Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136322e302f32332d3233203d3e20323637353735.roa
File:                     34352e37302e3136322e302f32332d3233203d3e20323637353735.roa (raw, json)
Hash identifier:          e/OgMpXxUXxsXNIS8raWOSMIS/QuU8FXocT2uXegvv0=
Subject key identifier:   AB:C4:D6:4A:93:8F:96:F4:C4:07:A5:4F:2F:A1:29:9B:97:72:C8:DC
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       3DD69F85DFC74406B6EC06725ECA3D558DAFAC43
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136322e302f32332d3233203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:45 +0000
ROA not before:           Thu 11 Jan 2024 17:58:45 +0000
ROA not after:            Thu 09 Jan 2025 18:03:45 +0000
asID:                     267575
IP address blocks:        45.70.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d6:9f:85:df:c7:44:06:b6:ec:06:72:5e:ca:3d:55:8d:af:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:45 2024 GMT
            Not After : Jan  9 18:03:45 2025 GMT
        Subject: CN=ABC4D64A938F96F4C407A54F2FA1299B9772C8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:25:25:11:d5:7d:b3:c7:fd:ad:39:a5:d9:
                    82:63:92:0f:7a:7f:23:49:72:66:48:99:ca:c0:41:
                    6c:1a:05:1f:ac:eb:dc:d8:3e:c3:95:c7:86:27:ae:
                    ea:7e:10:f8:25:d3:45:da:f3:b9:bf:c5:0a:fb:60:
                    c2:40:68:a7:f8:26:33:4d:7c:42:0b:c8:8d:56:2f:
                    dc:4b:71:62:23:15:17:d1:a0:00:a3:aa:68:46:d8:
                    d7:73:de:d6:d0:b3:07:21:98:c1:cd:f4:42:17:5c:
                    52:f8:4c:44:41:03:93:3e:e3:c0:81:28:d6:53:3c:
                    f4:b8:8e:3b:f5:a8:a0:6e:fa:2d:aa:f6:f4:bf:31:
                    e7:0d:40:0d:86:8a:30:b5:49:f3:54:f8:e3:1f:84:
                    ea:ff:8d:12:ed:91:c4:6a:5b:2a:02:13:73:c5:a5:
                    e7:79:bf:47:ac:43:8d:e2:ed:42:c7:59:2e:e6:9b:
                    cc:97:ce:7a:68:6e:c3:ec:66:cf:35:3d:34:1c:db:
                    17:7f:d1:4c:88:14:06:2a:a8:e5:e0:9d:17:cf:fb:
                    2e:f7:ad:40:7f:28:52:4c:24:4f:6e:8e:86:f5:35:
                    e1:77:8c:bd:03:59:23:d2:64:3d:03:35:aa:75:4c:
                    ac:a9:0a:c6:9d:f8:b7:1c:f7:1d:38:2f:b6:cf:03:
                    32:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C4:D6:4A:93:8F:96:F4:C4:07:A5:4F:2F:A1:29:9B:97:72:C8:DC
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136322e302f32332d3233203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:77:6a:f2:48:fa:81:62:b8:fb:72:85:14:6e:00:e1:93:
         9e:88:02:95:c9:9c:26:7a:67:39:28:bc:e5:11:d9:db:48:a4:
         4e:48:84:3a:df:5a:bd:00:af:5e:9c:77:a2:c8:77:bd:69:2f:
         89:f1:fb:d1:e3:d9:cd:6b:eb:30:5e:4c:98:3d:ae:95:ae:dd:
         16:d6:a6:fc:b9:2c:f4:bb:0a:42:7b:88:21:cf:15:25:39:01:
         ef:16:7f:f0:58:b6:3b:24:10:91:09:a2:08:e2:16:b6:62:ba:
         91:24:7a:dc:8e:bf:df:da:53:36:8c:f5:c8:2a:6c:d7:41:27:
         80:58:98:2f:48:7a:62:6d:dc:41:d2:ef:87:d3:91:ea:a6:b5:
         87:bc:30:4a:ea:ac:07:26:a8:11:39:bd:57:6f:8d:21:cb:7b:
         bc:86:95:82:0c:9c:06:18:75:83:36:62:ad:02:c3:78:07:6e:
         69:21:3d:47:4d:e9:e4:a5:f5:9c:14:a1:09:78:36:78:0d:46:
         3e:58:ba:a7:b8:a7:87:c8:c0:e0:2c:db:17:f6:f8:3d:7c:7e:
         2a:06:ed:dd:1a:ec:15:6b:60:f9:54:81:61:d2:1f:2a:6a:01:
         08:11:d1:48:40:f9:f8:9e:84:49:87:1e:af:a7:33:a2:b7:60:
         f2:f9:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org