Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32322d3232203d3e20323637353830.roa
File:                     34352e37302e36382e302f32322d3232203d3e20323637353830.roa (raw, json)
Hash identifier:          73PUQ0xv8PAtrz1wmGED3ERpNowxBzTbVO7iJGePIRE=
Subject key identifier:   E7:B8:5B:88:34:CD:0F:88:AD:B2:0D:94:EC:39:FE:32:AF:14:8B:95
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       73E39D9286382CF0E9487CEA5160FF100D4768E3
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32322d3232203d3e20323637353830.roa
Signing time:             Tue 05 Mar 2024 23:17:29 +0000
ROA not before:           Tue 05 Mar 2024 23:12:29 +0000
ROA not after:            Tue 04 Mar 2025 23:17:29 +0000
asID:                     267580
IP address blocks:        45.70.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:9d:92:86:38:2c:f0:e9:48:7c:ea:51:60:ff:10:0d:47:68:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  5 23:12:29 2024 GMT
            Not After : Mar  4 23:17:29 2025 GMT
        Subject: CN=E7B85B8834CD0F88ADB20D94EC39FE32AF148B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:84:bc:12:f9:7a:94:23:b8:d2:ce:4c:19:
                    d4:25:62:76:b5:eb:1c:b5:ed:42:7f:e9:8c:c9:19:
                    57:c5:56:b7:b2:9e:af:33:24:bd:41:e4:18:85:b7:
                    fc:17:6f:1a:fa:e0:de:7f:11:fd:a8:e4:db:70:7f:
                    a0:88:c7:e4:d6:24:7a:34:1a:0f:39:05:77:d9:e3:
                    df:ba:53:16:9e:d3:aa:ad:fa:74:9f:b2:70:c0:b5:
                    6d:99:27:0e:c5:d9:f9:cc:08:88:0f:ad:6c:ef:fd:
                    39:f9:bb:aa:2a:77:76:2d:0f:f4:bd:b9:58:fc:cd:
                    20:7e:ab:91:0d:77:8f:6a:0f:aa:c7:a0:c8:1b:a7:
                    4a:8f:71:f2:4f:3d:3f:b8:8f:db:29:59:a0:b3:4e:
                    dd:8d:17:7a:fa:94:8d:68:d8:b9:8e:33:aa:58:68:
                    0b:ab:13:ba:3b:41:de:cd:3d:bf:38:ba:62:a2:b2:
                    ee:2f:36:dc:09:2e:b6:78:3b:f2:a3:4f:58:cc:b3:
                    f5:10:e3:36:ff:24:5d:fe:ed:2b:d3:62:8a:a0:08:
                    b0:e6:bf:f7:17:24:05:09:74:7f:e7:eb:d2:2a:f0:
                    82:83:15:1f:ac:6f:2e:77:16:72:de:e5:c5:3b:d9:
                    97:bf:28:34:24:e8:12:c5:c2:da:23:f1:58:42:b8:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:5B:88:34:CD:0F:88:AD:B2:0D:94:EC:39:FE:32:AF:14:8B:95
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32322d3232203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:95:a9:f5:b5:99:90:04:2d:e8:49:fc:f1:ad:12:11:12:
         a2:2e:66:28:7b:d0:2d:4b:c5:25:9d:98:4c:f8:ae:48:df:0c:
