Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e37302e302f32342d3234203d3e20323637353830.roa
File:                     34352e37302e37302e302f32342d3234203d3e20323637353830.roa (raw, json)
Hash identifier:          E/mWsHYvJrUmtLsuhM1l4DrhUIjNjbefwom/4zj/awI=
Subject key identifier:   7F:10:AD:3B:09:35:E5:49:77:2E:B6:26:42:5A:60:C2:91:EF:40:3B
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       6A50A7FB27CB50164222DA6F91BEB5AC01E9C42B
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e37302e302f32342d3234203d3e20323637353830.roa
Signing time:             Tue 05 Mar 2024 23:17:46 +0000
ROA not before:           Tue 05 Mar 2024 23:12:46 +0000
ROA not after:            Tue 04 Mar 2025 23:17:46 +0000
asID:                     267580
IP address blocks:        45.70.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:50:a7:fb:27:cb:50:16:42:22:da:6f:91:be:b5:ac:01:e9:c4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  5 23:12:46 2024 GMT
            Not After : Mar  4 23:17:46 2025 GMT
        Subject: CN=7F10AD3B0935E549772EB626425A60C291EF403B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:d5:2f:26:c4:48:fe:e6:de:af:31:dc:a1:
                    24:d1:ca:63:b4:db:b7:ea:f5:00:f1:4c:7a:73:9a:
                    85:73:9f:14:43:be:fa:a0:c4:bf:b8:76:de:23:bc:
                    d6:5b:0a:30:7c:d1:c2:52:4a:18:22:2e:ec:b8:cf:
                    1e:f1:3a:2d:f7:83:ee:f3:62:e3:ac:c2:69:2f:fa:
                    2f:ef:e3:b4:d4:5c:24:a9:8d:14:35:03:f2:da:ec:
                    b3:c6:bb:d5:5b:f4:6d:fc:5c:cf:5b:43:5c:d4:03:
                    52:34:07:e3:f2:1e:6d:6b:9a:c3:95:f7:86:94:f4:
                    ca:7a:3a:fc:21:01:7a:6e:d3:69:12:cd:73:05:a4:
                    dd:0d:94:81:84:58:85:2e:12:aa:fe:85:e4:de:44:
                    61:2d:8a:e5:de:15:36:9d:e4:38:b8:5c:c8:b6:a2:
                    0d:28:3b:b2:ce:07:d8:26:3d:90:f5:a2:2a:a4:b8:
                    89:89:a0:47:10:19:43:70:48:97:6d:44:cf:ea:8c:
                    dc:71:d7:b2:33:9f:f6:a5:ce:cd:dc:26:a8:40:eb:
                    fc:98:43:29:bf:9d:4f:8e:b2:80:88:df:14:e3:3e:
                    5a:c4:b2:f7:dd:80:fb:21:24:70:a1:df:67:1b:aa:
                    5b:d6:84:9a:96:49:dc:e8:a7:66:35:20:bc:22:b8:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:10:AD:3B:09:35:E5:49:77:2E:B6:26:42:5A:60:C2:91:EF:40:3B
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e37302e302f32342d3234203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:68:49:92:12:e5:fe:ff:17:9c:bd:da:fb:c0:68:98:bf:
         6a:75:44:7b:1f:25:ac:6f:52:50:3b:50:68:33:2b:df:20:25:
         4e:63:be:e3:6a:da:26:f0:43:58:d9:bb:9c:93:da:d9:29:3c:
         e5:af:6b:37:2a:f7:89:6a:a5:dc:48:60:39:27:cb:d9:00:da:
         7b:0d:d9:68:48:1f:4a:ee:f7:3b:02:0a:ff:68:76:3b:84:c9:
         b5:20:c8:08:91:06:6c:4b:16:69:40:84:56:43:a6:f3:8a:05:
         ca:fa:56:e2:46:7c:4f:93:34:f3:3c:90:2f:ad:f6:de:ce:76:
         30:63:8f:d0:9b:37:c5:07:77:b1:e4:21:dd:97:40:4c:1d:f1:
         4a:5a:d5:3c:09:a0:6b:55:0e:ea:67:a8:a0:3e:b6:2d:ff:ec:
         06:45:25:17:53:3e:c2:8d:e9:b9:2e:ba:20:23:5d:70:1d:f7:
         5b:c3:ad:ef:03:64:d0:8e:d3:1f:8a:31:e2:dc:ce:2a:de:43:
         76:71:87:7a:3d:4d:8c:3a:a4:74:b3:92:16:d4:f3:8d:61:54:
         44:d6:c5:13:63:a3:39:7e:8a:29:ad:d4:ab:6c:38:2f:e0:73:
         46:c5:9f:ee:0d:55:95:ff:ee:5e:7c:28:93:34:5d:a8:90:11:
         d9:3d:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org