Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37302e302f32342d3234203d3e20323637323232.roa
File:                     34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier:          qIJ4kInNkvILdJeQVtfJzmnsF5KW2t6uzXMVNN0WFTQ=
Subject key identifier:   A3:E0:D9:28:01:E1:37:FF:D3:1C:D1:68:CE:0C:46:2B:DF:09:6F:07
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       50B12B5828F75A2B6B8C32F7FCF85F31E866DBCD
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37302e302f32342d3234203d3e20323637323232.roa
Signing time:             Fri 25 Aug 2023 14:53:56 +0000
ROA not before:           Fri 25 Aug 2023 14:48:56 +0000
ROA not after:            Fri 23 Aug 2024 14:53:56 +0000
asID:                     267222
IP address blocks:        45.229.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b1:2b:58:28:f7:5a:2b:6b:8c:32:f7:fc:f8:5f:31:e8:66:db:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 25 14:48:56 2023 GMT
            Not After : Aug 23 14:53:56 2024 GMT
        Subject: CN=A3E0D92801E137FFD31CD168CE0C462BDF096F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:0b:6e:ed:55:a3:3f:0b:e5:34:0f:85:85:
                    a2:03:d2:ec:32:60:77:ab:ce:90:0d:b6:cf:dd:66:
                    81:ab:d7:0c:c0:3f:25:e2:85:e3:41:da:6e:f8:63:
                    64:e3:f5:3e:33:0d:0c:76:b6:63:73:b1:fa:36:0d:
                    34:3c:3f:28:fe:a1:24:73:ad:40:eb:fe:a6:5f:32:
                    dd:8c:63:9f:99:46:b0:0e:0a:fe:16:74:4f:65:bd:
                    94:dd:37:44:4a:a3:7e:e1:16:7f:eb:ea:bb:6d:28:
                    69:ce:f4:eb:6e:e2:74:85:10:0e:42:03:a0:11:84:
                    3c:1b:62:01:a7:1b:b2:c0:e4:74:14:1d:7b:9e:e5:
                    62:17:26:4d:d4:7b:c3:4b:f6:05:a7:30:5c:cb:d0:
                    0f:2d:d1:6b:34:33:ea:0e:2d:3a:1c:72:7f:54:af:
                    92:10:7f:d2:cb:33:ae:73:f4:dd:16:75:0c:4f:da:
                    1c:6a:dd:64:c2:d8:f8:66:67:07:ec:31:23:ef:a6:
                    f3:18:3c:50:fb:cb:c2:d0:44:9c:36:3b:76:31:86:
                    7d:e8:c8:6a:0c:e0:00:23:d3:1e:ff:d7:03:e7:76:
                    c5:8c:26:0f:d4:86:d7:19:25:1d:a4:bd:ca:4e:a9:
                    51:f2:0e:14:9d:70:9b:87:d8:66:63:c5:40:78:db:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:D9:28:01:E1:37:FF:D3:1C:D1:68:CE:0C:46:2B:DF:09:6F:07
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e37302e302f32342d3234203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:70:f1:da:02:37:de:bd:39:4a:46:bf:ee:44:41:f4:6f:8e:
         f8:2d:db:05:4a:2f:16:53:d6:9f:93:43:fb:12:75:8c:82:da:
         7d:e2:a5:57:f1:9e:6e:67:c1:1f:14:c8:38:c9:78:49:1d:e3:
         e3:ed:d3:7d:b4:e8:9f:9c:1f:df:b7:dd:31:31:e9:82:7f:8f:
         cd:b4:23:b9:a4:cc:20:56:0e:83:e8:26:81:c7:68:3e:e5:4c:
         5f:64:11:a2:25:c7:17:53:3f:f8:eb:66:12:27:58:ea:12:f4:
         e3:e1:ac:00:11:0d:7a:e9:48:13:6a:be:eb:ed:e2:b7:0a:2a:
         e8:06:bb:51:73:4c:2c:2b:f5:a3:69:51:f6:03:cb:94:54:fd:
         87:87:f8:c4:70:1c:09:f2:15:32:27:24:3c:7e:db:cc:7b:76:
         a2:9e:0f:ec:6c:5e:a3:68:80:38:ac:93:30:28:9c:5d:a0:55:
         ab:89:37:04:3c:ff:41:7a:08:c9:5e:c8:2e:15:09:38:8b:17:
         fc:78:a6:56:c8:77:14:86:6f:10:50:90:6e:66:40:56:5e:d3:
         25:dd:fa:e5:76:8f:6d:2d:83:f7:ed:3c:a0:77:7f:39:cc:31:
         91:ea:51:12:6f:72:44:2c:c5:09:6b:ed:05:1d:a5:9c:46:45:
         67:d1:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org