Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32322d3332203d3e203631393337.roa
File:                     34352e37302e3130342e302f32322d3332203d3e203631393337.roa (raw, json)
Hash identifier:          y0gRWqH0SttbARYL9LGZsHBdcAntWngqUL2X1DC0EtQ=
Subject key identifier:   62:71:7D:64:F0:A1:17:59:99:72:50:3A:13:0F:C1:26:4A:2A:0F:C5
Certificate issuer:       /CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
Certificate serial:       6974DFB5DF755876E5E4ECFC92B7F88042C154CD
Authority key identifier: AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32322d3332203d3e203631393337.roa
Signing time:             Thu 18 Jan 2024 00:18:46 +0000
ROA not before:           Thu 18 Jan 2024 00:13:46 +0000
ROA not after:            Thu 16 Jan 2025 00:18:46 +0000
asID:                     61937
IP address blocks:        45.70.104.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:74:df:b5:df:75:58:76:e5:e4:ec:fc:92:b7:f8:80:42:c1:54:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
        Validity
            Not Before: Jan 18 00:13:46 2024 GMT
            Not After : Jan 16 00:18:46 2025 GMT
        Subject: CN=62717D64F0A117599972503A130FC1264A2A0FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:8c:05:65:49:62:63:68:5f:f4:71:26:98:
                    56:ee:2d:87:9c:04:58:94:c6:f0:d8:80:25:55:84:
                    68:af:d5:2d:bf:27:4d:a4:c7:16:43:79:ca:ba:db:
                    d2:92:37:15:06:ef:47:63:dc:fd:fd:26:fc:6d:1c:
                    e9:44:cf:3f:c5:26:3f:8a:45:8f:a1:21:dc:88:18:
                    7c:76:c8:c9:9f:77:d8:d9:f1:df:e5:eb:1c:f2:1c:
                    54:e5:00:be:bf:7e:6b:a3:60:64:de:e1:30:c9:3e:
                    a1:4c:50:90:86:a9:dd:f8:e1:1d:8c:4b:fd:32:ca:
                    b9:1e:82:54:d3:cd:7b:03:e0:b2:fb:18:6b:dd:0a:
                    d2:c5:8c:6c:44:ac:b1:2e:3c:f8:70:69:b4:2b:6f:
                    a2:e0:61:bd:a6:86:82:bf:5e:3e:3e:42:86:29:18:
                    ba:3d:e0:0e:5d:93:b8:cf:56:df:fe:2c:20:6a:4d:
                    ff:95:56:22:5b:df:63:d8:de:c6:4f:db:d5:bf:0c:
                    f6:e5:ad:d1:22:a3:da:45:5e:6d:5b:b4:8e:54:40:
                    d5:e6:33:5b:b8:76:ee:75:00:a4:9d:5b:4f:f2:2c:
                    24:ab:fe:0a:de:c3:97:a6:47:bf:d0:e8:ed:1e:d5:
                    2f:c5:61:21:c3:0b:9c:45:59:35:ed:bf:72:bf:92:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:71:7D:64:F0:A1:17:59:99:72:50:3A:13:0F:C1:26:4A:2A:0F:C5
            X509v3 Authority Key Identifier:
                keyid:AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32322d3332203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:4d:5f:c6:a4:e6:67:99:9b:28:8b:0e:c0:b0:85:f9:af:
         5e:5b:71:6f:05:ad:cf:11:26:53:cc:65:af:14:93:b0:43:15:
         20:66:d0:9d:a9:14:d3:c0:21:39:fa:0b:95:e3:89:26:3b:d4:
         10:55:36:40:40:2d:20:50:3a:15:5b:fa:2c:60:af:3b:4c:27:
         cf:c4:8d:9b:47:10:ff:c3:9b:7e:ea:6c:c6:c8:03:50:3f:a9:
         e8:81:9a:9f:78:9c:98:5c:10:fe:0c:d3:b7:d9:b1:63:6a:21:
         db:51:8b:a6:c6:57:7f:21:4c:c4:d0:d2:37:ee:b3:5d:08:d8:
         b3:8a:10:f0:b6:2d:2c:2d:c8:23:5f:7e:14:a3:b7:85:5e:b3:
         c8:1e:e5:d6:f6:b7:31:87:12:0e:a4:68:8f:1a:e3:bf:51:c3:
         56:01:41:36:14:d7:eb:3f:0d:70:38:c4:df:1c:cf:36:68:46:
         89:4f:f3:47:c4:fc:3b:76:ce:03:d8:ff:0c:41:72:0a:23:66:
         78:55:e6:2f:da:7e:d4:da:67:1f:37:59:6b:86:31:f0:5e:1c:
         29:0c:d3:3a:5b:22:27:4a:36:a2:5c:3e:44:25:cd:e4:d7:bc:
         da:07:58:37:d7:16:f6:c3:05:d3:6c:49:51:a5:5b:ee:15:66:
         70:ab:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org