Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136302e302f32332d3233203d3e20323637353735.roa
File:                     34352e37302e3136302e302f32332d3233203d3e20323637353735.roa (raw, json)
Hash identifier:          JJKXqlTXnCzPVivVh/kw7pL+MiY0UcRbjOz22ZwXzSU=
Subject key identifier:   28:2F:F4:D7:35:B5:1C:F7:ED:30:09:BD:0D:4A:BC:39:B6:8D:29:2A
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       14FBC17554FE5EC128E586FE13684008C0FF0008
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136302e302f32332d3233203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:46 +0000
ROA not before:           Thu 11 Jan 2024 17:58:46 +0000
ROA not after:            Thu 09 Jan 2025 18:03:46 +0000
asID:                     267575
IP address blocks:        45.70.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:c1:75:54:fe:5e:c1:28:e5:86:fe:13:68:40:08:c0:ff:00:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:46 2024 GMT
            Not After : Jan  9 18:03:46 2025 GMT
        Subject: CN=282FF4D735B51CF7ED3009BD0D4ABC39B68D292A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:49:3c:c7:6c:6f:0d:79:59:0d:c4:03:70:
                    97:89:28:04:ca:21:54:0f:52:d3:c3:66:b1:f4:b8:
                    19:96:1b:91:88:bb:17:f1:d1:86:69:87:f0:1e:ff:
                    75:4c:8c:31:22:50:0f:85:87:41:e7:e6:00:fb:f8:
                    c7:e4:84:c0:3c:dd:57:26:69:00:dc:55:34:c6:a2:
                    34:12:a5:e3:a8:03:33:1f:77:59:b4:fa:41:04:22:
                    68:92:a3:20:a1:41:c2:60:c3:3f:fb:ec:cb:73:99:
                    e0:d9:54:8d:c6:05:8d:24:f2:60:a9:a4:c5:88:bf:
                    41:07:f7:9c:7b:3c:e3:aa:b0:76:65:5a:d2:a8:05:
                    f0:79:65:33:85:7e:74:12:6d:c3:6a:61:3f:94:de:
                    85:99:df:25:3a:fc:0b:e0:87:9e:e0:5f:87:68:21:
                    e3:29:88:4f:21:a7:01:80:75:c8:64:27:d4:13:e6:
                    05:41:24:a6:42:4e:61:01:05:88:8d:f5:76:9d:03:
                    10:5f:5a:8c:0a:bd:7e:45:af:b1:c2:65:d0:6a:4c:
                    fb:4d:d9:80:97:2d:1b:32:b0:eb:0f:40:20:9d:43:
                    99:4c:c6:03:67:6e:aa:0b:1f:4d:26:e9:ff:01:47:
                    d0:e6:6c:59:89:53:01:ee:5b:09:30:96:73:82:6a:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2F:F4:D7:35:B5:1C:F7:ED:30:09:BD:0D:4A:BC:39:B6:8D:29:2A
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136302e302f32332d3233203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:c2:4e:86:72:23:10:30:a5:42:ce:e8:a6:e2:89:59:2a:a7:
         b0:d3:13:02:7b:ba:ea:c7:ca:cb:ec:c1:9e:30:66:08:4d:50:
         13:50:7c:dc:b9:e0:73:ca:b2:70:e1:2e:d5:17:50:ec:95:cd:
         8b:f9:13:6e:6f:c3:ae:65:b4:0d:10:16:6e:ab:7e:2c:0d:08:
         6b:0d:77:0b:93:96:33:8c:b1:5e:e5:ee:38:1c:58:41:d9:a9:
         52:a6:b6:4b:34:f3:24:6b:4e:c7:4e:e7:df:15:1b:6d:2f:07:
         a0:d7:50:c6:e8:45:f0:b0:7d:d4:57:b6:2b:46:28:44:51:31:
         20:00:1c:b1:6c:11:d8:6e:47:ab:6c:38:9c:35:0b:64:b5:0d:
         56:00:63:f7:80:80:45:e7:f0:a8:09:10:be:a5:42:4e:9e:35:
         51:62:20:56:6d:72:af:82:76:7d:8d:ec:3a:77:90:ca:91:c4:
         b4:a4:cb:46:03:8a:8f:c6:e0:d5:6d:2f:05:8e:0e:37:72:6f:
         20:df:1e:40:ea:79:de:fb:ad:bf:dd:ca:f1:7c:18:e2:5b:2b:
         d5:45:9e:3c:1f:54:05:00:4c:46:00:b4:af:bc:ef:ec:d8:6c:
         b4:18:4e:0b:54:63:a1:80:fd:19:2c:3c:e8:8c:4d:35:52:39:
         05:51:ee:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org