Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35322e302f32322d3234203d3e20323637353739.roa
File:                     34352e37302e35322e302f32322d3234203d3e20323637353739.roa (raw, json)
Hash identifier:          lB6hwAv68k6FSnDYYZsaHDQQWF7H0hLkUl0HNSECvyE=
Subject key identifier:   C8:50:58:B5:A2:78:B8:CB:0C:DC:36:63:AD:32:DE:F8:44:F2:C6:8F
Certificate issuer:       /CN=1C354836A1948F6BB2E0BA22D666FE7C87E9DC92
Certificate serial:       0DA706884073D445E825561FCE80506FD1F8EADA
Authority key identifier: 1C:35:48:36:A1:94:8F:6B:B2:E0:BA:22:D6:66:FE:7C:87:E9:DC:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35322e302f32322d3234203d3e20323637353739.roa
Signing time:             Wed 15 Jun 2022 15:51:32 +0000
ROA not before:           Wed 15 Jun 2022 15:46:32 +0000
ROA not after:            Wed 14 Jun 2023 15:51:32 +0000
asID:                     267579
IP address blocks:        45.70.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a7:06:88:40:73:d4:45:e8:25:56:1f:ce:80:50:6f:d1:f8:ea:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C354836A1948F6BB2E0BA22D666FE7C87E9DC92
        Validity
            Not Before: Jun 15 15:46:32 2022 GMT
            Not After : Jun 14 15:51:32 2023 GMT
        Subject: CN=3082010A0282010100CDC5B03207029FA25C63BC032E4B61227BCE9E509ED7CB751FAADD66046E695FA63E6284749EB3FFB339C353B20AEEEAE43F607B5C7FFD6A91E411E843B0887D63E363E90ABDC7D4653602DE2D70E73328897C13BD3FF4B6BEC0ED89E2FEE485C8CAAFFB7BECF3687FCBB6255E64977E32F62D8E4ECF113DF45F32CF5E966400FB9D42C5BB84AD7EC9196EBF645576B1186D8510E3C271FE68BF3264F65B42BB308EF07BAFB0AB5D59D78F41ACE8CDFC2322F3B5F7893E73CCCCD1D069E2FFFDFD3CD9B2A97AA3D2B9442EBD46C75592723D530884E55D0D3FBE3E31F589CB0FA6F2F04C1114746B819E80228A5C9BA20BD306A288411609FFA7C32865728ED70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:b0:32:07:02:9f:a2:5c:63:bc:03:2e:4b:
                    61:22:7b:ce:9e:50:9e:d7:cb:75:1f:aa:dd:66:04:
                    6e:69:5f:a6:3e:62:84:74:9e:b3:ff:b3:39:c3:53:
                    b2:0a:ee:ea:e4:3f:60:7b:5c:7f:fd:6a:91:e4:11:
                    e8:43:b0:88:7d:63:e3:63:e9:0a:bd:c7:d4:65:36:
                    02:de:2d:70:e7:33:28:89:7c:13:bd:3f:f4:b6:be:
                    c0:ed:89:e2:fe:e4:85:c8:ca:af:fb:7b:ec:f3:68:
                    7f:cb:b6:25:5e:64:97:7e:32:f6:2d:8e:4e:cf:11:
                    3d:f4:5f:32:cf:5e:96:64:00:fb:9d:42:c5:bb:84:
                    ad:7e:c9:19:6e:bf:64:55:76:b1:18:6d:85:10:e3:
                    c2:71:fe:68:bf:32:64:f6:5b:42:bb:30:8e:f0:7b:
                    af:b0:ab:5d:59:d7:8f:41:ac:e8:cd:fc:23:22:f3:
                    b5:f7:89:3e:73:cc:cc:d1:d0:69:e2:ff:fd:fd:3c:
                    d9:b2:a9:7a:a3:d2:b9:44:2e:bd:46:c7:55:92:72:
                    3d:53:08:84:e5:5d:0d:3f:be:3e:31:f5:89:cb:0f:
                    a6:f2:f0:4c:11:14:74:6b:81:9e:80:22:8a:5c:9b:
                    a2:0b:d3:06:a2:88:41:16:09:ff:a7:c3:28:65:72:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:50:58:B5:A2:78:B8:CB:0C:DC:36:63:AD:32:DE:F8:44:F2:C6:8F
            X509v3 Authority Key Identifier:
                keyid:1C:35:48:36:A1:94:8F:6B:B2:E0:BA:22:D6:66:FE:7C:87:E9:DC:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35322e302f32322d3234203d3e20323637353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:bf:33:bc:b5:2b:4f:83:f2:3d:db:0c:53:e3:9b:18:92:
         9c:7f:eb:d6:3c:d2:bc:e3:7a:4b:43:fe:d8:78:a4:eb:08:62:
         9d:04:45:59:0a:7a:10:f6:99:3c:d2:1f:6e:48:2a:fb:39:34:
         8e:9a:34:de:af:b0:db:9f:0c:6e:a2:f4:3c:6d:13:04:6b:d4:
         b9:4e:cc:cc:c8:7f:e1:c0:d7:3e:0c:ec:1d:1f:c1:62:68:76:
         2d:bb:6d:83:c8:db:9a:02:84:1c:16:69:9b:5e:6d:fe:41:88:
         20:c8:40:1c:54:89:a9:e1:78:1c:cb:26:60:02:b9:e8:ca:d1:
         64:52:80:b3:c7:69:96:72:56:f2:1e:67:14:57:fb:2d:1a:3d:
         5f:1f:49:01:aa:84:12:14:33:01:8a:67:dc:d2:fd:b2:72:ab:
         11:63:d3:da:9f:9f:4b:e7:76:bd:08:fd:f9:be:0b:19:5e:c1:
         b8:e1:60:1d:8d:cb:94:7c:ed:07:fe:7f:28:2b:c7:05:54:ba:
         0f:ef:60:53:42:0b:fa:38:b7:2f:6c:c0:0d:8d:bd:22:f3:20:
         18:83:23:16:7e:53:bf:35:64:02:e4:a3:d4:2f:13:40:e8:33:
         a0:36:19:4a:4a:db:ca:43:c5:74:ba:51:44:fd:70:37:a4:16:
         88:e3:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org