         61:c2:71:53:5f:d5:22:95:5b:2e:3a:62:33:a2:48:78:27:7a:
         5b:eb:95:8f:62:d0:1a:78:87:97:85:1a:4b:09:8b:bb:fd:85:
         04:49:eb:22:c7:04:22:df:75:3f:73:08:f5:13:0a:73:c8:ef:
         8f:28:74:40:3b:ee:e4:ef:be:c5:d1:42:8d:c3:43:67:f8:5f:
         8a:b6:fc:36:0e:29:69:03:d5:31:8c:36:ac:cc:d4:bc:a3:91:
         9b:e2:14:16:ec:fc:77:6b:61:bd:98:3d:a3:05:55:14:56:93:
         6b:0f:ff:76:5b:89:e2:4b:6d:63:ba:47:8b:f7:e2:36:fb:a0:
         70:5f:0a:a1:fe:6a:1c:81:72:b9:98:2b:cc:96:fe:58:54:9b:
         c6:7a:5a:ad:80:8e:31:bc:4a:39:7c:f2:49:cf:54:e1:ad:2f:
         cf:d0:e6:69:64:f8:6e:b5:b1:4b:d8:d0:16:ba:22:5b:88:64:
         9a:66:86:19:bc:e2:46:07:d4:04:31:29:7d:e4:8d:4e:1a:76:
         0c:7a:c5:82:c8:26:b7:16:98:df:1e:1b:26:a2:78:1b:fe:6a:
         04:9c:36:88
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUc+OdkoY4LPDpSHzqUWD/EA1HaOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNERjcxQzI3MzM2RjRDODY5QTg0OThDMjNGMTczNEVF
RTMxQUExNTAeFw0yNDAzMDUyMzEyMjlaFw0yNTAzMDQyMzE3MjlaMDMxMTAvBgNV
BAMTKEU3Qjg1Qjg4MzRDRDBGODhBREIyMEQ5NEVDMzlGRTMyQUYxNDhCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SYS8Evl6lCO40s5MGdQlYna1
6xy17UJ/6YzJGVfFVreynq8zJL1B5BiFt/wXbxr64N5/Ef2o5Ntwf6CIx+TWJHo0
Gg85BXfZ49+6Uxae06qt+nSfsnDAtW2ZJw7F2fnMCIgPrWzv/Tn5u6oqd3YtD/S9
uVj8zSB+q5ENd49qD6rHoMgbp0qPcfJPPT+4j9spWaCzTt2NF3r6lI1o2LmOM6pY
aAurE7o7Qd7NPb84umKisu4vNtwJLrZ4O/KjT1jMs/UQ4zb/JF3+7SvTYoqgCLDm
v/cXJAUJdH/n69Iq8IKDFR+sby53FnLe5cU72Ze/KDQk6BLFwtoj8VhCuBDlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU57hbiDTND4itsg2U7Dn+Mq8Ui5UwHwYDVR0j
BBgwFoAU899xwnM29MhpqEmMI/FzTu4xqhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTVWc29jQ2hkYUV0NDFma01aS3N2djVqMVZEeWhyWldtejVGV0c3aEdY
eXkvMC9GM0RGNzFDMjczMzZGNEM4NjlBODQ5OEMyM0YxNzM0RUVFMzFBQTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzREY3MUMyNzMzNkY0Qzg2
OUE4NDk4QzIzRjE3MzRFRUUzMUFBMTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U1VnNvY0NoZGFFdDQxZmtNWktzdnY1ajFWRHloclpXbXo1RldHN2hHWHl5LzAv
MzQzNTJlMzczMDJlMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNzM1
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1GRDANBgkqhkiG9w0BAQsFAAOCAQEAYPiVqfW1mZAE
LehJ/PGtEhESoi5mKHvQLUvFJZ2YTPiuSN8MYcJxU1/VIpVbLjpiM6JIeCd6W+uV
j2LQGniHl4UaSwmLu/2FBEnrIscEIt91P3MI9RMKc8jvjyh0QDvu5O++xdFCjcND
Z/hfirb8Ng4paQPVMYw2rMzUvKORm+IUFuz8d2thvZg9owVVFFaTaw//dluJ4ktt
Y7pHi/fiNvugcF8Kof5qHIFyuZgrzJb+WFSbxnparYCOMbxKOXzySc9U4a0vz9Dm
aWT4brWxS9jQFroiW4hkmmaGGbziRgfUBDEpfeSNThp2DHrFgsgmtxaY3x4bJqJ4
G/5qBJw2iA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org