Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35322e302f32342d3234203d3e20323637353739.roa
File:                     34352e37302e35322e302f32342d3234203d3e20323637353739.roa (raw, json)
Hash identifier:          kmpUCZ30SRwTxr0WNO8ngoE/pKJqfX2CPIG/K2635hM=
Subject key identifier:   90:0A:8E:51:CD:DF:69:8A:E1:0F:30:48:70:93:F5:C4:0F:1B:06:6D
Certificate issuer:       /CN=CC4F271563875365A5DCAFE4E8BEA976C2DBA756
Certificate serial:       37A61F91212D73C1541D4861D87A179369D37988
Authority key identifier: CC:4F:27:15:63:87:53:65:A5:DC:AF:E4:E8:BE:A9:76:C2:DB:A7:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35322e302f32342d3234203d3e20323637353739.roa
Signing time:             Tue 27 Feb 2024 18:30:33 +0000
ROA not before:           Tue 27 Feb 2024 18:25:33 +0000
ROA not after:            Tue 25 Feb 2025 18:30:33 +0000
asID:                     267579
IP address blocks:        45.70.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a6:1f:91:21:2d:73:c1:54:1d:48:61:d8:7a:17:93:69:d3:79:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4F271563875365A5DCAFE4E8BEA976C2DBA756
        Validity
            Not Before: Feb 27 18:25:33 2024 GMT
            Not After : Feb 25 18:30:33 2025 GMT
        Subject: CN=900A8E51CDDF698AE10F30487093F5C40F1B066D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:65:78:30:96:34:2b:bc:ae:5a:c9:54:79:13:
                    77:fe:9d:b9:d4:99:3f:23:b7:3d:33:0b:f7:d1:3a:
                    78:f3:28:60:03:f2:0b:40:a0:54:74:ef:b7:4c:c0:
                    51:cb:59:f0:5d:f8:d4:80:36:98:ec:23:54:d5:52:
                    69:69:08:3a:d1:28:66:da:3f:2a:b8:28:c3:56:81:
                    00:88:50:4d:18:7d:df:e7:1b:8c:d2:d6:69:f7:9a:
                    ce:94:4d:7d:d6:23:1b:d4:71:d2:1a:fa:39:fe:8a:
                    d4:f8:c9:84:0d:d1:16:85:83:49:fc:f7:80:24:94:
                    d7:c2:9d:d1:c5:ff:04:8e:03:f2:1f:45:49:bc:2b:
                    68:bc:67:b8:a3:dd:7a:ce:db:ef:45:76:49:24:7e:
                    3c:69:d0:8f:7c:a7:c1:b4:05:cf:43:8a:cd:e8:30:
                    37:f3:d6:b0:0e:b2:f3:cf:6e:14:11:86:73:d2:fa:
                    32:57:7e:7f:8b:3b:fe:45:f1:a2:4f:e1:59:2c:8f:
                    35:b2:9b:9b:84:9c:6d:e4:0b:64:85:9b:34:fa:1e:
                    c7:45:40:b6:90:cb:40:58:39:21:e1:d5:af:58:f9:
                    7b:36:66:1f:8a:46:de:2f:c7:ff:0d:a1:e3:2e:0c:
                    a5:c4:15:d6:b9:83:7b:b8:27:be:78:d1:e8:c5:26:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0A:8E:51:CD:DF:69:8A:E1:0F:30:48:70:93:F5:C4:0F:1B:06:6D
            X509v3 Authority Key Identifier:
                keyid:CC:4F:27:15:63:87:53:65:A5:DC:AF:E4:E8:BE:A9:76:C2:DB:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35322e302f32342d3234203d3e20323637353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:db:d9:6b:a9:a8:a7:7f:df:b7:ec:dc:1f:f6:9e:41:33:ad:
