Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130322e302f32342d3234203d3e20323637353637.roa
File:                     34352e37302e3130322e302f32342d3234203d3e20323637353637.roa (raw, json)
Hash identifier:          nBY3CC+vVWctS0bz6fcnDQgh1xhi1ZQW+RipuVFOlR8=
Subject key identifier:   4F:47:86:8E:4A:5C:D7:93:49:54:44:F7:9F:4C:17:87:52:C7:1A:78
Certificate issuer:       /CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
Certificate serial:       0A24B1C195077D0EACE288CEDAD01050C0CA7598
Authority key identifier: 3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130322e302f32342d3234203d3e20323637353637.roa
Signing time:             Wed 29 Nov 2023 01:33:03 +0000
ROA not before:           Wed 29 Nov 2023 01:28:03 +0000
ROA not after:            Wed 27 Nov 2024 01:33:03 +0000
asID:                     267567
IP address blocks:        45.70.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:24:b1:c1:95:07:7d:0e:ac:e2:88:ce:da:d0:10:50:c0:ca:75:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
        Validity
            Not Before: Nov 29 01:28:03 2023 GMT
            Not After : Nov 27 01:33:03 2024 GMT
        Subject: CN=4F47868E4A5CD793495444F79F4C178752C71A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:54:4e:89:71:a9:0e:ee:77:ef:07:36:3b:
                    22:0b:ee:6f:12:3d:3b:fd:6b:65:43:6f:13:f0:1d:
                    c5:72:e4:30:0c:16:ec:07:bb:2b:65:ca:e5:35:31:
                    6f:8d:c1:07:99:71:8d:cb:3f:42:36:c5:fb:d3:7f:
                    82:d0:d5:43:ba:a1:a9:6a:5f:b6:7d:98:67:3e:87:
                    f6:0c:68:32:70:e0:24:da:1f:a7:dc:b9:83:ac:ff:
                    73:36:f9:b1:ff:b1:f6:5d:59:bf:7b:59:14:e9:8c:
                    5c:0f:91:98:4e:eb:ca:ee:31:c3:00:aa:43:64:d8:
                    b2:f3:63:a1:a1:56:6b:07:51:90:4d:7a:f6:95:4d:
                    21:6b:75:70:d6:bc:d9:40:b1:17:36:c9:38:b0:d8:
                    ed:9d:25:6b:bd:ec:5c:6e:35:ff:64:e1:d7:2f:93:
                    a5:b0:9f:f0:19:e8:89:54:23:a7:45:4c:8c:ec:52:
                    4b:6c:9f:e7:73:9a:50:85:b5:01:47:15:c0:f5:9c:
                    6c:1a:ba:e2:6f:c2:2c:77:5e:7e:0f:31:93:11:ba:
                    f1:cc:1b:64:71:5f:2d:69:05:e6:32:0a:38:c6:39:
                    ef:9c:ea:c5:d5:c2:80:cd:0a:73:b6:10:fa:0f:ba:
                    96:83:e3:ee:89:65:93:fc:33:cc:ac:32:49:cc:32:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:47:86:8E:4A:5C:D7:93:49:54:44:F7:9F:4C:17:87:52:C7:1A:78
            X509v3 Authority Key Identifier:
                keyid:3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130322e302f32342d3234203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:75:13:92:68:d0:4c:a5:d9:61:b4:3e:6c:2c:f7:50:fe:ac:
