Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e37302e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          cPX/e06kUwqdAHnoA4ZNCA7XPffmWeaaUGICIVqkqQk=
Subject key identifier:   A8:22:DB:3C:0D:8D:61:0F:D9:28:7C:54:60:F5:A6:64:22:89:01:46
Certificate issuer:       /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial:       13348CD6BCF388201F206E3044A5E5CF06B558C1
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa
Signing time:             Wed 20 Mar 2024 19:26:22 +0000
ROA not before:           Wed 20 Mar 2024 19:21:22 +0000
ROA not after:            Wed 19 Mar 2025 19:26:22 +0000
asID:                     267363
IP address blocks:        45.234.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:34:8c:d6:bc:f3:88:20:1f:20:6e:30:44:a5:e5:cf:06:b5:58:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
        Validity
            Not Before: Mar 20 19:21:22 2024 GMT
            Not After : Mar 19 19:26:22 2025 GMT
        Subject: CN=A822DB3C0D8D610FD9287C5460F5A66422890146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:39:7d:0e:c5:01:95:13:4b:6c:2f:0d:1c:
                    6e:d2:9d:e6:71:ff:3c:52:a1:12:1e:60:a5:40:b6:
                    9c:de:9c:d6:39:89:f4:1c:11:b6:3f:7f:b2:82:b4:
                    55:7e:a6:20:db:b3:7f:09:d4:35:26:4f:d3:19:40:
                    26:c6:31:e8:36:4e:50:d1:c6:10:d9:ba:9f:df:41:
                    22:7a:84:b6:ad:20:6d:a1:34:07:a5:3b:4f:ab:69:
                    87:34:f3:ba:ac:23:e0:05:b2:e0:ee:aa:fc:f7:cc:
                    23:0e:d3:2c:c5:6b:0d:a5:ec:bb:d6:72:45:96:f0:
                    d4:9a:ea:44:dd:6a:9c:f1:5d:63:f3:16:19:06:bb:
                    2d:a0:58:2c:99:73:5d:5d:ce:b7:66:a0:2f:b8:2e:
                    05:93:97:89:c9:93:52:f8:84:40:d3:65:58:f8:a0:
                    4c:c7:04:86:62:3e:53:e5:30:37:b8:99:e3:be:62:
                    11:29:e6:da:77:76:cf:ae:1e:50:23:df:f9:6a:de:
                    23:9c:ef:1d:d3:44:7b:d4:6d:61:c6:ca:84:99:e5:
                    f6:a8:1d:c0:43:18:8e:16:38:a4:b8:34:56:96:4b:
                    0a:97:15:5f:a9:9f:16:a9:1b:1e:3e:00:d1:98:61:
                    f9:01:2b:c8:49:bb:aa:1a:8f:13:8c:ca:f7:1a:7c:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:22:DB:3C:0D:8D:61:0F:D9:28:7C:54:60:F5:A6:64:22:89:01:46
            X509v3 Authority Key Identifier:
                keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:f7:9f:a3:8a:1b:2e:44:e4:35:1b:cc:cb:38:51:57:6c:
         7a:7b:56:1f:a2:8f:c7:e1:c3:c2:b3:6c:85:fe:42:e7:38:b1:
         e5:76:56:84:42:ca:2d:62:5f:0c:0a:dd:05:21:26:58:b7:fb:
         30:11:a5:ea:eb:06:d3:ff:6b:5c:a6:bb:cd:cd:0b:f0:8d:e1:
         94:9e:02:a6:8e:17:9f:32:43:43:29:65:13:50:79:87:a0:22:
         f7:4b:c0:c6:90:66:10:af:6e:62:c3:55:b1:e6:3c:4f:55:64:
         86:7c:f6:c3:71:1d:27:20:98:17:ad:5c:60:e4:20:fd:3c:e9:
         b1:6a:47:83:34:51:6e:3a:8e:94:e7:73:6e:c2:3b:af:c8:72:
         9f:10:33:35:65:e5:d2:a1:e4:13:53:8e:35:90:2b:fc:8c:e9:
         b6:36:81:bd:1d:e1:43:d0:d9:85:3d:da:37:7d:c4:8b:33:31:
         39:a4:4b:69:43:9f:98:02:ba:fe:d1:b9:86:a0:ef:0b:44:5f:
         20:b1:df:d0:3a:1e:d7:7d:a8:40:8e:88:9a:ed:9d:c0:65:ec:
         a4:e5:97:b0:e1:6e:03:63:ff:d1:cc:1f:43:39:69:e2:0b:51:
         c9:2f:36:8a:9d:4b:0e:15:6f:cd:3f:f3:64:a3:6d:3d:0c:d6:
         cf:a3:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org