Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7iFqeRMzPefBahXfWnqko5N9Gr5LELXmvi4LTRb2MyhT/0/34352e3137302e38302e302f32322d3234203d3e20323638373139.roa
File:                     34352e3137302e38302e302f32322d3234203d3e20323638373139.roa (raw, json)
Hash identifier:          KbqAI39/JNquNMxIHwJ5dJaGLqx46ItB8J2PifCa2N0=
Subject key identifier:   EB:2D:79:1D:7D:D9:A1:A3:6B:EF:2C:71:9F:1D:59:FE:A9:68:6B:A3
Certificate issuer:       /CN=D270D6EAC728619AE752DA97142E34A504E817AD
Certificate serial:       4B2F5B04F321EFCA75731AA6E5BDE0D62E5B24F3
Authority key identifier: D2:70:D6:EA:C7:28:61:9A:E7:52:DA:97:14:2E:34:A5:04:E8:17:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D270D6EAC728619AE752DA97142E34A504E817AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iFqeRMzPefBahXfWnqko5N9Gr5LELXmvi4LTRb2MyhT/0/34352e3137302e38302e302f32322d3234203d3e20323638373139.roa
Signing time:             Fri 07 Oct 2022 13:42:16 +0000
ROA not before:           Fri 07 Oct 2022 13:37:16 +0000
ROA not after:            Fri 06 Oct 2023 13:42:16 +0000
asID:                     268719
IP address blocks:        45.170.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2f:5b:04:f3:21:ef:ca:75:73:1a:a6:e5:bd:e0:d6:2e:5b:24:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D270D6EAC728619AE752DA97142E34A504E817AD
        Validity
            Not Before: Oct  7 13:37:16 2022 GMT
            Not After : Oct  6 13:42:16 2023 GMT
        Subject: CN=EB2D791D7DD9A1A36BEF2C719F1D59FEA9686BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:cb:8c:01:4a:26:43:25:3d:24:6d:ce:80:
                    be:09:a9:3c:29:2f:fb:a8:8e:ca:b0:63:a7:95:0e:
                    02:b6:b4:10:2f:60:60:59:ea:1b:9d:5e:3f:86:7d:
                    df:70:24:64:b1:8c:da:61:0b:7d:bd:4e:0f:1a:7e:
                    b8:cf:78:12:32:74:a7:85:ee:2c:f1:e9:b1:8d:46:
                    53:c3:4e:ea:7f:bf:68:1b:50:0d:cd:68:45:1b:e1:
                    b4:a6:18:6e:92:e7:62:c0:28:21:0e:ea:d8:b8:53:
                    ea:18:bc:c3:d3:d9:99:0b:87:a7:e2:cd:07:7f:41:
                    71:e6:c6:f8:e4:cd:5d:7e:f8:c8:cc:ed:35:67:73:
                    6c:9f:15:c9:c2:a6:8a:c5:b2:5f:be:7e:00:22:f9:
                    d8:ca:fc:b6:1c:7d:fa:be:fa:4c:5e:6a:db:0d:e6:
                    2a:bd:91:c7:7c:0e:8f:9b:3a:46:d1:87:a8:1f:c3:
                    f8:70:8d:f8:ca:d3:0c:26:c5:1c:3a:da:a1:0c:fb:
                    1c:6a:55:fc:9d:5f:d4:96:97:54:22:4d:a8:74:d5:
                    69:b3:a3:ba:3e:f3:0f:36:52:29:36:5b:be:98:3b:
                    04:a7:ae:f2:62:4b:c6:06:4a:c4:c0:14:de:ed:31:
                    ba:49:3f:23:18:94:09:59:b8:60:e1:87:69:17:f4:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2D:79:1D:7D:D9:A1:A3:6B:EF:2C:71:9F:1D:59:FE:A9:68:6B:A3
            X509v3 Authority Key Identifier:
                keyid:D2:70:D6:EA:C7:28:61:9A:E7:52:DA:97:14:2E:34:A5:04:E8:17:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iFqeRMzPefBahXfWnqko5N9Gr5LELXmvi4LTRb2MyhT/0/D270D6EAC728619AE752DA97142E34A504E817AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D270D6EAC728619AE752DA97142E34A504E817AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iFqeRMzPefBahXfWnqko5N9Gr5LELXmvi4LTRb2MyhT/0/34352e3137302e38302e302f32322d3234203d3e20323638373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:39:2d:a9:f6:8c:3f:01:bc:ea:ee:b9:81:90:51:3d:c3:
         ca:66:56:cb:b3:22:55:9e:74:7e:25:30:1d:8a:06:60:52:f0:
         ad:51:4b:37:98:a4:0d:c4:8b:36:34:f6:0b:4f:76:83:83:2e:
         51:7d:43:91:85:12:10:54:a6:0f:68:fe:94:4a:fa:eb:2f:1f:
         0f:d6:d2:fe:c3:ff:7e:2c:fa:96:f2:60:99:e8:85:88:f6:84:
         00:47:af:6b:d4:2a:b9:05:1a:30:de:f0:ea:c5:de:8f:3b:7a:
         6d:b7:53:7c:e3:28:7f:6d:5f:3d:67:57:21:3a:f7:f5:05:8f:
         80:8e:50:02:36:b6:84:71:a8:9f:dd:2f:71:cc:a8:82:53:58:
         9e:26:27:94:73:67:c8:01:ad:be:03:de:f7:43:a1:bd:48:2f:
         4e:b5:d3:96:50:0c:bf:36:46:4d:fa:81:a2:3f:9e:b3:d0:77:
         8e:42:ed:9b:59:79:e4:9a:84:f7:69:75:77:ba:26:a5:dc:c9:
         ea:2c:ea:b6:4e:ed:08:7c:2e:a5:7f:b1:46:94:65:ef:fa:c4:
         84:70:7e:01:86:08:75:0f:33:3c:98:53:0e:79:b4:6d:d8:96:
         74:75:8e:43:00:39:a9:1d:4e:ec:e2:0f:d9:f3:7f:25:81:f9:
         21:4d:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org