Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa
File:                     34352e37302e3137362e302f32322d3234203d3e20323637353736.roa (raw, json)
Hash identifier:          dpL10ZKf9k6gLYAVr+DO4Q952jOrJHUFWMGtcdK7C8k=
Subject key identifier:   08:C2:36:62:CF:A5:68:6F:53:BC:75:01:0F:C8:92:55:D6:26:95:7A
Certificate issuer:       /CN=B37A58E61163D22D689BCC06694E0B41F434AF80
Certificate serial:       1759F4B902CB0A2EE51FC45EAD045AFD700005F6
Authority key identifier: B3:7A:58:E6:11:63:D2:2D:68:9B:CC:06:69:4E:0B:41:F4:34:AF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B37A58E61163D22D689BCC06694E0B41F434AF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa
Signing time:             Thu 22 Feb 2024 15:01:53 +0000
ROA not before:           Thu 22 Feb 2024 14:56:53 +0000
ROA not after:            Thu 20 Feb 2025 15:01:53 +0000
asID:                     267576
IP address blocks:        45.70.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:59:f4:b9:02:cb:0a:2e:e5:1f:c4:5e:ad:04:5a:fd:70:00:05:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37A58E61163D22D689BCC06694E0B41F434AF80
        Validity
            Not Before: Feb 22 14:56:53 2024 GMT
            Not After : Feb 20 15:01:53 2025 GMT
        Subject: CN=08C23662CFA5686F53BC75010FC89255D626957A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:e7:67:42:e8:12:35:80:c8:5c:dd:c9:c8:
                    f2:2b:9c:9f:fb:45:0f:ba:31:0a:31:89:87:6f:bd:
                    0e:26:87:a8:41:94:8c:06:b3:1e:37:c6:7e:71:1f:
                    af:e1:df:8b:ad:77:4a:0d:90:91:93:f7:44:8d:1b:
                    2a:2e:71:42:88:bb:83:45:59:3a:c6:db:93:5e:ab:
                    7a:c2:97:d2:3f:cf:e9:a3:1f:ff:81:b5:f6:bb:f8:
                    66:67:76:4d:d5:3a:29:d6:da:61:15:60:fb:66:d0:
                    79:b9:b8:0c:d6:d0:ed:ab:f8:82:1a:e4:b0:48:28:
                    40:42:8a:b5:12:ee:17:90:91:45:11:e1:8a:72:8e:
                    90:a0:7e:84:c1:5b:4f:51:c2:4e:76:49:77:ad:38:
                    ec:83:76:42:3c:9e:b5:f4:3a:a8:ed:eb:ec:49:74:
                    17:47:ac:b3:39:a4:28:da:7b:38:8e:c3:96:0a:f1:
                    b4:3f:7a:ad:6d:0c:b6:14:f2:52:f9:01:25:c1:51:
                    96:7f:84:23:d7:d4:5f:07:86:16:d0:d9:f2:1f:3c:
                    41:2c:f9:b6:07:86:3b:f4:db:a5:7d:40:7b:d3:d4:
                    8d:46:b3:9f:19:16:89:3b:6a:1b:80:b7:64:5a:a5:
                    38:12:83:a5:66:e1:32:34:9c:3c:61:5c:fb:46:be:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C2:36:62:CF:A5:68:6F:53:BC:75:01:0F:C8:92:55:D6:26:95:7A
            X509v3 Authority Key Identifier:
                keyid:B3:7A:58:E6:11:63:D2:2D:68:9B:CC:06:69:4E:0B:41:F4:34:AF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/B37A58E61163D22D689BCC06694E0B41F434AF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B37A58E61163D22D689BCC06694E0B41F434AF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:70:ad:6f:d1:8f:1d:91:c1:d3:0d:99:72:2b:53:ee:a1:89:
         04:f3:2f:ca:f9:ba:ee:64:3f:37:a5:f8:f2:fb:ce:64:4a:df:
         4c:e9:b8:52:77:85:d3:14:39:79:54:82:79:1e:ef:2d:ac:1d:
         9f:93:ca:9e:8b:3d:c3:3c:33:0c:11:93:eb:b8:1f:d6:2a:7b:
         bb:28:46:df:12:82:65:5d:e0:bb:02:2d:f7:ea:0f:5a:85:c3:
         6c:96:29:41:83:de:c4:5a:da:f7:5d:84:66:4d:a3:5f:9d:af:
         bb:52:ba:7b:eb:1c:e2:7c:3c:fc:60:eb:66:ef:58:51:24:56:
         14:3c:2b:89:1e:1a:f2:e8:c8:1d:c6:07:7c:6f:1f:a1:7d:f1:
         79:65:19:b1:c6:9a:c8:8a:d9:0c:c9:4e:9a:8a:8a:aa:c1:99:
         33:86:3f:cf:0e:ce:37:fd:56:d0:63:3e:ab:d2:eb:d8:1b:5e:
         e9:3d:e4:92:92:24:c9:78:ee:11:cc:f6:44:56:f5:b7:83:e5:
         f8:e4:34:3f:ba:4a:be:27:0c:b9:41:ad:87:a8:84:06:fd:f6:
         7b:88:e0:08:cf:d5:f1:7e:25:b4:58:7d:1f:7c:a4:7c:aa:c3:
         42:41:6e:50:b0:b8:af:cc:42:b3:50:e6:95:e5:f7:42:39:e3:
         e6:f3:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org