         af:e2:13:cc:18:d1:42:0d:86:ca:1d:c6:a4:b7:51:5f:ef:93:
         9c:04:a6:fc:fe:af:14:db:fa:23:45:79:9e:98:d3:14:1f:f7:
         83:cf:4a:d7:4e:47:82:7d:b4:e5:63:13:ef:e4:c8:ae:1c:09:
         f2:2f:19:56:f9:ac:a6:55:51:05:6d:6d:40:8d:ac:5b:6d:75:
         b0:81:ff:86:da:d6:88:03:a8:f1:8c:dd:07:b6:e5:17:75:28:
         1d:cd:7b:62:2b:be:d9:4a:bf:50:d1:f1:a5:12:12:37:92:c2:
         f2:5b:51:80:5c:a6:87:68:73:65:79:ab:37:c4:89:50:fa:43:
         b6:13:b8:18:dd:78:cc:15:fd:33:0f:d9:4c:09:10:4d:15:e9:
         fd:3c:91:22:ba:e6:0b:10:30:80:df:bc:dd:02:33:32:e0:69:
         d4:30:a8:40:f5:f0:3a:0c:7b:a6:e5:1d:a9:9c:33:45:e0:76:
         2e:01:13:30:95:bc:25:87:f6:49:ae:43:5b:40:e4:43:5f:e5:
         ad:a4:18:c9:93:eb:bf:1c:0a:32:91:d8:e5:73:d9:58:23:54:
         f6:52:17:43:b0:df:62:b0:8a:81:6a:e0:9d:95:6f:e0:06:4f:
         96:7f:09:62
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUN6YfkSEtc8FUHUhh2HoXk2nTeYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M0RjI3MTU2Mzg3NTM2NUE1RENBRkU0RThCRUE5NzZD
MkRCQTc1NjAeFw0yNDAyMjcxODI1MzNaFw0yNTAyMjUxODMwMzNaMDMxMTAvBgNV
BAMTKDkwMEE4RTUxQ0RERjY5OEFFMTBGMzA0ODcwOTNGNUM0MEYxQjA2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGZXgwljQrvK5ayVR5E3f+nbnU
mT8jtz0zC/fROnjzKGAD8gtAoFR077dMwFHLWfBd+NSANpjsI1TVUmlpCDrRKGba
Pyq4KMNWgQCIUE0Yfd/nG4zS1mn3ms6UTX3WIxvUcdIa+jn+itT4yYQN0RaFg0n8
94AklNfCndHF/wSOA/IfRUm8K2i8Z7ij3XrO2+9Fdkkkfjxp0I98p8G0Bc9Dis3o
MDfz1rAOsvPPbhQRhnPS+jJXfn+LO/5F8aJP4VksjzWym5uEnG3kC2SFmzT6HsdF
QLaQy0BYOSHh1a9Y+Xs2Zh+KRt4vx/8NoeMuDKXEFda5g3u4J7540ejFJodrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkAqOUc3faYrhDzBIcJP1xA8bBm0wHwYDVR0j
BBgwFoAUzE8nFWOHU2Wl3K/k6L6pdsLbp1YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJFTjFNV3IyM202OVIxdGFFMURBTHRLUnN1NjdYMlNrd3dNZTRRQ1l4
Wk4vMC9DQzRGMjcxNTYzODc1MzY1QTVEQ0FGRTRFOEJFQTk3NkMyREJBNzU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NDNEYyNzE1NjM4NzUzNjVB
NURDQUZFNEU4QkVBOTc2QzJEQkE3NTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCRU4xTVdyMjNtNjlSMXRhRTFEQUx0S1JzdTY3WDJTa3d3TWU0UUNZeFpOLzAv
MzQzNTJlMzczMDJlMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM1
MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC1GNDANBgkqhkiG9w0BAQsFAAOCAQEAddvZa6mop3/f
t+zcH/aeQTOtr+ITzBjRQg2Gyh3GpLdRX++TnASm/P6vFNv6I0V5npjTFB/3g89K
105Hgn205WMT7+TIrhwJ8i8ZVvmsplVRBW1tQI2sW211sIH/htrWiAOo8YzdB7bl
F3UoHc17Yiu+2Uq/UNHxpRISN5LC8ltRgFymh2hzZXmrN8SJUPpDthO4GN14zBX9
Mw/ZTAkQTRXp/TyRIrrmCxAwgN+83QIzMuBp1DCoQPXwOgx7puUdqZwzReB2LgET
MJW8JYf2Sa5DW0DkQ1/lraQYyZPrvxwKMpHY5XPZWCNU9lIXQ7DfYrCKgWrgnZVv
4AZPln8JYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org