Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36342e302f32322d3233203d3e20323637353636.roa
File:                     34352e37302e36342e302f32322d3233203d3e20323637353636.roa (raw, json)
Hash identifier:          NFScRCM9LWDcTL51PENi17DK9O70aUd9+JusxAJ74CE=
Subject key identifier:   99:23:8B:DC:65:FF:B3:64:29:D2:B9:C3:AB:AC:96:16:61:C3:43:00
Certificate issuer:       /CN=9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA
Certificate serial:       446214F24D1C991222851470AB3228BB54123117
Authority key identifier: 9F:75:03:92:A5:47:40:B0:F9:DA:FE:D4:C0:E0:C7:A4:AC:64:3B:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36342e302f32322d3233203d3e20323637353636.roa
Signing time:             Tue 06 Jun 2023 02:51:58 +0000
ROA not before:           Tue 06 Jun 2023 02:46:58 +0000
ROA not after:            Tue 04 Jun 2024 02:51:58 +0000
asID:                     267566
IP address blocks:        45.70.64.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:62:14:f2:4d:1c:99:12:22:85:14:70:ab:32:28:bb:54:12:31:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA
        Validity
            Not Before: Jun  6 02:46:58 2023 GMT
            Not After : Jun  4 02:51:58 2024 GMT
        Subject: CN=99238BDC65FFB36429D2B9C3ABAC961661C34300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:70:a8:a5:9a:9e:88:db:f2:88:bf:33:b2:
                    23:ab:43:80:50:9f:74:6d:73:bb:85:5e:f2:e1:ab:
                    b9:e8:8d:6a:5e:b8:8d:39:41:74:57:da:ad:4a:b1:
                    95:12:0c:d9:07:4a:54:9e:fa:bb:d4:d7:77:84:03:
                    ee:46:bb:76:d5:d4:85:4f:f1:a2:3f:2a:7f:f3:e0:
                    4b:54:28:53:a5:c9:c1:47:3d:c5:ef:9b:5e:f8:8c:
                    24:02:3c:23:47:16:4c:f6:8a:19:be:42:c9:a8:93:
                    df:96:87:04:f6:b4:56:e5:de:33:08:06:4f:72:43:
                    25:a1:b0:f1:81:7a:c7:04:94:55:44:72:52:f9:ce:
                    4a:72:5f:3d:14:d4:9b:cc:3d:40:6f:0a:08:cf:d0:
                    5d:dd:d4:e0:9a:87:99:0f:49:9a:80:f6:2a:b3:9b:
                    95:63:37:cd:43:31:0f:2e:7e:b1:0b:86:c3:be:ad:
                    86:a0:10:39:1d:06:bc:36:f9:9b:c4:ad:47:5e:6e:
                    ea:11:50:bc:21:19:29:8a:fd:57:62:4c:af:05:96:
                    9d:2d:40:21:22:a5:18:e5:f6:b8:d5:66:bf:11:72:
                    fd:ad:ee:b4:44:34:14:97:c3:16:45:7e:0f:70:83:
                    d6:f8:b5:43:1a:7b:94:0b:91:57:9b:c7:6e:5e:e6:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:8B:DC:65:FF:B3:64:29:D2:B9:C3:AB:AC:96:16:61:C3:43:00
            X509v3 Authority Key Identifier:
                keyid:9F:75:03:92:A5:47:40:B0:F9:DA:FE:D4:C0:E0:C7:A4:AC:64:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36342e302f32322d3233203d3e20323637353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:9c:c1:46:ca:cf:4e:80:af:a7:2f:f4:ac:bc:8c:7e:89:
         28:d5:d3:c2:c4:6e:a2:e4:43:a6:b7:32:88:3a:ec:03:48:08:
         1f:bf:dd:0a:bc:a7:8e:df:89:53:52:dd:7e:03:b9:95:70:84:
         0b:67:fd:43:8a:93:81:25:fc:3f:1e:0c:42:2c:86:8f:8d:4c:
         64:68:f4:9e:05:fd:db:c9:b4:9e:17:eb:af:79:79:ae:81:9c:
         08:d0:72:37:18:b8:a4:4b:23:79:ee:02:c6:64:7e:3c:fa:5f:
         aa:97:f0:ee:fb:94:6f:07:48:ec:8d:25:cc:18:2f:f4:36:88:
         f1:a0:a5:2d:d0:0b:8b:aa:42:fc:2f:69:bc:29:ce:2e:0d:d5:
         7a:64:ba:42:35:49:0f:a2:61:77:6b:39:74:fd:57:62:5d:f3:
         dd:45:c1:5d:fc:f0:cb:bb:f8:ac:29:9f:7a:72:55:7f:2d:e1:
         e7:7d:2d:f7:b5:79:49:22:2a:e1:fd:b4:c2:09:0e:4c:a2:3c:
         8a:05:50:dc:38:d8:02:e8:98:aa:49:06:d2:5e:4b:7f:b8:9d:
         a0:ba:d5:7e:9e:9a:d3:2e:e4:fc:90:56:c7:d4:ae:dc:36:60:
         66:4b:65:07:a0:06:3a:1d:17:7d:95:47:9e:7a:63:2e:d0:d5:
         96:26:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org