Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/34352e37302e3232362e302f32332d3233203d3e20323637353930.roa
File:                     34352e37302e3232362e302f32332d3233203d3e20323637353930.roa (raw, json)
Hash identifier:          t2NUzEiKayt7FqPTIxolHBur8wjcRzpP569c/dVCHMQ=
Subject key identifier:   3C:8D:90:7F:AB:A7:F3:AD:E0:6C:B5:BC:E1:64:CD:C6:89:4B:A6:03
Certificate issuer:       /CN=4B073A71EB19E4C125AF4141445C69F0A187A5A2
Certificate serial:       551A98346D1FCE8ABEC2EA1FF24B775A4CBBC279
Authority key identifier: 4B:07:3A:71:EB:19:E4:C1:25:AF:41:41:44:5C:69:F0:A1:87:A5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/34352e37302e3232362e302f32332d3233203d3e20323637353930.roa
Signing time:             Tue 23 Jan 2024 14:29:48 +0000
ROA not before:           Tue 23 Jan 2024 14:24:48 +0000
ROA not after:            Tue 21 Jan 2025 14:29:48 +0000
asID:                     267590
IP address blocks:        45.70.226.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1a:98:34:6d:1f:ce:8a:be:c2:ea:1f:f2:4b:77:5a:4c:bb:c2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B073A71EB19E4C125AF4141445C69F0A187A5A2
        Validity
            Not Before: Jan 23 14:24:48 2024 GMT
            Not After : Jan 21 14:29:48 2025 GMT
        Subject: CN=3C8D907FABA7F3ADE06CB5BCE164CDC6894BA603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:8e:cf:ff:4d:dc:7d:02:5e:95:ea:2a:f4:
                    a0:db:76:f6:39:58:29:6f:ac:2a:0e:67:a2:59:4c:
                    35:15:b0:a7:b0:d9:9b:b5:fa:a3:cf:f0:d5:fb:4b:
                    03:51:cd:9a:ad:5c:56:98:10:4d:b9:1f:4b:f1:1f:
                    5c:92:74:4f:d9:3e:bc:ae:7b:69:14:68:b4:c0:08:
                    12:5c:d4:cf:68:0f:7e:14:6e:a9:70:e0:70:33:dd:
                    85:62:43:88:78:18:99:dd:7a:36:f6:5b:0d:73:9f:
                    3c:fb:c2:d3:98:82:23:a1:c9:88:21:3f:89:e1:f6:
                    84:11:7a:8c:d0:0f:29:e4:fe:db:2c:fc:4b:ca:35:
                    f7:0d:4e:47:2c:f0:e1:87:21:a5:1b:4c:05:55:9a:
                    65:4d:b4:1f:5e:08:b6:04:4d:38:f0:46:32:b8:25:
                    a2:4d:06:a4:e1:b7:a8:ad:96:21:68:30:af:4f:8f:
                    40:30:ed:36:ef:e9:5c:49:69:08:cd:ba:71:36:19:
                    53:3a:7a:1f:98:c6:b1:96:ad:84:d9:4e:e5:33:f1:
                    b5:45:6f:e2:75:bc:10:9b:e6:ad:4b:88:76:db:89:
                    f8:ba:3c:b9:eb:89:89:83:6e:cc:fc:46:a1:0a:ac:
                    82:fb:f0:04:7d:9d:9f:48:c8:7d:83:40:d2:d2:19:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8D:90:7F:AB:A7:F3:AD:E0:6C:B5:BC:E1:64:CD:C6:89:4B:A6:03
            X509v3 Authority Key Identifier:
                keyid:4B:07:3A:71:EB:19:E4:C1:25:AF:41:41:44:5C:69:F0:A1:87:A5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/34352e37302e3232362e302f32332d3233203d3e20323637353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:40:77:02:0e:fe:a1:2f:53:29:7f:d0:9b:a6:82:b1:ad:
         5a:bd:ab:04:e8:8b:3a:a6:eb:26:15:02:67:a4:cc:22:05:94:
         c5:5a:d9:08:1f:9a:20:e8:ff:d9:a8:55:ef:ce:23:d1:a8:f4:
         41:1a:e2:fe:13:43:d5:d5:23:7c:3e:48:dd:bc:ad:a0:c9:a7:
         8b:bf:29:0f:38:85:90:77:ba:cd:66:0b:c6:5b:4f:b0:8b:5c:
         d8:a7:9d:ed:5e:93:51:76:8a:ca:9f:02:12:4a:d1:2b:58:c3:
         c0:bd:8c:0a:2c:e9:f0:86:df:73:9c:44:1e:a6:b4:68:80:bd:
         5b:86:62:f7:b3:b2:3f:a8:cd:28:bb:af:26:c4:b6:57:2f:1e:
         64:a1:70:36:47:c8:dd:17:fc:17:7e:ef:b8:17:07:4f:03:5b:
         e4:73:b3:1a:73:8d:14:69:13:0c:02:de:01:59:0b:27:f0:04:
         ca:7a:af:f0:32:03:f4:e4:23:16:3f:f2:4e:c3:8a:86:0b:79:
         a2:43:fc:02:39:84:f0:df:89:5c:3c:62:47:d2:d1:a4:6a:db:
         f1:0f:45:4a:b3:ff:4d:83:14:bc:5c:fc:52:24:86:77:14:0e:
         6e:03:13:0c:d6:ce:ee:d9:c3:f9:14:4c:a5:a0:90:02:58:12:
         8a:a7:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org