Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136312e302f32342d3234203d3e20323637353735.roa
File:                     34352e37302e3136312e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier:          2Vfk6K28s0tXYDvI4MsuU1OoFJKSr/nsPa48ceU+y9A=
Subject key identifier:   34:32:FF:0E:5F:80:48:FD:F1:07:D7:8B:E0:E5:38:D3:DA:23:D0:18
Certificate issuer:       /CN=07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B
Certificate serial:       4942D575D3AAB676C9C921E53578832AA23DB4BB
Authority key identifier: 07:E2:EE:D7:F6:7E:4D:80:DB:F6:C3:2B:E5:95:1A:07:FD:62:8C:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136312e302f32342d3234203d3e20323637353735.roa
Signing time:             Fri 19 Apr 2024 16:59:52 +0000
ROA not before:           Fri 19 Apr 2024 16:54:52 +0000
ROA not after:            Fri 18 Apr 2025 16:59:52 +0000
asID:                     267575
IP address blocks:        45.70.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:42:d5:75:d3:aa:b6:76:c9:c9:21:e5:35:78:83:2a:a2:3d:b4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B
        Validity
            Not Before: Apr 19 16:54:52 2024 GMT
            Not After : Apr 18 16:59:52 2025 GMT
        Subject: CN=3432FF0E5F8048FDF107D78BE0E538D3DA23D018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:b0:37:36:d4:a0:f4:8d:15:72:8d:7b:58:
                    82:88:d4:6b:27:ce:fe:b7:2e:e8:80:d8:a7:2e:d3:
                    f9:11:9f:ea:ed:43:de:c5:ec:5e:9c:70:d4:d3:ba:
                    b9:ce:5d:ea:4f:e2:2e:20:93:ce:a1:ff:61:bd:99:
                    68:0b:93:8e:ae:1b:f8:b9:f5:b4:25:0b:8d:d1:ec:
                    f0:81:e5:ff:1a:1c:33:03:cd:23:93:67:f0:56:61:
                    08:96:07:86:e5:25:18:7b:39:31:0e:bf:4b:21:b4:
                    00:a5:87:76:53:6c:a6:a8:88:1b:b2:97:d8:ad:c1:
                    64:4f:98:f3:9c:f6:22:fc:20:17:13:dd:5b:40:12:
                    21:8d:d4:1c:9a:5b:b6:c3:96:0c:46:51:af:1d:48:
                    05:1e:6d:39:49:d1:e1:8a:59:22:0e:5e:98:1c:ff:
                    dc:8c:29:ec:01:ec:91:10:28:97:de:5d:22:7c:49:
                    55:0d:c1:54:ee:ab:1b:87:24:fd:49:ad:55:33:2d:
                    d0:a8:37:70:c9:bc:92:1c:f7:93:0f:ab:e9:1f:c3:
                    df:87:aa:ff:d6:12:a5:91:31:2a:41:9e:28:8d:75:
                    67:7d:30:61:ae:53:90:33:62:ef:e3:14:96:a5:74:
                    f7:a6:fd:08:f1:a9:31:55:a0:ff:ac:ea:14:b4:1a:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:32:FF:0E:5F:80:48:FD:F1:07:D7:8B:E0:E5:38:D3:DA:23:D0:18
            X509v3 Authority Key Identifier:
                keyid:07:E2:EE:D7:F6:7E:4D:80:DB:F6:C3:2B:E5:95:1A:07:FD:62:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136312e302f32342d3234203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:1d:c5:f6:ed:cf:2e:1e:65:81:2f:93:03:d6:1d:19:27:95:
         b6:d1:ae:a3:fd:47:a1:79:79:48:a7:12:d8:6f:14:02:c9:84:
         4b:91:d5:96:7a:49:3e:85:06:4c:90:4d:ed:3d:a7:e6:49:b1:
         86:4d:55:97:70:ff:9f:c9:31:f2:74:ba:05:64:2d:e6:cf:87:
         3a:2d:11:d2:25:f6:0f:54:f8:a6:8a:b5:27:aa:7e:d6:a0:47:
         55:ce:9a:89:f8:e2:54:a9:2d:4b:e8:ab:93:34:88:b5:a2:f7:
         d3:30:b6:7c:5b:1a:24:0b:17:1e:b9:79:eb:49:53:55:d1:3c:
         d0:b6:29:29:5b:e7:36:94:fb:4e:96:93:6c:09:b5:77:e1:a8:
         87:ec:73:e6:41:96:96:59:a5:c0:b4:11:27:85:8b:1a:19:a9:
         48:ce:12:9d:01:1f:c6:8d:0b:88:46:92:ad:6f:ee:ae:cb:a9:
         d4:36:25:1c:4e:c6:60:4e:55:72:f5:c8:4f:f9:88:b3:c3:83:
         bf:d5:a1:95:ee:36:cf:9e:c6:00:91:d9:47:72:55:b3:e3:24:
         4d:93:b2:09:58:d5:e1:95:d4:d3:dc:d3:a9:15:34:a0:c8:51:
         20:61:61:a8:06:5f:02:f2:07:9c:b5:0a:47:b0:89:f2:2e:f0:
         08:a1:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org