         ac:77:e1:fa:74:a3:08:bb:a8:79:64:ca:8c:51:62:09:e0:ef:
         8e:a6:ea:a3:08:12:0a:30:c0:73:8d:96:66:16:dc:67:0d:f5:
         b9:cd:18:c7:e3:ee:da:06:df:0b:7c:1e:10:f8:96:65:7c:fc:
         31:10:86:3a:e6:cf:1a:62:95:a0:ad:13:03:d1:f4:91:a9:ce:
         96:31:ae:29:a3:ac:26:02:36:5d:12:ba:81:6f:a1:7e:56:46:
         a1:d6:ab:50:19:a7:3e:af:43:e6:9e:c4:9e:09:51:30:41:7d:
         bd:74:7c:b6:fe:6a:d2:c3:fb:28:ee:88:3b:92:16:32:5b:35:
         b1:b6:7b:99:6a:57:b6:db:97:35:de:56:aa:ae:55:b1:1b:ac:
         8c:38:cf:fa:be:8d:29:0f:26:f7:9a:11:0b:3c:6b:5a:cc:38:
         3e:6a:68:8d:9b:15:fd:ad:50:fa:68:70:fe:ef:59:1f:5b:ba:
         4b:f3:35:74:01:7b:d8:f2:a5:6b:5c:b2:c1:5f:bb:45:ab:4c:
         b2:b9:b4:70:04:48:a9:d8:61:be:69:4d:d2:e3:7c:37:ba:86:
         04:c8:55:f5:21:b6:55:79:7c:83:ca:ad:ab:61:cb:7f:11:f0:
         bf:28:2f:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCiSxwZUHfQ6s4ojO2tAQUMDKdZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwNDJGNENCOTE3RUU3NkFDOEQyNzMxQzVDMUYxODY4
RjkxOEIwMDAeFw0yMzExMjkwMTI4MDNaFw0yNDExMjcwMTMzMDNaMDMxMTAvBgNV
BAMTKDRGNDc4NjhFNEE1Q0Q3OTM0OTU0NDRGNzlGNEMxNzg3NTJDNzFBNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXVROiXGpDu537wc2OyIL7m8S
PTv9a2VDbxPwHcVy5DAMFuwHuytlyuU1MW+NwQeZcY3LP0I2xfvTf4LQ1UO6oalq
X7Z9mGc+h/YMaDJw4CTaH6fcuYOs/3M2+bH/sfZdWb97WRTpjFwPkZhO68ruMcMA
qkNk2LLzY6GhVmsHUZBNevaVTSFrdXDWvNlAsRc2yTiw2O2dJWu97FxuNf9k4dcv
k6Wwn/AZ6IlUI6dFTIzsUktsn+dzmlCFtQFHFcD1nGwauuJvwix3Xn4PMZMRuvHM
G2RxXy1pBeYyCjjGOe+c6sXVwoDNCnO2EPoPupaD4+6JZZP8M8ysMknMMjNDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUT0eGjkpc15NJVET3n0wXh1LHGngwHwYDVR0j
BBgwFoAUPAQvTLkX7nasjScxxcHxho+RiwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUhzbkpGY3JpVFN6eWNBV2JGMnVURk45TGV0dGNhWlBBNks3bTkxUm1a
bTgvMS8zQzA0MkY0Q0I5MTdFRTc2QUM4RDI3MzFDNUMxRjE4NjhGOTE4QjAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDMDQyRjRDQjkxN0VFNzZB
QzhEMjczMUM1QzFGMTg2OEY5MThCMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VIc25KRmNyaVRTenljQVdiRjJ1VEZOOUxldHRjYVpQQTZLN205MVJtWm04LzEv
MzQzNTJlMzczMDJlMzEzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUZmMA0GCSqGSIb3DQEBCwUAA4IBAQAZdROSaNBM
pdlhtD5sLPdQ/qysd+H6dKMIu6h5ZMqMUWIJ4O+OpuqjCBIKMMBzjZZmFtxnDfW5
zRjH4+7aBt8LfB4Q+JZlfPwxEIY65s8aYpWgrRMD0fSRqc6WMa4po6wmAjZdErqB
b6F+Vkah1qtQGac+r0PmnsSeCVEwQX29dHy2/mrSw/so7og7khYyWzWxtnuZale2
25c13laqrlWxG6yMOM/6vo0pDyb3mhELPGtazDg+amiNmxX9rVD6aHD+71kfW7pL
8zV0AXvY8qVrXLLBX7tFq0yyubRwBEip2GG+aU3S43w3uoYEyFX1IbZVeXyDyq2r
Yct/EfC/KC+u
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org