Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e37312e302f32342d3234203d3e20323637353830.roa
File:                     34352e37302e37312e302f32342d3234203d3e20323637353830.roa (raw, json)
Hash identifier:          n5uReFWCKXCltStBxgjs2V5WX+zJoE2K9x1J2eAu0zE=
Subject key identifier:   35:99:D8:DA:DA:EA:3E:56:02:E9:72:FD:6C:BF:9B:CE:63:F6:C8:79
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       5EA3B5DFF134EDEE630D7753168FD25709190930
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e37312e302f32342d3234203d3e20323637353830.roa
Signing time:             Tue 05 Mar 2024 23:17:50 +0000
ROA not before:           Tue 05 Mar 2024 23:12:50 +0000
ROA not after:            Tue 04 Mar 2025 23:17:50 +0000
asID:                     267580
IP address blocks:        45.70.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a3:b5:df:f1:34:ed:ee:63:0d:77:53:16:8f:d2:57:09:19:09:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  5 23:12:50 2024 GMT
            Not After : Mar  4 23:17:50 2025 GMT
        Subject: CN=3599D8DADAEA3E5602E972FD6CBF9BCE63F6C879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:d1:2c:2e:a4:3b:99:e2:66:91:26:2d:85:
                    2c:2f:99:93:e6:f8:28:63:6c:27:8a:4f:6d:03:1d:
                    64:ce:48:48:b5:73:b3:66:ba:88:68:75:a4:d0:14:
                    26:86:e7:7c:c5:75:21:45:fa:d8:68:2e:35:25:32:
                    03:a8:27:93:c7:61:a2:f6:89:5f:32:3d:54:2e:61:
                    df:46:6c:95:0a:4e:37:28:24:8a:d7:b8:c1:b3:05:
                    2e:30:ea:c4:da:11:bb:73:12:3c:4b:a4:ea:b5:03:
                    32:7b:c2:43:37:88:e7:51:6c:d9:51:1c:5c:bc:43:
                    d8:a1:f0:30:bc:ee:44:17:67:c2:b1:76:0e:e2:55:
                    61:7f:0a:0a:98:28:3c:45:3a:e8:0d:e4:6e:ac:7f:
                    7b:47:4c:5e:82:8b:6a:94:fc:1f:db:a2:e1:4e:13:
                    2c:39:23:4d:e6:0f:0f:36:7a:b0:75:20:6c:de:13:
                    e3:21:5f:44:f4:f9:1b:c3:b9:28:fa:40:90:1a:93:
                    62:d1:e2:9b:41:53:ea:52:d3:3a:ae:ec:49:ea:2b:
                    ff:68:d0:a6:00:c5:3f:c1:66:e6:01:a3:7f:79:15:
                    f6:dd:5e:61:11:dc:29:18:5c:11:ab:a9:9b:7e:67:
                    2e:a8:ad:39:13:75:49:fa:9b:73:ba:1f:4f:33:81:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:99:D8:DA:DA:EA:3E:56:02:E9:72:FD:6C:BF:9B:CE:63:F6:C8:79
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e37312e302f32342d3234203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:46:f9:92:a8:61:12:2b:31:6b:d3:10:b2:02:7a:4d:a9:
         72:ce:af:8b:72:4f:62:dc:d3:0c:af:2e:f7:66:96:fa:4b:e1:
         cb:3f:2a:09:ba:ec:63:55:87:93:f0:b1:7c:16:e3:e6:4a:5c:
         c7:f1:6f:76:a7:3d:bf:0f:e1:3c:e7:98:86:41:a4:9d:cd:78:
         dc:4d:d2:4b:9e:d1:ec:53:f4:cd:59:e8:86:a7:7c:e1:34:db:
         44:e8:1a:d6:38:2c:eb:23:40:53:b5:99:fa:25:91:2a:52:67:
         f5:7e:f5:41:21:6e:66:47:1c:f2:e3:98:44:c2:af:ae:96:c4:
         5e:8a:5a:c2:a2:e2:a1:e0:1c:b6:77:0c:45:34:d9:38:0a:10:
         50:2a:18:12:22:83:1c:ad:2d:87:21:ee:3b:2f:64:4c:75:9d:
         5b:2f:87:2a:d1:bf:d6:43:df:1e:d2:21:19:86:ea:a0:bb:b7:
         07:99:67:e1:43:15:a6:fc:86:23:3e:55:a5:4b:1e:f0:2a:10:
         60:00:39:4f:32:06:b4:fa:61:54:d4:21:0c:ab:cb:f4:d5:ea:
         e1:94:26:c1:c4:76:8d:53:6d:10:a1:33:a6:96:3b:7b:14:08:
         17:a4:cf:86:83:45:c9:b7:62:c6:8c:44:cd:9c:3f:0b:17:3c:
         e1:eb:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org