Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/0/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
File:                     34352e37302e3130302e302f32322d3235203d3e20323637353637.roa (raw, json)
Hash identifier:          c9VkcvwT+h0Ba183E4xnD6MVO9wXTO1JlDkzlVTTG7w=
Subject key identifier:   C2:1D:34:71:ED:4B:9E:4C:A5:15:7C:2B:72:A3:2E:8C:19:29:D6:4D
Certificate issuer:       /CN=88739320FAEB66281317899CD946D1767052F422
Certificate serial:       0FD2044B1310DC88434031CE0D8454D0617FFE36
Authority key identifier: 88:73:93:20:FA:EB:66:28:13:17:89:9C:D9:46:D1:76:70:52:F4:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88739320FAEB66281317899CD946D1767052F422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/0/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
Signing time:             Thu 29 Sep 2022 06:09:31 +0000
ROA not before:           Thu 29 Sep 2022 06:04:31 +0000
ROA not after:            Thu 28 Sep 2023 06:09:31 +0000
asID:                     267567
IP address blocks:        45.70.100.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d2:04:4b:13:10:dc:88:43:40:31:ce:0d:84:54:d0:61:7f:fe:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88739320FAEB66281317899CD946D1767052F422
        Validity
            Not Before: Sep 29 06:04:31 2022 GMT
            Not After : Sep 28 06:09:31 2023 GMT
        Subject: CN=C21D3471ED4B9E4CA5157C2B72A32E8C1929D64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d9:85:b0:2b:88:75:81:a7:fc:84:80:a4:6c:
                    40:dc:8b:34:7b:cb:3a:81:02:a3:cb:d1:73:05:1f:
                    52:fb:64:a3:fd:16:bb:13:dd:72:6b:5e:b6:93:18:
                    c3:2e:2b:a8:f9:97:7b:1f:fb:30:80:13:3c:d7:36:
                    93:f4:a2:4f:13:fb:50:ae:bc:35:32:a5:49:eb:8a:
                    8e:53:49:28:c2:83:fb:0c:18:8d:26:52:4b:15:e4:
                    ff:41:76:90:da:1f:87:b1:cc:9f:86:75:40:39:21:
                    d8:ac:51:eb:ac:14:c8:99:ed:32:e1:2e:1a:43:41:
                    d0:3e:d3:f4:4e:c0:2b:b5:86:cb:77:0a:5b:d8:25:
                    0b:e3:4c:b3:28:9e:b9:5a:0b:e9:1e:91:7f:ba:d9:
                    bb:95:51:2f:1f:c0:f2:32:62:3c:c9:b5:98:c5:cf:
                    9f:e7:ae:6e:1a:7d:00:dd:01:8c:5b:8d:ee:3a:91:
                    80:5b:8a:c9:34:0c:7c:ed:d6:0c:95:74:9a:99:5e:
                    54:69:13:0b:79:94:9f:a0:fe:7f:76:60:cc:ea:fd:
                    f9:88:e1:2d:47:68:63:fd:b1:22:d2:1a:7d:9e:35:
                    3b:8f:52:cf:d7:9b:f2:4e:8a:64:f0:93:cb:72:e0:
                    a0:d9:de:d2:62:9c:1e:d5:8f:a1:a7:26:2c:c4:20:
                    8e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1D:34:71:ED:4B:9E:4C:A5:15:7C:2B:72:A3:2E:8C:19:29:D6:4D
            X509v3 Authority Key Identifier:
                keyid:88:73:93:20:FA:EB:66:28:13:17:89:9C:D9:46:D1:76:70:52:F4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/0/88739320FAEB66281317899CD946D1767052F422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88739320FAEB66281317899CD946D1767052F422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/0/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:81:d3:16:18:0b:bd:e7:98:5a:50:dd:9f:24:8d:2c:c2:
         60:f8:61:cf:96:1a:df:ba:37:e3:65:4d:47:11:c1:8f:ec:fe:
         eb:86:3c:9c:57:8d:01:a1:1e:d9:5e:cb:9b:47:6a:e2:ff:40:
         9f:8e:65:bf:6e:f7:b1:d6:0c:27:f5:cf:99:c9:11:cf:ff:10:
         fa:2a:a1:fa:99:14:8b:54:0d:12:b5:13:7d:49:d0:b4:62:53:
         56:6f:0c:5a:8c:bb:bc:23:b9:d0:5a:11:f4:f0:cd:54:3c:9e:
         76:5c:30:c7:1c:76:d2:2d:bf:77:bb:88:56:71:f6:01:b4:dd:
         c4:ca:ae:2d:21:db:93:df:38:1e:a4:8d:e1:5d:02:02:77:44:
         3d:8f:64:b2:0e:c4:ec:71:f3:aa:b4:f4:14:4a:61:2d:6f:da:
         4c:6f:1c:59:eb:bd:95:e9:0b:3e:5e:e8:b3:7c:db:6a:84:97:
         29:c6:79:58:db:c5:af:6a:e5:ff:b3:02:b2:19:c5:c5:35:81:
         ca:4a:29:92:96:94:27:46:82:17:a2:b2:de:f6:2a:e2:4e:ba:
         e2:c5:6c:84:a5:c9:c9:88:20:6d:23:c8:64:46:db:ba:0c:54:
         4d:ab:f5:b4:f5:a9:f7:28:1f:eb:dc:0b:d0:29:f4:62:67:d6:
         46:28:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org