Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32342d3234203d3e20323637353830.roa
File:                     34352e37302e36382e302f32342d3234203d3e20323637353830.roa (raw, json)
Hash identifier:          DHAWATl2vxk0SIdHmcq6nZQI4VorEYoVxtYfwQzRxYk=
Subject key identifier:   CE:00:57:6A:3E:B6:A8:42:D6:98:24:46:72:59:B9:E0:4C:84:96:74
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       2C983CD1B2738461D96A06D9940370BA59BE115D
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32342d3234203d3e20323637353830.roa
Signing time:             Tue 05 Mar 2024 23:17:38 +0000
ROA not before:           Tue 05 Mar 2024 23:12:38 +0000
ROA not after:            Tue 04 Mar 2025 23:17:38 +0000
asID:                     267580
IP address blocks:        45.70.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:98:3c:d1:b2:73:84:61:d9:6a:06:d9:94:03:70:ba:59:be:11:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  5 23:12:38 2024 GMT
            Not After : Mar  4 23:17:38 2025 GMT
        Subject: CN=CE00576A3EB6A842D69824467259B9E04C849674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:26:90:6e:6c:a2:80:ed:1e:dc:c1:d5:8d:
                    fd:28:47:25:62:af:1a:a8:10:6b:b3:00:34:d9:c9:
                    55:dd:b1:06:31:27:80:57:d9:53:bf:37:ad:f5:03:
                    df:f6:fa:53:11:38:cd:b7:13:c5:00:a1:a4:b9:2b:
                    03:bd:69:37:a2:14:34:b0:d1:24:82:47:81:a0:35:
                    a5:a2:df:ff:c9:cd:03:24:ad:e7:0d:f9:8c:fd:74:
                    10:5f:cb:07:db:27:e0:42:7f:fe:c0:f5:f1:a5:8b:
                    8f:c0:c9:cd:22:9c:1d:26:cd:19:f1:8e:83:09:1a:
                    0b:f7:ec:35:1c:56:f2:a0:64:b3:b7:b4:3b:ac:ef:
                    b3:6e:d0:c6:cf:6f:65:4b:a3:e7:ec:5e:c9:57:ae:
                    e0:f9:db:dc:b7:f1:19:29:eb:20:f0:f9:4f:44:71:
                    05:f2:c6:6e:4a:53:e7:3c:91:81:66:e0:17:3f:7a:
                    2d:89:70:e0:44:26:99:16:26:7d:ec:8c:80:80:72:
                    03:0e:41:d3:b4:84:9e:68:d0:86:63:6f:85:57:fb:
                    98:0c:b6:d1:ab:a4:81:d5:c5:af:be:15:67:af:f2:
                    43:2b:4e:57:d7:29:4b:7a:d6:91:d8:7e:b2:ae:cc:
                    9a:52:79:61:10:af:93:33:35:c9:f7:30:72:cf:31:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:00:57:6A:3E:B6:A8:42:D6:98:24:46:72:59:B9:E0:4C:84:96:74
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32342d3234203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:04:2a:55:3f:b1:7f:f6:5a:14:da:5c:3c:9d:7e:e9:71:
         5c:27:1e:3e:ae:94:e9:a4:8e:0d:1d:d3:ce:c7:ab:82:a1:1a:
         bd:33:b7:4e:12:23:d2:d0:c0:89:7d:14:f8:90:a9:b6:39:29:
         40:43:00:36:07:57:dc:0a:42:97:54:71:3c:30:37:a8:9d:cb:
         ab:cf:81:ce:10:ec:d7:29:cd:73:38:b1:ee:a4:97:e0:04:ad:
         56:da:36:c2:78:e4:49:e8:15:b8:57:3e:5c:cf:f9:7e:86:02:
         7a:3d:a7:38:c7:c4:ce:78:2d:09:4b:de:4c:aa:ae:b5:8a:14:
         20:e2:82:dd:5d:28:31:18:84:5b:5e:28:c9:25:60:af:7a:e0:
         c8:e8:1b:f5:54:80:9b:e3:ed:f2:5a:de:3a:95:0f:7c:10:d9:
         68:77:91:92:8d:c5:66:83:52:dd:b5:71:dc:dd:21:e4:3e:d5:
         0e:c5:e1:47:29:20:9b:d8:ae:e5:55:3d:65:03:0f:04:51:c8:
         be:e9:c0:d0:d2:2a:4f:56:42:ae:5d:23:61:ec:71:11:2c:38:
         7a:93:37:91:3c:15:ca:3a:4a:6d:1c:25:00:82:6d:84:25:ee:
         dc:db:32:39:1d:71:ae:3a:b2:df:2b:73:14:1d:b7:c9:c2:79:
         8c:3c:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org