Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136332e302f32342d3234203d3e20323637353735.roa
File:                     34352e37302e3136332e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier:          UbU5TgNhoHqLN8w0VumQ/zXST+TTbouv4tDLV9PazGc=
Subject key identifier:   52:6C:BD:27:26:5D:D8:F4:5F:3E:1D:7A:5A:EA:DC:09:EA:0B:F4:3A
Certificate issuer:       /CN=07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B
Certificate serial:       42937382D8DBDBEB9FB3C18B2278E92F1BB78237
Authority key identifier: 07:E2:EE:D7:F6:7E:4D:80:DB:F6:C3:2B:E5:95:1A:07:FD:62:8C:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136332e302f32342d3234203d3e20323637353735.roa
Signing time:             Fri 19 Apr 2024 16:59:51 +0000
ROA not before:           Fri 19 Apr 2024 16:54:51 +0000
ROA not after:            Fri 18 Apr 2025 16:59:51 +0000
asID:                     267575
IP address blocks:        45.70.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:93:73:82:d8:db:db:eb:9f:b3:c1:8b:22:78:e9:2f:1b:b7:82:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B
        Validity
            Not Before: Apr 19 16:54:51 2024 GMT
            Not After : Apr 18 16:59:51 2025 GMT
        Subject: CN=526CBD27265DD8F45F3E1D7A5AEADC09EA0BF43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:31:ed:a1:c3:8e:57:7d:38:e8:a2:c6:21:
                    4e:a8:41:a2:3e:44:c3:7c:8a:70:55:f0:a4:94:63:
                    19:e0:f6:24:87:d5:62:f1:b4:d5:61:01:62:2e:36:
                    f5:0d:25:55:de:93:ee:a2:c8:d6:f1:da:21:71:d3:
                    33:5b:d4:80:b3:88:0f:88:9f:34:15:db:81:da:4f:
                    86:df:84:09:5f:9b:36:85:8c:3d:81:f6:93:96:d3:
                    8e:12:62:86:a2:f0:98:86:25:7e:8b:a3:2d:73:46:
                    dc:22:1f:3b:41:a7:d3:75:cc:9c:a1:9a:ac:22:f8:
                    32:84:5e:41:e5:31:5f:39:e1:bf:f3:56:65:c4:d4:
                    8a:8a:c2:52:db:92:5c:09:ff:60:ff:fc:8f:6e:0e:
                    ce:b5:1a:a5:68:35:15:64:27:c7:86:de:9d:d8:58:
                    13:46:89:f2:fd:88:ef:58:c2:8b:0d:e7:68:34:2f:
                    59:28:6b:52:53:11:86:97:c4:68:ab:e3:0e:09:e7:
                    f6:45:f5:bf:12:ad:b0:88:b3:e0:ab:86:7f:cc:18:
                    08:f1:a6:28:35:a8:07:23:7a:b0:d3:d2:28:ce:4e:
                    ad:3e:77:e0:a8:52:44:32:81:c5:84:2f:bb:47:fe:
                    a7:4e:3f:92:45:20:22:a2:6a:e0:fc:3f:86:11:02:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6C:BD:27:26:5D:D8:F4:5F:3E:1D:7A:5A:EA:DC:09:EA:0B:F4:3A
            X509v3 Authority Key Identifier:
                keyid:07:E2:EE:D7:F6:7E:4D:80:DB:F6:C3:2B:E5:95:1A:07:FD:62:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07E2EED7F67E4D80DBF6C32BE5951A07FD628C2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136332e302f32342d3234203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f5:42:13:c9:19:f4:4e:5f:0e:db:08:7f:ba:be:fe:62:82:
