Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130312e302f32342d3234203d3e20323637353637.roa
File:                     34352e37302e3130312e302f32342d3234203d3e20323637353637.roa (raw, json)
Hash identifier:          lwYXppVkHMSthQQZ088g1MPfHcun2RJCEISzYKlSXZU=
Subject key identifier:   09:A3:62:EC:CC:2D:68:42:B5:52:2F:40:C9:BC:BE:47:27:39:7B:A1
Certificate issuer:       /CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
Certificate serial:       75D9E271D66CA7C6CE8E5B4DF17361464A4FFB77
Authority key identifier: 3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130312e302f32342d3234203d3e20323637353637.roa
Signing time:             Wed 29 Nov 2023 01:33:03 +0000
ROA not before:           Wed 29 Nov 2023 01:28:03 +0000
ROA not after:            Wed 27 Nov 2024 01:33:03 +0000
asID:                     267567
IP address blocks:        45.70.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d9:e2:71:d6:6c:a7:c6:ce:8e:5b:4d:f1:73:61:46:4a:4f:fb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
        Validity
            Not Before: Nov 29 01:28:03 2023 GMT
            Not After : Nov 27 01:33:03 2024 GMT
        Subject: CN=09A362ECCC2D6842B5522F40C9BCBE4727397BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:08:04:60:fd:02:b0:63:0a:16:dd:7f:50:
                    b3:ae:37:b1:01:c9:13:ea:f9:9a:67:32:af:6e:54:
                    80:0b:93:dc:cc:ab:1b:08:6e:16:62:06:f2:bd:86:
                    c2:16:b7:5f:81:c4:ab:37:4a:41:e4:37:ad:0f:07:
                    ad:c5:68:0f:8b:ef:d8:ac:ae:b2:31:6b:71:49:9b:
                    de:45:b0:97:16:c1:7a:e1:96:7f:e6:71:3b:03:d6:
                    20:e6:15:f6:a5:eb:e4:b3:a0:ff:cd:3d:90:65:59:
                    4d:bb:b2:c5:a0:b7:e9:9d:48:86:c6:45:84:7c:41:
                    e3:93:9a:fd:75:e5:81:47:bb:98:39:c8:e8:1b:a0:
                    b6:ba:0b:2a:3c:95:36:30:71:19:93:a9:e8:98:b7:
                    96:9b:40:7a:32:de:2b:e9:90:e9:70:1b:c7:a1:c2:
                    ac:fd:b4:ab:83:28:53:ce:16:65:32:a7:e2:e4:57:
                    26:66:3b:66:63:a8:d4:38:37:66:d9:3b:0d:66:9d:
                    7c:e0:84:94:d2:75:4a:2d:e7:ff:4e:98:84:04:d7:
                    f0:6b:c2:68:04:15:12:f3:3c:03:ea:89:a8:96:25:
                    cc:eb:d8:30:03:b8:34:e8:6e:43:04:70:ff:1e:ca:
                    15:1a:29:1d:87:44:6e:1a:7a:ae:c9:36:e2:b7:db:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A3:62:EC:CC:2D:68:42:B5:52:2F:40:C9:BC:BE:47:27:39:7B:A1
            X509v3 Authority Key Identifier:
                keyid:3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130312e302f32342d3234203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:87:f9:f5:be:a4:e6:5d:ab:43:e6:b5:23:3c:07:2e:e9:01:
         a0:ed:22:a9:66:86:d2:3d:ae:c8:2e:9a:8c:dc:89:50:a7:d8:
         14:cf:db:8e:d9:5d:1e:5d:6c:47:b7:49:59:71:8a:cc:e8:3a:
         98:0e:e7:c3:26:71:bf:7b:57:86:86:47:b8:f0:e0:ce:f5:dc:
         5a:45:46:ab:bb:c7:3f:ab:54:30:32:8b:6d:25:1c:bf:a4:f9:
         d0:01:d0:86:c8:32:d0:74:1d:44:99:c2:b8:2f:99:51:3f:a9:
         fb:15:d0:9c:37:d5:bc:bb:e6:5a:21:89:28:47:3b:68:98:b0:
         cd:89:7a:f1:a7:a8:5e:0a:70:ae:33:01:0f:fd:42:66:66:36:
         2d:3f:35:ca:1b:37:8c:bb:1c:62:10:2b:c4:7f:27:43:d5:5b:
         cb:d6:4e:c3:ca:f2:8e:71:ce:9c:cb:83:7e:81:3a:43:c0:ad:
         3f:95:61:42:a7:aa:63:e2:86:50:88:8f:74:2c:48:c2:ea:1a:
         c0:55:66:ba:7a:90:36:dc:10:48:6d:e4:8e:4e:7e:17:cf:71:
         d6:cd:d6:45:79:09:bd:6f:7e:9e:7a:8a:cb:dd:0f:05:ca:18:
         fb:5e:e2:dd:3e:7f:2a:3b:f8:57:b8:7f:a7:26:d1:34:89:8c:
         f5:fc:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org