Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38362e302f32332d3233203d3e20323637353933.roa
File:                     34352e37302e38362e302f32332d3233203d3e20323637353933.roa (raw, json)
Hash identifier:          I0nVHO2O7t5QOoh4zAbsnfgA6RgK0T0K8WWyW+3W4Gg=
Subject key identifier:   A5:32:C2:9A:90:E4:A9:B9:AF:75:6F:30:24:84:12:28:93:A7:3C:A4
Certificate issuer:       /CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Certificate serial:       7416B960E27115DD99FBEA13FA5419C5650CEA67
Authority key identifier: 2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38362e302f32332d3233203d3e20323637353933.roa
Signing time:             Mon 09 Jan 2023 17:13:48 +0000
ROA not before:           Mon 09 Jan 2023 17:08:48 +0000
ROA not after:            Mon 08 Jan 2024 17:13:48 +0000
asID:                     267593
IP address blocks:        45.70.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:16:b9:60:e2:71:15:dd:99:fb:ea:13:fa:54:19:c5:65:0c:ea:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
        Validity
            Not Before: Jan  9 17:08:48 2023 GMT
            Not After : Jan  8 17:13:48 2024 GMT
        Subject: CN=A532C29A90E4A9B9AF756F302484122893A73CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:7e:2f:5f:84:2c:c7:8a:92:fc:cd:5c:ca:
                    36:64:77:69:5d:f6:82:a6:ad:40:e5:82:07:7a:5a:
                    05:3c:d3:a2:c7:4d:a9:77:73:a1:6f:e3:19:d0:8e:
                    02:74:82:db:c3:fd:63:fd:eb:3c:b7:4d:bc:e2:d7:
                    a1:7f:1c:3e:98:fb:5c:98:33:13:92:0e:1b:d9:55:
                    88:5c:0c:7d:5a:71:ab:48:1d:85:e8:87:ec:c3:c9:
                    c6:64:03:83:e3:14:66:02:7b:48:69:0e:39:00:00:
                    78:e4:1f:f8:a9:77:d8:3b:d8:db:4b:07:0a:52:da:
                    8d:98:94:3e:a1:f3:8f:66:dd:59:9b:32:7b:5b:61:
                    b5:49:03:f3:f9:f6:25:16:32:17:c0:0d:df:4e:71:
                    43:c1:c6:ac:99:75:64:b9:a6:5d:16:48:2c:ef:89:
                    66:7f:5c:8e:04:e5:ad:a1:1c:f2:f9:1c:fe:82:3b:
                    e8:32:dd:86:ca:64:7c:04:b2:cd:bc:bf:00:b5:77:
                    9d:07:32:57:f1:b9:48:f6:15:42:f5:2d:43:06:c0:
                    10:e1:60:bc:30:dd:05:58:18:62:59:d1:18:1d:21:
                    13:de:f3:0f:ce:28:bc:c9:07:a8:bd:a1:56:d4:8c:
                    8a:e4:ca:ea:e3:66:cc:86:80:e2:26:a6:d9:12:d3:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:C2:9A:90:E4:A9:B9:AF:75:6F:30:24:84:12:28:93:A7:3C:A4
            X509v3 Authority Key Identifier:
                keyid:2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38362e302f32332d3233203d3e20323637353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:e0:6c:4f:7c:df:60:7d:cb:36:48:91:62:c2:22:2c:7f:d4:
         fe:f7:99:cd:51:b0:0c:94:a9:4a:f7:13:bd:36:a4:9d:c8:81:
         51:fd:92:37:b5:26:ab:a5:1f:89:1c:e6:cf:7a:8d:df:73:61:
         e4:a5:17:13:be:87:73:85:04:39:30:68:59:13:dd:cd:d5:d4:
         c0:eb:93:1e:c4:59:fe:51:21:e2:a8:17:45:4f:74:05:f7:19:
         3d:6b:a5:34:42:f5:ab:53:60:53:ba:a0:b2:49:1d:2c:2b:9b:
         2c:c0:2c:73:a6:1f:6c:b9:9f:c2:98:8e:24:f3:23:08:aa:8e:
         3e:ac:4f:c4:11:c8:13:dd:a8:6b:13:91:c1:3d:f4:a1:5b:52:
         c8:81:fb:89:53:b4:93:ee:6c:ca:a0:bc:3c:aa:6b:90:bb:57:
         d5:76:f8:a5:48:1b:64:c0:2a:b9:b0:bf:c6:09:00:d6:c3:a6:
         6f:c5:03:32:f2:f0:f8:29:ae:de:6d:fc:48:7b:f1:a1:87:06:
         43:6a:b1:54:b7:09:e3:77:40:42:38:7b:e4:ea:c8:f9:a9:a6:
         1f:3f:2e:07:4c:61:c8:0d:9d:5c:2d:4a:25:2c:0d:16:a0:e7:
         4e:91:f5:df:84:4e:65:51:34:de:c6:44:4e:bb:3a:f4:74:ea:
         41:04:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org