Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32332d3233203d3e20323637353933.roa
File:                     34352e37302e38342e302f32332d3233203d3e20323637353933.roa (raw, json)
Hash identifier:          Xrht3PbjNptInDqH9JZPwNDZF5neOxFvkaoQPlfd/mE=
Subject key identifier:   2F:DB:7A:7D:BE:1B:A0:12:5B:B2:B8:71:98:10:C9:3B:5B:22:53:5C
Certificate issuer:       /CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Certificate serial:       61B252882754CCEEC7D1EFF480EF6B2274631DF2
Authority key identifier: 2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32332d3233203d3e20323637353933.roa
Signing time:             Mon 09 Jan 2023 17:13:39 +0000
ROA not before:           Mon 09 Jan 2023 17:08:39 +0000
ROA not after:            Mon 08 Jan 2024 17:13:39 +0000
asID:                     267593
IP address blocks:        45.70.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b2:52:88:27:54:cc:ee:c7:d1:ef:f4:80:ef:6b:22:74:63:1d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
        Validity
            Not Before: Jan  9 17:08:39 2023 GMT
            Not After : Jan  8 17:13:39 2024 GMT
        Subject: CN=2FDB7A7DBE1BA0125BB2B8719810C93B5B22535C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:fa:9c:9a:07:45:fd:b0:a8:02:63:23:ae:
                    71:a5:c1:b2:46:b2:33:87:aa:e9:e9:e0:c9:7a:92:
                    35:57:e0:2a:b7:a6:fa:bb:b5:ac:99:28:7e:a7:8d:
                    c2:d3:30:16:17:69:c2:bc:96:b8:77:ab:f9:b6:21:
                    8a:94:1e:4a:cb:a2:f7:f0:d9:7f:39:e2:a3:9c:94:
                    dc:d9:3e:88:55:c2:c6:da:47:c8:70:64:72:bb:6b:
                    3c:bd:36:44:32:e7:2b:ee:4f:a2:8e:ca:ca:df:6f:
                    ad:c5:a4:15:d8:6e:e7:3c:f3:05:a3:4a:dd:2e:00:
                    1d:a8:45:78:a8:50:33:13:a9:5b:d2:c9:45:79:b1:
                    0e:7e:54:10:7a:d7:99:9e:3b:4c:78:ef:e8:1e:0e:
                    93:5f:80:28:a5:68:6f:ca:47:34:f3:71:61:92:c6:
                    ca:48:a4:9c:f5:dc:e5:38:ec:42:bc:f2:6f:42:df:
                    a8:c3:00:5d:b5:78:4d:0c:12:3d:21:1b:aa:ae:87:
                    a1:a0:74:fd:0f:df:8a:7f:bb:94:57:01:54:c1:00:
                    c3:2b:a9:17:1a:c6:ce:5e:f7:6b:ae:f6:5b:40:1a:
                    1f:7a:e9:60:4d:fa:ca:bc:01:81:fa:d6:47:fb:93:
                    79:a5:0a:12:28:92:a2:3b:03:8d:66:49:f1:db:fc:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DB:7A:7D:BE:1B:A0:12:5B:B2:B8:71:98:10:C9:3B:5B:22:53:5C
            X509v3 Authority Key Identifier:
                keyid:2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32332d3233203d3e20323637353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:00:f7:ec:29:b0:26:8e:b6:ca:f3:a0:d7:86:60:a4:5d:07:
         09:9c:5a:6a:38:cd:05:03:3c:6c:8e:b7:83:9f:40:09:88:ad:
         fc:a2:b4:fc:4b:e9:00:8d:c0:97:56:81:3f:42:75:68:8c:c1:
         71:16:d1:6a:8b:71:bb:45:f3:d5:e6:5c:a0:a9:c1:83:7d:90:
         18:c1:10:18:74:aa:d6:53:f6:cb:9f:c0:d3:ce:9f:49:c3:4e:
         45:83:b9:36:76:fc:51:f7:1a:af:1b:19:8c:33:cb:1c:ab:1d:
         ae:65:43:77:65:a0:c7:f5:ee:f5:ec:c3:73:66:14:13:d6:4d:
         41:0d:46:3a:d8:ff:28:08:50:6b:f8:d8:ac:a4:74:1e:74:28:
         b1:1e:d5:82:2f:3d:dd:99:d3:08:ec:29:9d:e3:24:37:ad:31:
         57:6e:52:c1:be:ec:d9:37:68:f7:bb:e5:09:fd:5b:ed:9a:38:
         bd:22:37:2e:1c:9e:c4:ae:8d:79:bd:aa:e5:e3:e2:56:00:f1:
         4a:00:1b:bc:fe:8e:83:74:9c:3b:b2:45:cb:9a:b4:51:50:49:
         4c:f9:d7:d9:1f:2f:dd:4e:49:f5:d5:1d:6f:5e:8b:87:c3:1a:
         c6:a1:72:1c:6b:5d:e4:73:ce:41:95:a7:61:50:38:f9:e9:ad:
         da:40:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org