Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136302e302f32322d3232203d3e20323637353735.roa
File:                     34352e37302e3136302e302f32322d3232203d3e20323637353735.roa (raw, json)
Hash identifier:          s9WasTDFko245crrHtW4KafL4wqd6DxiofD/cYwTlkM=
Subject key identifier:   55:9A:72:56:0E:7C:1C:34:2D:52:1C:3A:84:12:9C:33:09:C8:E5:4F
Certificate issuer:       /CN=07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B
Certificate serial:       4946DF811A7BDC001D49D10582E12E0B4A87EBC0
Authority key identifier: 07:E2:EE:D7:F6:7E:4D:80:DB:F6:C3:2B:E5:95:1A:07:FD:62:8C:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136302e302f32322d3232203d3e20323637353735.roa
Signing time:             Fri 19 Apr 2024 16:59:52 +0000
ROA not before:           Fri 19 Apr 2024 16:54:52 +0000
ROA not after:            Fri 18 Apr 2025 16:59:52 +0000
asID:                     267575
IP address blocks:        45.70.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:46:df:81:1a:7b:dc:00:1d:49:d1:05:82:e1:2e:0b:4a:87:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B
        Validity
            Not Before: Apr 19 16:54:52 2024 GMT
            Not After : Apr 18 16:59:52 2025 GMT
        Subject: CN=559A72560E7C1C342D521C3A84129C3309C8E54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:25:42:d4:18:0a:04:3b:71:50:77:6f:1c:
                    e6:8f:22:c7:bd:b6:d9:66:65:c0:68:d2:0d:c7:ae:
                    8d:1b:b3:46:5e:64:ab:10:a5:c0:49:aa:34:26:42:
                    0b:ff:4b:66:6f:d3:ce:e9:7f:ec:e4:37:4a:39:9b:
                    6d:fe:ae:9b:b1:ef:50:1e:5e:04:51:f2:7c:3c:13:
                    b5:44:33:f2:ea:e1:2f:5a:b6:c5:4e:ae:a1:61:de:
                    00:4d:31:ae:f2:0a:d8:94:1f:5a:70:24:36:aa:2f:
                    99:cb:ad:c5:93:6f:ef:62:11:7c:15:6d:fe:c7:b2:
                    09:f8:d9:53:55:e5:c5:a2:8b:80:50:42:e6:33:b7:
                    00:d9:3e:d5:b4:c9:e9:e1:42:db:82:04:e7:45:1e:
                    bd:0b:1c:a9:bd:55:37:b3:6a:54:6c:8f:b6:43:77:
                    27:a2:c8:2b:4e:ae:a2:65:d2:b3:d6:73:68:d7:0b:
                    4c:85:69:b0:01:68:52:cf:2b:ff:5e:dc:19:24:cc:
                    44:a8:42:3b:b8:c9:ce:42:47:62:6c:e9:5a:ed:de:
                    89:b9:73:ff:7c:bb:84:85:a3:e2:a6:23:bc:88:83:
                    4d:aa:b8:2c:ed:45:b0:7f:dc:4b:e0:1c:c9:c3:a9:
                    6d:87:b8:87:d7:ce:78:14:db:9a:7d:0d:8e:83:03:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9A:72:56:0E:7C:1C:34:2D:52:1C:3A:84:12:9C:33:09:C8:E5:4F
            X509v3 Authority Key Identifier:
                keyid:07:E2:EE:D7:F6:7E:4D:80:DB:F6:C3:2B:E5:95:1A:07:FD:62:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136302e302f32322d3232203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:84:c3:3f:81:00:25:2b:a6:ac:10:39:a0:f5:fa:db:c4:
         be:de:9a:54:51:be:48:63:a8:97:9b:2e:c8:4c:79:df:b2:0b:
         06:e3:aa:02:37:f6:a3:e7:65:3f:da:62:cd:de:67:65:c2:d7:
         21:a8:67:20:52:b6:2b:c9:8a:d1:7f:10:38:5f:b2:65:19:bd:
         28:2d:75:4d:6d:35:0f:31:62:81:91:de:88:70:1b:80:15:f7:
         b4:54:a5:43:94:3e:55:31:85:56:50:fa:cc:69:5b:dc:9f:2c:
         19:95:2d:0c:cd:01:b5:9a:5a:5a:74:57:cb:0c:72:3e:97:d4:
         5d:b7:e1:ce:1b:60:78:bc:a0:3d:30:0e:ad:4e:20:11:c3:d0:
         fa:5c:61:ae:6d:02:75:4b:c7:15:2c:70:4c:77:50:28:d7:f0:
         19:c8:93:24:46:71:cd:8e:6d:5b:43:64:f9:a3:80:ce:aa:7e:
         f1:3a:96:f3:ec:95:23:59:5d:b4:60:1f:5c:9a:92:6e:d0:42:
         05:b3:8f:b0:e6:23:52:b6:53:57:8f:96:e0:f6:99:93:b4:06:
         ff:91:5c:02:dc:a5:3f:58:40:c7:13:b6:31:4d:7c:d7:90:b3:
         db:f3:10:b8:61:9b:48:e6:68:82:36:e8:73:73:29:05:74:98:
         f9:41:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org