Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
File:                     34352e37302e32382e302f32322d3332203d3e20323637353734.roa (raw, json)
Hash identifier:          uGK6d/JXLOlbHaKpmRSJ+G5PV2eIlc2497AV4axCn6M=
Subject key identifier:   1D:17:7C:6B:CC:DF:78:89:8F:69:DF:E0:BA:D3:09:DE:73:6E:6E:5B
Certificate issuer:       /CN=2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A
Certificate serial:       56926B09F8EA14CE428E919566CAF223A2D8C927
Authority key identifier: 2F:2C:4C:56:63:EE:B4:C7:2C:B2:B6:12:56:3D:E7:B3:6D:0A:B6:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
Signing time:             Mon 30 Oct 2023 18:58:19 +0000
ROA not before:           Mon 30 Oct 2023 18:53:19 +0000
ROA not after:            Mon 28 Oct 2024 18:58:19 +0000
asID:                     267574
IP address blocks:        45.70.28.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:92:6b:09:f8:ea:14:ce:42:8e:91:95:66:ca:f2:23:a2:d8:c9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A
        Validity
            Not Before: Oct 30 18:53:19 2023 GMT
            Not After : Oct 28 18:58:19 2024 GMT
        Subject: CN=1D177C6BCCDF78898F69DFE0BAD309DE736E6E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:a5:5b:8c:7f:92:78:8a:22:5d:4b:b0:89:
                    7b:be:31:be:f7:e2:06:c5:1e:27:86:1a:f6:cb:aa:
                    b8:f9:55:7f:3c:d4:18:14:87:a0:01:e3:81:14:80:
                    b7:06:a7:92:a5:1d:8f:5f:eb:f6:45:e2:f5:b4:77:
                    04:0d:6f:5a:3f:b0:36:59:6d:22:20:8e:11:37:0b:
                    a5:0e:00:d5:b5:be:da:bf:14:9e:0b:3e:3c:54:61:
                    db:7e:35:75:9e:7e:83:ee:7e:e9:e8:25:38:38:ca:
                    a8:bf:20:25:18:33:70:0e:dd:13:f2:3a:3e:b1:91:
                    45:33:8a:1c:f0:90:2e:4e:da:88:61:96:50:85:a8:
                    5c:72:bd:59:7b:6b:bf:bf:06:39:70:a3:a4:63:14:
                    a0:65:03:a9:b2:82:7b:75:70:5f:74:ff:15:f5:62:
                    f5:1f:73:84:47:2e:bf:ef:c7:dd:76:8c:01:6d:ab:
                    c3:ab:c7:6c:65:34:18:fe:df:40:a5:6c:2c:df:7a:
                    77:38:b4:34:2a:b4:83:ad:1c:30:17:85:84:16:f0:
                    ea:88:fe:6b:51:8a:8f:63:d9:18:b0:69:36:05:85:
                    a4:19:67:68:dd:71:f5:db:9a:03:1f:26:4c:e4:95:
                    17:4b:4d:19:79:27:2b:01:60:43:7f:db:02:21:53:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:17:7C:6B:CC:DF:78:89:8F:69:DF:E0:BA:D3:09:DE:73:6E:6E:5B
            X509v3 Authority Key Identifier:
                keyid:2F:2C:4C:56:63:EE:B4:C7:2C:B2:B6:12:56:3D:E7:B3:6D:0A:B6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/34352e37302e32382e302f32322d3332203d3e20323637353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:53:c4:2f:11:cb:1e:e1:04:57:5d:66:d0:07:75:d2:c4:
         2c:63:d1:0a:e1:69:cf:2d:01:36:42:6e:c1:c0:91:1e:82:9a:
         38:90:0e:7d:e1:e5:a1:0b:4a:78:3d:7e:b0:d0:fb:01:19:de:
         d5:dd:66:a7:2e:a9:a5:74:a7:78:0f:19:4b:3b:15:2f:94:bc:
         f7:bc:21:68:cc:7a:31:a4:fc:05:b6:7b:34:ad:e1:29:ef:9e:
         ec:fb:28:bf:8f:19:c0:95:45:e4:56:a2:e2:3f:8b:fa:96:11:
         21:2d:52:57:83:f2:07:d5:b6:44:31:f7:46:26:91:93:2a:cd:
         a8:0f:3f:1f:3a:51:5e:0f:d7:eb:b5:bc:b0:7c:11:35:1d:0e:
         a1:e7:b5:c8:dc:72:1c:03:59:75:96:d8:0b:7e:96:f2:4d:4c:
         dc:f2:e9:ab:37:4a:99:b6:78:10:50:e5:15:6f:2b:c1:2e:d1:
         7e:2e:a3:00:51:b2:bd:6c:92:92:50:d8:76:37:5f:e7:c0:13:
         83:dd:00:b3:c8:2d:09:fc:5e:fc:20:6b:cf:43:8a:54:36:49:
         c6:d3:5e:2e:7e:df:2b:16:4c:f6:aa:aa:38:82:4e:0f:b2:6f:
         06:a5:4e:47:3d:85:5c:f9:ac:c6:98:fa:1d:31:92:4c:94:48:
         9a:72:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org