Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e37302e34302e302f32322d3332203d3e20323637353436.roa
File:                     34352e37302e34302e302f32322d3332203d3e20323637353436.roa (raw, json)
Hash identifier:          4i45Gi7riafWyo4g7yUtbXLRnl7NPGvGlm2QILacFjE=
Subject key identifier:   2B:8A:F5:AF:1C:EA:7F:81:78:E2:55:8F:8F:64:37:91:0F:24:93:4E
Certificate issuer:       /CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Certificate serial:       4F624FCFA3444C3AFFDF032680B61A4B6A2A208B
Authority key identifier: B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e37302e34302e302f32322d3332203d3e20323637353436.roa
Signing time:             Tue 13 Feb 2024 23:58:00 +0000
ROA not before:           Tue 13 Feb 2024 23:53:00 +0000
ROA not after:            Tue 11 Feb 2025 23:58:00 +0000
asID:                     267546
IP address blocks:        45.70.40.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:62:4f:cf:a3:44:4c:3a:ff:df:03:26:80:b6:1a:4b:6a:2a:20:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
        Validity
            Not Before: Feb 13 23:53:00 2024 GMT
            Not After : Feb 11 23:58:00 2025 GMT
        Subject: CN=2B8AF5AF1CEA7F8178E2558F8F6437910F24934E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:2b:5a:a1:99:a1:35:af:23:c9:c9:f5:4f:
                    e7:93:5a:fd:ab:9f:4f:f1:07:57:2c:30:e7:36:20:
                    7c:06:ab:22:3a:b4:b5:4c:8b:8b:0f:81:ec:ce:b7:
                    56:8a:1f:0e:f5:d7:60:cd:cf:7c:ab:9d:96:5e:20:
                    54:cc:da:b8:27:c5:a3:d5:a7:d4:ca:bb:2c:1f:32:
                    ae:63:2b:5a:9d:eb:96:6f:a4:ed:0f:37:ee:a3:b9:
                    e5:16:45:f6:95:d7:65:6f:75:df:da:34:ea:43:43:
                    04:b2:6b:33:3f:66:5a:04:2b:c3:59:0f:e5:e0:e4:
                    87:54:12:2d:b9:11:6c:75:f2:82:49:fd:0f:0c:41:
                    95:12:5c:07:97:52:f9:f2:54:da:38:69:39:98:fa:
                    58:ba:ac:9b:d1:09:e1:05:16:41:fd:03:b4:b3:63:
                    2a:cb:1b:a3:1f:1e:bf:ff:74:b2:7e:a9:d9:76:a7:
                    8d:63:5a:58:28:bf:54:c0:6b:4b:64:be:ac:73:d6:
                    c3:ab:48:53:d3:78:8a:66:2c:2b:b9:cc:bc:32:d5:
                    76:4c:bc:51:ce:c7:67:d6:c4:46:a8:3a:f8:e8:35:
                    e7:65:58:bd:19:4b:0a:8b:39:76:6d:a1:86:f8:e9:
                    f5:f5:4d:fe:0c:ce:b7:18:50:e4:85:9e:8a:6b:f0:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8A:F5:AF:1C:EA:7F:81:78:E2:55:8F:8F:64:37:91:0F:24:93:4E
            X509v3 Authority Key Identifier:
                keyid:B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e37302e34302e302f32322d3332203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:34:19:9c:ca:e4:0e:25:db:c5:29:e7:be:45:c4:b2:e2:fb:
         96:76:54:a4:17:04:73:3a:0e:09:74:42:de:f2:b1:b2:56:52:
         ab:65:24:17:e0:30:24:97:5e:74:42:71:48:bf:79:8b:22:6a:
         ac:db:31:a7:10:d2:35:43:83:8d:49:ac:9c:47:a7:53:ca:23:
         dc:c7:8b:0a:36:04:a8:a2:64:c5:49:19:44:e9:24:d7:d0:6b:
         40:c0:a0:7b:48:05:b7:7d:ed:7e:97:90:a3:24:80:48:81:19:
         34:bd:0f:93:6f:31:41:18:8f:33:0c:f4:93:6c:34:90:e9:0c:
         35:c3:0b:60:0e:63:88:8b:c2:c1:91:73:aa:25:0c:48:81:48:
         94:3c:bb:d7:46:da:bc:89:43:0c:49:37:79:a7:59:b9:5a:3c:
         12:f2:aa:43:79:00:0a:a7:50:c1:1f:02:dd:41:52:93:89:14:
         2d:11:36:68:59:e5:9a:27:20:8f:29:8b:eb:ca:5b:54:e8:c2:
         1d:50:d8:97:f4:e8:f9:81:6b:fd:26:84:06:ba:07:4b:89:4d:
         7d:28:89:c3:04:20:62:5c:7b:31:8e:d7:a6:c8:3a:f9:ce:e5:
         af:7b:84:18:d0:84:9a:82:6f:3b:45:ca:11:f8:32:19:1b:2f:
         9d:a1:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org