Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e37302e36302e302f32322d3234203d3e20323637353532.roa
File:                     34352e37302e36302e302f32322d3234203d3e20323637353532.roa (raw, json)
Hash identifier:          8ZdmcZnHHZLDOl/IhBKs34Uy8JpCQ6X2of7q9PhAxuM=
Subject key identifier:   57:FA:8F:0C:D3:43:4F:3E:5D:44:37:C6:BA:B3:F3:A2:23:B7:C7:13
Certificate issuer:       /CN=7617BBE87B9B35DD5DF338D496453252933052CA
Certificate serial:       65EEB1CB40315B644842581659A96EF03A8AF210
Authority key identifier: 76:17:BB:E8:7B:9B:35:DD:5D:F3:38:D4:96:45:32:52:93:30:52:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7617BBE87B9B35DD5DF338D496453252933052CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e37302e36302e302f32322d3234203d3e20323637353532.roa
Signing time:             Mon 11 Mar 2024 21:07:01 +0000
ROA not before:           Mon 11 Mar 2024 21:02:01 +0000
ROA not after:            Mon 10 Mar 2025 21:07:01 +0000
asID:                     267552
IP address blocks:        45.70.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ee:b1:cb:40:31:5b:64:48:42:58:16:59:a9:6e:f0:3a:8a:f2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7617BBE87B9B35DD5DF338D496453252933052CA
        Validity
            Not Before: Mar 11 21:02:01 2024 GMT
            Not After : Mar 10 21:07:01 2025 GMT
        Subject: CN=57FA8F0CD3434F3E5D4437C6BAB3F3A223B7C713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:85:cd:e5:06:a7:b0:c1:4f:99:71:4f:a5:
                    41:32:8e:c7:81:39:1d:8c:74:5f:5b:b2:5f:6a:21:
                    69:70:95:fc:b9:9c:16:fc:c4:65:ae:08:34:a2:e6:
                    13:8a:de:58:aa:9d:b1:16:22:47:be:f2:23:38:44:
                    99:1c:d2:43:ea:62:d6:3e:47:dc:80:7b:dc:f7:b1:
                    88:14:2b:16:2e:ca:2f:03:c2:f6:21:a8:78:7c:7c:
                    93:a8:51:29:ff:e3:7d:de:38:a9:7a:42:8f:f9:43:
                    99:61:24:fe:49:a6:de:07:b7:27:ac:de:4f:19:23:
                    f3:c5:78:92:15:17:c8:2f:c6:a0:52:0c:9a:73:07:
                    6d:33:e3:5e:1f:5d:c8:2b:29:d2:b1:f2:2a:cd:dc:
                    be:b7:57:b3:cc:fd:0e:61:eb:d3:e2:40:83:a1:b4:
                    8d:cb:97:e9:bc:9c:a6:f7:86:36:d3:06:c6:93:49:
                    51:a2:f0:f2:e8:06:44:26:db:5d:f2:3e:5e:3b:59:
                    af:68:a2:7d:f0:56:fb:de:3c:94:d9:7c:67:ee:b1:
                    de:ce:04:01:56:1f:1e:86:cd:7f:95:92:63:ca:d3:
                    f9:36:36:58:16:64:0c:ad:90:9b:b2:1b:5c:04:a6:
                    63:5f:aa:6d:6a:0f:b0:1c:98:85:a3:1d:2a:e6:45:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FA:8F:0C:D3:43:4F:3E:5D:44:37:C6:BA:B3:F3:A2:23:B7:C7:13
            X509v3 Authority Key Identifier:
                keyid:76:17:BB:E8:7B:9B:35:DD:5D:F3:38:D4:96:45:32:52:93:30:52:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/7617BBE87B9B35DD5DF338D496453252933052CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7617BBE87B9B35DD5DF338D496453252933052CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e37302e36302e302f32322d3234203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:06:9d:53:a8:ff:b6:cc:9c:27:fd:81:20:a1:ad:07:1f:ec:
         39:f7:55:15:e9:3b:22:6e:18:15:17:f0:32:38:50:78:22:33:
         cf:20:53:be:d1:f4:90:93:34:f1:8a:20:66:bc:12:fb:47:07:
         d7:31:49:17:c8:ba:93:cd:0f:c8:67:1f:15:11:f1:97:ca:2c:
         7d:5c:46:e6:bf:66:fc:04:00:41:31:86:a5:e9:ea:fa:24:51:
         cc:61:ee:d3:ed:4d:38:3c:93:cb:31:f4:5c:15:e7:c5:1e:7d:
         67:da:7b:60:c7:71:9b:b7:a9:5d:e2:ed:19:2a:77:98:47:6e:
         56:aa:a3:3a:f9:cc:47:d5:e9:6c:e9:c2:03:e1:ed:e2:19:30:
         cf:6c:5c:54:cf:e9:5f:e8:36:aa:79:e7:15:29:ed:cb:b7:e5:
         b9:bf:0e:bf:4c:d7:f1:af:46:a3:cb:36:a4:36:97:38:1d:2a:
         16:82:31:0d:d6:b4:c3:24:2d:b7:66:05:be:0e:9b:6d:0f:76:
         72:76:c1:79:6f:5e:0e:86:15:68:a8:e2:e9:4d:ce:c0:d9:82:
         fc:1d:55:aa:4b:08:91:39:73:3b:8e:82:67:e6:74:f0:b4:e3:
         85:ac:09:f7:f5:97:42:45:3e:45:ce:d0:bf:cd:53:8e:3c:27:
         25:0f:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org