Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/34352e37302e3232342e302f32332d3233203d3e20323637353930.roa
File:                     34352e37302e3232342e302f32332d3233203d3e20323637353930.roa (raw, json)
Hash identifier:          FU1NCmtTZJJFk8kXOmnKBy/tvnN3QIvHoPg8N5MEWKU=
Subject key identifier:   CB:B1:FD:A9:78:AD:F7:71:CF:D9:D5:16:D8:01:5C:56:F9:0A:AD:CB
Certificate issuer:       /CN=4B073A71EB19E4C125AF4141445C69F0A187A5A2
Certificate serial:       4CB08A0CC099E275D6CF0261E1C063EE9029E1F3
Authority key identifier: 4B:07:3A:71:EB:19:E4:C1:25:AF:41:41:44:5C:69:F0:A1:87:A5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/34352e37302e3232342e302f32332d3233203d3e20323637353930.roa
Signing time:             Tue 23 Jan 2024 14:29:47 +0000
ROA not before:           Tue 23 Jan 2024 14:24:47 +0000
ROA not after:            Tue 21 Jan 2025 14:29:47 +0000
asID:                     267590
IP address blocks:        45.70.224.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b0:8a:0c:c0:99:e2:75:d6:cf:02:61:e1:c0:63:ee:90:29:e1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B073A71EB19E4C125AF4141445C69F0A187A5A2
        Validity
            Not Before: Jan 23 14:24:47 2024 GMT
            Not After : Jan 21 14:29:47 2025 GMT
        Subject: CN=CBB1FDA978ADF771CFD9D516D8015C56F90AADCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:21:c1:08:40:e0:ed:75:16:1c:f6:4c:aa:
                    ba:8f:f0:3c:80:2a:3b:24:7b:43:7f:16:3d:b7:7c:
                    63:e9:63:a3:90:43:14:b7:43:ad:c1:4a:22:58:57:
                    c0:a0:d8:94:69:44:dd:57:e6:af:e8:09:88:f4:d1:
                    13:e3:e5:1a:9c:cf:cf:d1:eb:2a:28:37:0a:ea:b7:
                    2f:78:f7:67:a1:53:62:48:63:29:fe:4f:1f:1c:cf:
                    b9:ad:60:8e:50:7a:a9:55:0a:51:17:03:25:de:28:
                    cd:a1:e3:90:7d:70:ea:42:5d:e4:5a:62:7d:24:54:
                    ce:e3:a4:fe:29:2e:e3:7b:b3:01:c6:cd:ae:a0:c8:
                    aa:5f:19:a4:4e:07:5e:36:a7:a3:0a:e5:ce:05:f7:
                    52:95:5f:bd:7a:3a:1a:7f:c9:e2:0e:7e:8e:20:9b:
                    13:74:ee:db:5e:e2:9c:23:cd:4d:3d:bf:d6:0a:96:
                    2e:75:f1:fa:d7:1b:96:ac:37:4e:20:6a:d0:68:9c:
                    a9:8a:8e:43:9f:40:17:ff:c9:9f:5f:39:c7:ce:16:
                    07:b2:d9:be:89:9f:27:eb:90:63:68:f1:f2:c7:4e:
                    63:a7:5f:a5:99:4f:1e:24:af:66:9c:42:bb:09:5f:
                    b9:a8:e9:ed:d9:b9:a1:3f:9b:d6:8f:3b:a6:df:0f:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B1:FD:A9:78:AD:F7:71:CF:D9:D5:16:D8:01:5C:56:F9:0A:AD:CB
            X509v3 Authority Key Identifier:
                keyid:4B:07:3A:71:EB:19:E4:C1:25:AF:41:41:44:5C:69:F0:A1:87:A5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/34352e37302e3232342e302f32332d3233203d3e20323637353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:17:12:c7:13:b6:e1:20:b6:da:66:45:84:97:70:38:a0:08:
         45:ed:55:bb:f1:5c:f0:52:c1:ff:80:31:5f:2c:cb:66:e3:63:
         47:ad:4b:d3:ab:54:e1:ad:b4:0c:3e:0b:6d:16:32:75:91:be:
         5c:fe:d3:55:a8:26:00:5c:94:e2:cd:0f:ef:f0:e4:f3:77:d4:
         35:5a:f6:7e:c3:f9:75:48:dd:76:a5:20:16:7f:8f:de:74:60:
         d3:2c:fa:4d:f5:1b:8d:ed:f2:7b:68:f9:bc:21:67:2a:22:b4:
         2d:9b:f8:d3:90:52:0f:92:1a:2e:a7:de:9a:93:46:9b:07:d8:
         75:3e:1f:ea:70:9b:22:fe:48:d7:64:20:21:62:6d:da:f9:0a:
         42:13:44:78:5d:48:77:b2:48:04:42:1a:c6:1b:34:f2:cc:09:
         14:1b:38:cc:b2:90:a1:1d:81:fb:47:47:0c:b4:17:61:cb:40:
         ec:da:59:c1:bc:33:1c:18:64:33:c2:de:48:b3:15:dc:f3:49:
         e8:74:73:40:67:ca:6a:60:3b:56:28:22:72:86:87:6d:b4:5f:
         50:8f:3a:b5:cb:74:a4:1e:f6:48:42:85:9e:56:df:91:6e:8e:
         e5:e3:30:f9:61:35:43:92:50:42:dc:af:d2:da:04:80:2f:79:
         90:6c:03:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org