Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e37302e302f32342d3234203d3e20323639353732.roa
File:                     34352e3138392e37302e302f32342d3234203d3e20323639353732.roa (raw, json)
Hash identifier:          akZxq3Ov8hMCYWOuqliz2E0M/9/veJLlHDaUfy+VlzU=
Subject key identifier:   D9:9B:A7:56:5B:D2:57:8D:EE:53:B7:69:69:30:23:CE:E6:0D:17:44
Certificate issuer:       /CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
Certificate serial:       3F566E577F34C5938EB0002B3EFF4FC98718A386
Authority key identifier: FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e37302e302f32342d3234203d3e20323639353732.roa
Signing time:             Mon 24 Jul 2023 17:00:00 +0000
ROA not before:           Mon 24 Jul 2023 16:55:00 +0000
ROA not after:            Mon 22 Jul 2024 17:00:00 +0000
asID:                     269572
IP address blocks:        45.189.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:56:6e:57:7f:34:c5:93:8e:b0:00:2b:3e:ff:4f:c9:87:18:a3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
        Validity
            Not Before: Jul 24 16:55:00 2023 GMT
            Not After : Jul 22 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:89:ff:dd:31:32:ca:c4:88:66:08:12:15:
                    d9:71:5c:b5:b5:4f:69:11:f0:cb:03:1d:a0:34:cb:
                    c3:10:4c:f9:ed:06:fb:fe:de:47:23:e0:56:7c:f4:
                    92:3e:46:5d:7b:93:4d:d7:49:0e:23:f5:86:84:80:
                    09:4a:fe:53:d5:0a:1a:62:96:6d:77:ea:19:e2:d2:
                    32:88:95:0b:8d:f1:4c:2e:48:1f:d1:dc:05:b9:cc:
                    f3:87:a6:df:75:e6:6d:04:df:90:73:8b:cc:49:f3:
                    8b:c1:06:42:35:a7:cd:af:da:69:78:c2:d6:f2:2b:
                    a7:25:ef:6f:11:40:c9:1e:b0:14:29:b5:9c:87:83:
                    c6:ed:b7:17:62:a1:6a:70:81:37:52:ff:4c:3a:a6:
                    fd:15:f5:b0:29:38:38:a7:af:59:2e:51:c5:80:dd:
                    ec:68:60:a5:8c:66:4c:a0:d0:88:f9:56:02:88:a8:
                    46:f2:24:98:42:ad:a1:33:d6:df:85:c6:e5:09:96:
                    45:0c:72:f9:15:d7:88:00:4e:25:62:d4:fa:2f:13:
                    67:e4:b7:8b:4c:e0:02:73:19:95:f6:3d:77:87:a8:
                    96:68:57:70:33:90:a6:3e:57:31:18:d0:45:53:0b:
                    7e:57:98:e7:78:11:be:14:45:e5:80:0f:89:21:b5:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9B:A7:56:5B:D2:57:8D:EE:53:B7:69:69:30:23:CE:E6:0D:17:44
            X509v3 Authority Key Identifier:
                keyid:FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e37302e302f32342d3234203d3e20323639353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:c9:ed:d7:c3:93:c0:68:96:5c:8b:e6:54:01:fc:39:af:
         e2:f3:55:c2:51:be:b8:d3:58:a7:38:ee:4c:64:e2:f3:15:38:
         9d:0e:41:41:06:0f:d3:6c:29:35:a9:73:8a:2e:7f:74:0c:95:
         64:7e:cc:14:65:9a:cd:ba:8f:34:f2:da:4a:62:4a:38:10:92:
         52:5f:f8:5f:81:c3:b3:5c:5f:41:ab:01:26:b8:82:48:9a:c8:
         e7:0d:02:68:35:16:0c:f3:36:d1:02:3b:61:b7:4c:52:ef:0f:
         95:58:c4:8e:52:94:0a:b6:07:49:6f:d6:66:d8:ec:b0:cb:72:
         fa:fc:71:1e:92:b3:6b:dc:39:dc:ab:88:06:3a:a5:2d:7d:54:
         18:f1:44:7d:91:d8:87:66:7f:65:7e:b1:95:b2:1d:c1:c6:4a:
         09:9f:99:aa:14:2a:60:d2:e6:21:26:cd:c8:84:8e:97:27:4e:
         01:73:ab:45:cf:dc:4b:95:8f:5c:cb:2c:7b:cc:65:79:9b:72:
         15:19:e2:a2:a0:be:10:ce:c5:15:c3:b4:9d:cf:16:10:63:8b:
         b2:67:5b:25:f0:64:66:f3:41:88:73:f7:73:21:0d:0f:73:d2:
         0f:7e:2a:a1:f7:d1:85:54:9f:c2:4f:9e:d7:b1:65:9c:1b:6c:
         90:16:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org