Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3234203d3e20323637353835.roa
File:                     34352e37302e3139322e302f32322d3234203d3e20323637353835.roa (raw, json)
Hash identifier:          XK0nzE9J0xl81Hn3Bl+njzr8xBx4X/18tqoWHodKgH8=
Subject key identifier:   73:EF:44:69:F9:A5:2A:EC:16:25:C9:93:3C:2F:54:FF:43:BF:E0:EF
Certificate issuer:       /CN=6ADD0267C0642B87AB75E87C00D2118C10D0B716
Certificate serial:       1E15D049B55C4BB31AB9A296C5AFB464C8157F14
Authority key identifier: 6A:DD:02:67:C0:64:2B:87:AB:75:E8:7C:00:D2:11:8C:10:D0:B7:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADD0267C0642B87AB75E87C00D2118C10D0B716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3234203d3e20323637353835.roa
Signing time:             Tue 05 Apr 2022 02:09:43 +0000
ROA not before:           Tue 05 Apr 2022 02:04:43 +0000
ROA not after:            Tue 04 Apr 2023 02:09:43 +0000
asID:                     267585
IP address blocks:        45.70.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:15:d0:49:b5:5c:4b:b3:1a:b9:a2:96:c5:af:b4:64:c8:15:7f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ADD0267C0642B87AB75E87C00D2118C10D0B716
        Validity
            Not Before: Apr  5 02:04:43 2022 GMT
            Not After : Apr  4 02:09:43 2023 GMT
        Subject: CN=73EF4469F9A52AEC1625C9933C2F54FF43BFE0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5f:bd:bb:39:9d:d8:0c:b4:c2:13:2c:27:78:
                    df:a4:d7:1c:9d:e9:0c:42:1c:de:68:0b:b1:7b:26:
                    4d:de:fc:b9:2d:5c:47:b6:e4:b4:38:d7:20:97:63:
                    c4:2b:ee:72:4f:92:25:fd:f9:c6:c5:ee:dd:17:d2:
                    f7:80:cd:53:51:07:d0:38:3a:d9:74:1a:18:f8:9f:
                    16:ff:fe:65:37:72:1c:9f:5d:06:fd:ca:23:cc:db:
                    fa:f9:a6:54:b0:72:e3:cb:8e:95:dc:47:c3:5c:03:
                    4e:44:e6:37:55:19:ba:e2:a7:13:16:ec:d5:c8:1e:
                    11:5b:a2:65:aa:75:34:ab:31:05:53:fa:c9:61:ad:
                    a9:ff:e3:be:22:75:63:20:33:8f:7f:c9:91:7a:3f:
                    f8:fa:24:d6:27:37:f9:74:4b:47:fc:ca:90:a4:bc:
                    f2:71:8e:ce:4a:48:18:3a:bd:42:05:1d:93:9f:ef:
                    be:33:d6:df:f4:9f:0e:56:a6:96:54:ae:0c:a7:00:
                    8e:e9:a3:07:0f:12:a7:aa:bd:b6:8b:13:56:e4:53:
                    22:2f:5d:94:27:1f:91:f8:95:24:ba:c3:d2:aa:43:
                    98:ab:37:e2:bb:6b:9d:b3:67:31:b3:78:2a:7b:f3:
                    55:67:6c:2b:e4:ee:56:ce:5d:65:af:e2:e1:0d:86:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EF:44:69:F9:A5:2A:EC:16:25:C9:93:3C:2F:54:FF:43:BF:E0:EF
            X509v3 Authority Key Identifier:
                keyid:6A:DD:02:67:C0:64:2B:87:AB:75:E8:7C:00:D2:11:8C:10:D0:B7:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/6ADD0267C0642B87AB75E87C00D2118C10D0B716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADD0267C0642B87AB75E87C00D2118C10D0B716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3234203d3e20323637353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:d9:80:5a:7e:52:88:2c:19:6f:60:05:aa:d6:23:18:35:7f:
         4b:dd:52:2b:7b:6f:44:c8:97:3b:89:ae:2c:10:69:9c:0a:1a:
         c1:06:79:7a:de:1d:42:4b:41:f4:93:75:ca:e4:8a:fc:73:12:
         23:46:ff:0c:94:93:70:77:e6:13:2b:82:f7:22:e8:9f:e9:c5:
         1f:3a:49:98:e4:ed:fa:62:28:d0:b4:43:14:e0:9a:63:43:2a:
         fd:f9:6f:59:97:17:13:d8:55:0a:0e:3e:85:f0:d7:f4:84:56:
         c1:29:97:da:d5:b6:6c:28:ed:31:87:db:62:8e:a6:1b:7a:28:
         ae:1a:92:6e:83:42:a7:ce:5b:1d:aa:ee:2b:95:94:69:8a:c2:
         7d:47:2f:21:32:a7:5f:10:bf:34:a8:cd:68:d7:e0:3b:98:b0:
         aa:38:b4:5d:e6:e7:2a:9c:17:c5:ee:1c:ea:5c:af:e1:4b:fe:
         93:74:86:ef:16:e4:20:ba:a8:3a:bf:4a:2a:e9:91:52:e8:06:
         21:85:3f:cb:00:ba:84:9f:8b:da:24:da:07:47:2a:62:40:7e:
         65:63:fa:4d:1a:b7:bb:0a:97:89:80:f8:9d:9a:08:a2:17:6d:
         b9:c3:b0:10:11:30:d4:d5:22:d3:80:67:b3:c1:e4:7b:29:15:
         fc:ff:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org