Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32342d3234203d3e20323637353933.roa
File:                     34352e37302e38342e302f32342d3234203d3e20323637353933.roa (raw, json)
Hash identifier:          XJz0FiZzyOwdGlMLoUlgO+OsGwzhvuUo1sId1iViNbU=
Subject key identifier:   2C:50:94:B9:72:F2:70:15:99:88:AB:73:2C:CE:6F:3B:84:0C:A7:09
Certificate issuer:       /CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Certificate serial:       329493C82AD889E8B9C2BB311F62432B9529FEAC
Authority key identifier: 2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32342d3234203d3e20323637353933.roa
Signing time:             Mon 09 Jan 2023 17:13:42 +0000
ROA not before:           Mon 09 Jan 2023 17:08:42 +0000
ROA not after:            Mon 08 Jan 2024 17:13:42 +0000
asID:                     267593
IP address blocks:        45.70.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:94:93:c8:2a:d8:89:e8:b9:c2:bb:31:1f:62:43:2b:95:29:fe:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
        Validity
            Not Before: Jan  9 17:08:42 2023 GMT
            Not After : Jan  8 17:13:42 2024 GMT
        Subject: CN=2C5094B972F270159988AB732CCE6F3B840CA709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:50:e2:1e:2c:32:62:9b:94:fe:ea:a1:97:
                    73:cf:78:58:c2:b8:6d:11:be:05:64:0c:67:6c:63:
                    40:f5:ad:f6:86:8c:7b:8a:d3:c0:57:42:94:8c:5a:
                    e7:f7:c3:3c:55:30:66:fc:43:b8:b2:5f:ab:fa:2c:
                    aa:f8:18:97:6c:ab:19:14:ac:02:c9:70:15:95:7b:
                    94:2f:01:fd:1d:25:1c:9e:89:27:65:41:ac:4b:f2:
                    93:61:d1:7a:5a:1d:a9:3f:98:18:26:1d:71:9a:ba:
                    e8:fd:b4:b8:ac:cf:2f:40:54:f5:fa:db:21:69:a0:
                    63:e9:52:88:62:09:9c:7d:7c:4e:bc:59:be:91:00:
                    4c:3a:cb:fa:bd:43:fc:12:53:5a:21:cf:55:2c:7e:
                    40:6d:42:81:8c:e3:42:33:d4:6f:d3:b2:74:53:e7:
                    28:60:09:ab:96:d1:31:ac:7c:f8:ea:d2:c3:63:64:
                    a5:f6:1d:18:32:b4:7a:ca:85:d5:29:2e:b1:02:1f:
                    d8:37:c5:5c:9b:f3:23:6e:fd:b5:e2:9c:df:3b:5b:
                    be:f3:bb:3a:7e:b7:ba:99:8a:09:cf:31:80:7d:43:
                    b2:34:bd:ba:82:e5:9f:f8:96:d6:18:96:bb:80:0b:
                    80:77:6c:5d:00:3a:b5:66:d9:2e:1c:68:54:f8:b9:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:94:B9:72:F2:70:15:99:88:AB:73:2C:CE:6F:3B:84:0C:A7:09
            X509v3 Authority Key Identifier:
                keyid:2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32342d3234203d3e20323637353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:79:76:49:a9:7b:6f:c5:93:ef:74:21:f6:bc:77:e7:f5:
         ec:8f:b5:05:1d:a5:44:3b:3d:ef:03:37:d8:8d:30:80:b3:59:
         59:c2:75:d6:5c:8b:4b:a7:6e:29:6e:82:5d:06:aa:4b:b1:17:
         62:0e:e8:7a:4d:6d:64:99:c2:a2:26:0b:b5:72:8c:ca:37:54:
         6d:ba:2a:a3:36:6d:8c:bf:bc:56:10:4e:f8:97:78:ce:47:7e:
         e6:f5:5c:f4:f7:4b:c6:cc:69:a3:d9:cf:49:91:e4:64:aa:f2:
         fd:8a:de:be:54:4b:d4:35:1b:fa:d5:bd:e9:eb:7c:b6:3b:08:
         96:5e:aa:fa:ae:08:52:21:3c:89:3e:13:b1:9b:b4:fb:ab:6d:
         88:34:cd:d5:16:aa:06:db:d4:3e:a9:b0:dd:34:1a:5f:58:cc:
         0f:ef:a6:d7:82:36:de:a9:d9:98:b8:14:2a:2d:63:a6:18:25:
         a1:22:05:f8:d8:be:b9:79:fc:60:8e:db:72:20:28:0e:70:70:
         09:67:fe:9f:fe:f2:ea:35:c3:2b:79:7e:7b:24:96:d2:88:73:
         aa:db:00:51:a5:e8:29:39:3f:a8:03:45:36:86:c8:a2:56:90:
         a8:c4:13:9e:ef:c5:e2:4d:54:cb:d5:27:4a:cd:87:36:4d:87:
         63:5d:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org