:37:fb:9a:75:
         f0:25:65:7f:78:2a:60:65:58:6b:20:de:c6:94:ce:a5:1a:a0:
         c4:19:2d:4d:9c:a4:c1:fe:da:09:5e:ca:69:c1:24:73:1b:88:
         93:e7:d5:c2:8d:67:1e:04:f4:6b:08:bd:7a:e0:8f:39:8e:62:
         9e:cf:45:f6:41:59:f7:ad:4c:bd:75:5d:fd:ac:2c:c9:73:c1:
         39:f9:7c:de:23:64:00:f4:b8:cd:0c:d0:c3:ec:50:21:ed:0e:
         6d:4b:f2:aa:41:7d:b8:a2:d9:46:02:29:73:ad:32:77:5e:3b:
         84:f7:7a:88:6a:49:66:5d:3e:50:2b:26:61:23:9c:ae:54:bd:
         94:36:95:35:3d:cb:41:a7:f7:1b:32:e6:50:82:46:df:0d:90:
         91:4c:f5:92:6b:f1:09:40:d7:5f:9c:bf:8c:3a:dc:dc:a7:d3:
         75:95:74:92:e9:99:2d:76:6f:5d:0c:6c:b2:25:3d:6f:9b:6b:
         ac:d6:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org