Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa
File:                     34352e37302e3139322e302f32322d3332203d3e20323637353835.roa (raw, json)
Hash identifier:          PmHPNCmXmPMoDULb2RwOGhfiww1B3K14DuVV90hkTuU=
Subject key identifier:   18:7A:40:24:2E:2B:7B:91:6D:C0:AB:D3:7E:45:0A:2F:06:62:7D:DA
Certificate issuer:       /CN=C51858E8D4958BCC02DD1522A66C2DE642AF8AAE
Certificate serial:       245328261B52E936696DB1150E04DDE663A0743C
Authority key identifier: C5:18:58:E8:D4:95:8B:CC:02:DD:15:22:A6:6C:2D:E6:42:AF:8A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa
Signing time:             Sat 09 Sep 2023 12:51:04 +0000
ROA not before:           Sat 09 Sep 2023 12:46:04 +0000
ROA not after:            Sat 07 Sep 2024 12:51:04 +0000
asID:                     267585
IP address blocks:        45.70.192.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:53:28:26:1b:52:e9:36:69:6d:b1:15:0e:04:dd:e6:63:a0:74:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C51858E8D4958BCC02DD1522A66C2DE642AF8AAE
        Validity
            Not Before: Sep  9 12:46:04 2023 GMT
            Not After : Sep  7 12:51:04 2024 GMT
        Subject: CN=187A40242E2B7B916DC0ABD37E450A2F06627DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:f5:9a:7d:9c:1d:68:e7:95:2a:11:6c:b7:
                    ed:0e:4e:75:8e:f4:6d:68:d9:98:50:d0:4f:f1:55:
                    90:a1:7b:22:cf:fb:ea:cb:6c:4a:9e:9a:7c:89:bd:
                    2c:60:c0:c0:6e:a5:fa:8b:61:56:83:3a:d4:d3:61:
                    d4:e0:98:68:fb:44:ce:b9:85:4b:79:7c:41:e8:4b:
                    cb:55:65:2e:76:78:9c:6d:1c:7d:07:21:a8:f8:e8:
                    a3:7a:f5:07:49:97:2a:8d:fa:5d:56:d2:b7:01:6a:
                    af:91:cf:a4:8f:3f:5a:e8:5f:93:25:6e:06:48:a1:
                    b9:7c:04:dd:dc:c4:ab:2e:61:5e:3c:98:ae:e0:3a:
                    84:50:4b:3a:cc:30:07:51:6f:fa:ec:ab:a3:7d:9b:
                    7d:ee:d9:33:6d:b9:ce:76:53:23:da:c4:9e:b1:f4:
                    16:4e:a4:87:24:0d:dc:02:04:32:66:43:9e:47:75:
                    2e:50:7b:93:ec:b7:d1:ef:f8:78:9e:3b:eb:81:12:
                    c4:79:4e:7e:76:0a:93:88:79:a9:d4:6c:ed:9f:03:
                    79:17:57:56:22:4b:d1:56:49:9f:dd:f5:ef:2e:3c:
                    4d:4e:7d:db:c1:8c:1c:08:2e:a8:01:8e:1b:75:79:
                    f0:8c:5f:d7:ee:7b:e9:e6:65:67:72:a7:0e:3e:bd:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7A:40:24:2E:2B:7B:91:6D:C0:AB:D3:7E:45:0A:2F:06:62:7D:DA
            X509v3 Authority Key Identifier:
                keyid:C5:18:58:E8:D4:95:8B:CC:02:DD:15:22:A6:6C:2D:E6:42:AF:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51858E8D4958BCC02DD1522A66C2DE642AF8AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/34352e37302e3139322e302f32322d3332203d3e20323637353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:cb:50:4b:95:c9:53:2c:c9:4a:07:77:d7:db:83:7e:f2:96:
         04:e6:09:bf:02:87:bf:83:aa:1b:cc:3d:12:ec:ee:51:58:4a:
         49:23:37:1a:e9:af:71:35:e0:53:d3:6c:1a:d3:bf:15:58:d3:
         ad:d7:f8:13:04:5e:16:55:af:70:dd:a9:7b:fc:4f:e8:60:1f:
         bc:7f:f7:9e:f9:d6:9a:28:0a:83:69:fc:fd:ab:27:ab:1b:72:
         21:17:cb:7f:1a:a9:8f:b4:dd:a5:8f:de:0f:5b:fa:db:05:75:
         84:8a:c0:dd:1d:e7:8d:12:cf:ec:c4:70:b5:a7:3a:bf:3b:58:
         4b:aa:1b:62:86:94:bf:85:b1:b9:ba:e4:17:92:cc:7f:e4:81:
         6f:e3:02:5d:70:dc:a4:72:ea:ac:e5:22:34:03:e8:80:9a:44:
         43:f2:d8:5c:49:4c:ef:c5:6e:f4:c3:1a:7a:7c:b4:de:d8:f3:
         fa:f2:7c:bb:1d:c5:dd:6a:0d:ed:97:b2:79:dc:22:b8:65:c3:
         f1:c4:32:e2:8f:a0:38:d5:7c:a4:f1:4b:9e:b1:17:6b:88:7e:
         e9:3b:fe:f2:6b:c6:fa:be:19:f0:c8:37:18:4a:35:c4:b1:b9:
         2b:ab:c0:0a:04:4f:e3:ad:32:4f:28:b7:0a:89:10:be:23:d9:
         ce:81:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org