Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32322d3232203d3e20323637353933.roa
File:                     34352e37302e38342e302f32322d3232203d3e20323637353933.roa (raw, json)
Hash identifier:          SiFueW/ikIr2nw3ku1jubeINVL2m/4W/8LvRSHuKl7I=
Subject key identifier:   05:35:0F:21:AD:F9:D6:81:7D:E0:1A:96:16:5C:2F:FE:25:18:D8:19
Certificate issuer:       /CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Certificate serial:       284469B0D938B3E3D54F69813D8844B3CA09E222
Authority key identifier: 2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32322d3232203d3e20323637353933.roa
Signing time:             Mon 09 Jan 2023 17:13:36 +0000
ROA not before:           Mon 09 Jan 2023 17:08:36 +0000
ROA not after:            Mon 08 Jan 2024 17:13:36 +0000
asID:                     267593
IP address blocks:        45.70.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:44:69:b0:d9:38:b3:e3:d5:4f:69:81:3d:88:44:b3:ca:09:e2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
        Validity
            Not Before: Jan  9 17:08:36 2023 GMT
            Not After : Jan  8 17:13:36 2024 GMT
        Subject: CN=05350F21ADF9D6817DE01A96165C2FFE2518D819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:11:0a:46:96:13:68:99:7a:fb:1a:52:7c:
                    c3:cc:3a:ee:f7:f3:97:a8:ce:f4:18:83:a5:33:83:
                    dc:87:18:ba:d0:df:5a:9e:5e:d0:18:d0:79:d5:22:
                    c0:35:16:5b:71:9f:5b:57:72:8f:3f:04:64:72:0f:
                    f6:b0:48:f5:ef:c5:e1:87:24:65:08:2c:0b:bf:ba:
                    9a:75:a3:fb:b7:78:7f:9c:86:66:c6:6c:d8:4d:cb:
                    ee:62:5f:95:b8:0e:73:55:39:aa:24:7b:fd:8b:6f:
                    a9:5a:4a:be:91:f3:0a:11:92:28:13:b9:5b:a3:f1:
                    1c:68:ae:6d:be:fa:1d:f0:58:36:0f:4e:de:7e:c4:
                    d7:55:a4:62:a3:c9:67:20:db:43:b2:00:8d:1d:33:
                    60:a9:47:9c:2e:1c:70:94:dd:08:7a:39:a9:ed:1a:
                    94:29:bd:ce:ed:46:7d:b2:b0:d9:3f:b2:90:a2:53:
                    c6:0a:3d:a1:e3:4c:7a:94:ac:39:6e:64:89:a4:6c:
                    27:ca:9a:c6:67:3e:d6:cd:45:9f:26:70:06:57:54:
                    1d:b8:1f:70:95:99:a6:de:1a:74:0e:b5:9a:dd:15:
                    d4:06:52:96:ad:30:a2:8b:f4:bf:1b:a3:2b:1b:fe:
                    ed:4d:c9:6e:76:1d:e1:19:96:8b:4c:11:a7:0e:3b:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:35:0F:21:AD:F9:D6:81:7D:E0:1A:96:16:5C:2F:FE:25:18:D8:19
            X509v3 Authority Key Identifier:
                keyid:2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32322d3232203d3e20323637353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:91:99:5a:76:f1:31:ad:38:a5:18:ec:85:65:c6:0c:4c:f8:
         f5:7b:43:4e:04:15:4c:2a:ab:55:a7:de:00:c6:27:cd:06:8c:
         11:12:3e:5d:25:a0:e1:8d:83:7c:1d:df:1e:f7:3e:71:68:f6:
         d9:6f:6f:27:2e:22:5f:b0:b2:b4:c7:73:d6:a0:c2:5d:07:b3:
         ae:ec:aa:f5:2c:ef:8d:17:0e:5a:49:d4:b4:7f:44:dc:73:23:
         40:1a:66:75:f4:4b:b4:2e:d4:df:4d:ac:67:f0:41:f9:02:4b:
         ed:70:e3:1e:4b:35:ad:36:1a:50:3f:d5:cc:da:af:39:35:04:
         6a:f3:8e:2f:14:a2:45:19:a1:f4:da:75:7f:7a:0b:2a:5d:91:
         45:6d:6e:ee:36:11:a7:92:1e:72:30:e3:56:a5:43:a8:24:ea:
         bc:56:4d:b3:3f:0b:e0:66:97:23:ec:8e:dc:4d:b3:c0:df:86:
         3e:85:ee:76:e1:3b:71:fa:7d:3e:5e:78:17:1b:24:05:71:76:
         6a:06:50:a1:d0:86:53:06:ef:a5:4f:ff:96:8e:69:a9:32:69:
         1e:4c:6a:7e:ae:ec:20:8e:2d:05:ac:78:48:ad:58:64:20:5a:
         67:e1:53:06:a4:71:3e:79:9a:61:5a:37:98:db:23:21:68:f2:
         c6:32:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org