         a8:de:10:b2:a8:94:ea:be:b4:9a:6a:fc:a3:2b:be:10:be:d9:
         a8:4f:3c:78:22:f3:f7:92:95:e5:90:29:b3:42:bb:02:6e:45:
         d6:8f:2a:12:34:94:8a:45:43:44:10:8d:d1:79:a9:ac:41:77:
         a5:d3:1b:c6:00:76:85:65:63:e4:00:e5:9a:6a:7b:29:26:33:
         17:a8:3f:9d:77:3a:7d:36:17:28:aa:f4:a2:38:4b:8f:64:87:
         11:d3:db:2d:52:05:58:e3:a8:e0:5d:45:d1:25:85:3c:a9:11:
         9e:32:c7:2b:7b:e7:62:8b:1d:52:1d:9c:f5:f3:1d:b3:74:cc:
         fc:12:39:df:85:54:d6:f6:b7:5e:cc:7a:7a:b1:0e:79:6d:99:
         b3:8b:c4:f2:be:a4:35:4b:05:52:b1:b3:80:27:64:18:d9:67:
         e4:8f:3d:40:94:0f:a2:4d:f2:0d:e3:bd:a9:12:10:a6:4f:b3:
         74:dc:91:69:ad:eb:d6:02:fa:dc:b8:47:75:62:ab:b9:47:84:
         ef:f7:fb:22:b6:05:71:44:18:eb:ee:ee:ce:2e:07:18:a3:ed:
         41:e4:53:26:50:f4:f6:79:05:35:04:ef:5f:91:11:16:a7:8a:
         46:2c:8d:94
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQpNzgtjb2+ufs8GLInjpLxu3gjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdFMkVFRDdGNjdFNEQ4MERCRjZDMzJCRTU5NTFBMDdG
RDYyOEMyQjAeFw0yNDA0MTkxNjU0NTFaFw0yNTA0MTgxNjU5NTFaMDMxMTAvBgNV
BAMTKDUyNkNCRDI3MjY1REQ4RjQ1RjNFMUQ3QTVBRUFEQzA5RUEwQkY0M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5czHtocOOV3046KLGIU6oQaI+
RMN8inBV8KSUYxng9iSH1WLxtNVhAWIuNvUNJVXek+6iyNbx2iFx0zNb1ICziA+I
nzQV24HaT4bfhAlfmzaFjD2B9pOW044SYoai8JiGJX6Loy1zRtwiHztBp9N1zJyh
mqwi+DKEXkHlMV854b/zVmXE1IqKwlLbklwJ/2D//I9uDs61GqVoNRVkJ8eG3p3Y
WBNGifL9iO9YwosN52g0L1koa1JTEYaXxGir4w4J5/ZF9b8SrbCIs+Crhn/MGAjx
pig1qAcjerDT0ijOTq0+d+CoUkQygcWEL7tH/qdOP5JFICKiauD8P4YRAgfDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUmy9JyZd2PRfPh16WurcCeoL9DowHwYDVR0j
BBgwFoAUB+Lu1/Z+TYDb9sMr5ZUaB/1ijCswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNnZFZyeG53VlBidFFoazY1a0xZR3c1WkpBMzk3ZzZmQ0RQeWF6TW11
UjcvMC8wN0UyRUVEN0Y2N0U0RDgwREJGNkMzMkJFNTk1MUEwN0ZENjI4QzJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3RTJFRUQ3RjY3RTREODBE
QkY2QzMyQkU1OTUxQTA3RkQ2MjhDMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTZ2RWcnhud1ZQYnRRaGs2NWtMWUd3NVpKQTM5N2c2ZkNEUHlhek1tdVI3LzAv
MzQzNTJlMzczMDJlMzEzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzUzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUajMA0GCSqGSIb3DQEBCwUAA4IBAQBq9UITyRn0
Tl8O2wh/ur7+YoKo3hCyqJTqvrSaavyjK74QvtmoTzx4IvP3kpXlkCmzQrsCbkXW
jyoSNJSKRUNEEI3ReamsQXel0xvGAHaFZWPkAOWaanspJjMXqD+ddzp9NhcoqvSi
OEuPZIcR09stUgVY46jgXUXRJYU8qRGeMscre+diix1SHZz18x2zdMz8EjnfhVTW
9rdezHp6sQ55bZmzi8TyvqQ1SwVSsbOAJ2QY2Wfkjz1AlA+iTfIN472pEhCmT7N0
3JFprevWAvrcuEd1Yqu5R4Tv9/sitgVxRBjr7u7OLgcYo+1B5FMmUPT2eQU1BO9f
kREWp4pGLI2U
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org