Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35352e302f32342d3234203d3e20323637353739.roa
File:                     34352e37302e35352e302f32342d3234203d3e20323637353739.roa (raw, json)
Hash identifier:          gfiJVdoT3pCeBAdK778AA4TO2AmgzdA5671cWve0o2U=
Subject key identifier:   9D:8F:BC:35:9F:2C:49:B8:3B:BF:1B:00:0B:78:CC:B1:B2:54:62:42
Certificate issuer:       /CN=CC4F271563875365A5DCAFE4E8BEA976C2DBA756
Certificate serial:       23B142FAFF3D35C90CA22E33274286D5377911B2
Authority key identifier: CC:4F:27:15:63:87:53:65:A5:DC:AF:E4:E8:BE:A9:76:C2:DB:A7:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35352e302f32342d3234203d3e20323637353739.roa
Signing time:             Tue 27 Feb 2024 18:30:41 +0000
ROA not before:           Tue 27 Feb 2024 18:25:41 +0000
ROA not after:            Tue 25 Feb 2025 18:30:41 +0000
asID:                     267579
IP address blocks:        45.70.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b1:42:fa:ff:3d:35:c9:0c:a2:2e:33:27:42:86:d5:37:79:11:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4F271563875365A5DCAFE4E8BEA976C2DBA756
        Validity
            Not Before: Feb 27 18:25:41 2024 GMT
            Not After : Feb 25 18:30:41 2025 GMT
        Subject: CN=9D8FBC359F2C49B83BBF1B000B78CCB1B2546242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1f:49:cf:fe:d0:13:28:74:b4:92:1d:26:f5:
                    0b:f6:1c:d1:04:27:4c:61:05:48:2e:de:5b:d0:06:
                    d9:89:78:75:0b:dc:c9:d1:4c:10:00:53:7b:57:28:
                    ea:99:87:b4:19:7a:91:63:44:e7:b3:24:1a:57:a0:
                    9a:e0:db:ee:bc:1c:c7:fa:3f:4b:23:9f:2e:b5:98:
                    cf:15:f4:03:33:ce:d5:c8:4a:50:de:2b:f9:8b:18:
                    a4:d8:eb:f6:50:92:e9:94:09:eb:5e:f8:ed:92:7f:
                    a0:82:3c:cb:1f:d6:73:70:56:f9:00:fa:93:b5:23:
                    bb:ff:aa:de:22:7f:ad:da:4f:60:e8:82:af:75:06:
                    64:a2:6a:f8:8d:d4:2b:e6:fe:4c:58:74:77:e8:95:
                    35:bf:19:1d:fc:79:0e:d7:2f:38:c1:60:c4:aa:b3:
                    13:a4:d0:d8:cd:99:e3:53:c0:fb:b7:d9:85:52:a8:
                    b4:88:7b:c1:7a:7b:3d:c1:a6:c4:0b:9e:a9:cd:98:
                    4c:78:42:93:54:8b:e2:95:01:37:03:38:8e:51:2a:
                    2c:ce:75:14:e3:fb:2c:d3:3e:2a:74:84:48:4c:a7:
                    79:6e:d2:c2:7f:7d:66:de:5a:42:c6:9b:fb:06:f1:
                    2f:b6:58:f5:cd:51:b0:a6:56:55:5f:2b:3c:13:ed:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8F:BC:35:9F:2C:49:B8:3B:BF:1B:00:0B:78:CC:B1:B2:54:62:42
            X509v3 Authority Key Identifier:
                keyid:CC:4F:27:15:63:87:53:65:A5:DC:AF:E4:E8:BE:A9:76:C2:DB:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/34352e37302e35352e302f32342d3234203d3e20323637353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:58:aa:3c:d3:e9:2f:c4:c0:5f:b8:dd:5a:3c:c9:e0:72:
         53:06:09:1e:50:c6:e4:cc:86:2f:a5:79:24:47:72:d3:98:53:
         e7:b9:e2:13:7a:9e:51:b9:d3:34:74:3e:66:f2:db:15:27:80:
         aa:52:c4:fa:ad:61:d5:da:b7:c0:67:5d:8f:ba:aa:f2:9f:aa:
         14:23:d5:49:4d:ce:4b:01:21:09:62:75:0c:fb:40:b4:68:3e:
         77:c1:59:fb:16:d0:1e:56:a3:65:fd:c0:68:e5:08:23:2f:2b:
         62:64:e3:3e:8e:e9:fa:c4:b0:80:37:6d:35:61:82:08:b1:e3:
         87:9a:3d:a8:c4:ee:14:d7:fd:6a:a9:eb:fb:4d:e6:37:32:4f:
         2c:f2:09:e0:80:0b:1e:fb:c2:24:70:68:4f:62:93:80:b5:07:
         66:30:fb:67:7c:5f:90:ce:74:ad:f8:a3:10:cc:9a:2a:11:a3:
         37:7c:82:bb:4a:b0:9b:8e:45:f6:e0:2c:57:e9:2d:0d:04:d3:
         fe:4f:4d:20:dd:43:8b:a6:6f:45:a9:8c:bf:10:6c:bf:f2:87:
         d8:f7:ee:a6:a8:41:f3:30:cf:03:81:87:eb:32:df:c8:0b:1a:
         87:c4:08:65:08:f9:ce:a7:9a:d2:a0:4e:ff:12:7f:2c:b8:85:
         73:b7:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org