Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131322e302f32342d3234203d3e20323637353631.roa
File:                     34352e37302e3131322e302f32342d3234203d3e20323637353631.roa (raw, json)
Hash identifier:          Cq7lyQQe4ebpAYafGXrEzU8AMnjhXss46rRjSJiVmCE=
Subject key identifier:   E1:7A:07:F8:BC:08:5E:31:88:5A:2B:D2:A6:C4:BB:A5:C6:5C:E0:3D
Certificate issuer:       /CN=E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5
Certificate serial:       1DB0FB8BB2F58F85DD37638901409B7039D34D53
Authority key identifier: E4:BB:7B:7E:EF:AB:6D:FD:FD:44:41:96:60:45:A2:3C:F0:6D:02:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131322e302f32342d3234203d3e20323637353631.roa
Signing time:             Mon 04 Mar 2024 19:32:52 +0000
ROA not before:           Mon 04 Mar 2024 19:27:52 +0000
ROA not after:            Mon 03 Mar 2025 19:32:52 +0000
asID:                     267561
IP address blocks:        45.70.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b0:fb:8b:b2:f5:8f:85:dd:37:63:89:01:40:9b:70:39:d3:4d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5
        Validity
            Not Before: Mar  4 19:27:52 2024 GMT
            Not After : Mar  3 19:32:52 2025 GMT
        Subject: CN=E17A07F8BC085E31885A2BD2A6C4BBA5C65CE03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:8b:13:f0:ee:91:79:15:3a:ea:5a:ce:89:
                    10:b4:86:12:ca:ff:b7:cd:87:a6:20:0d:b7:0b:3e:
                    cc:ba:08:45:34:eb:57:cc:59:10:19:75:ba:f3:ac:
                    e9:f6:db:d8:b8:7d:cc:da:34:bc:0f:aa:69:3c:67:
                    34:78:af:07:0e:06:c4:34:a0:a6:c9:47:e8:b3:eb:
                    66:1a:dd:cb:e7:50:55:78:9c:5c:3a:7e:ca:16:93:
                    80:02:87:8e:12:ab:22:69:a8:a6:39:12:2f:b5:3e:
                    87:b8:20:3e:24:57:d6:60:b7:20:a2:ac:96:b7:16:
                    b0:68:1f:bc:ed:cd:5f:8b:41:97:1e:63:2c:18:72:
                    18:a4:ef:bf:da:dc:dc:f9:c4:53:d0:03:ae:04:3c:
                    01:b5:5f:3f:b4:18:46:c7:25:db:5c:8c:dc:29:b0:
                    ef:be:4e:67:22:c7:9d:aa:73:78:bd:fa:0b:aa:ef:
                    73:04:37:e1:74:33:23:37:23:66:1c:a9:37:1f:a1:
                    33:25:55:cf:ea:71:9b:7b:07:6b:93:b7:73:47:ce:
                    fe:6a:d8:dd:a4:3a:60:30:89:a4:96:a4:0b:95:3e:
                    c7:a4:a3:14:96:89:3b:f7:6e:b5:2c:67:cb:40:d6:
                    6d:59:be:e8:3e:20:43:be:d3:fb:0e:a6:e6:e5:3e:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7A:07:F8:BC:08:5E:31:88:5A:2B:D2:A6:C4:BB:A5:C6:5C:E0:3D
            X509v3 Authority Key Identifier:
                keyid:E4:BB:7B:7E:EF:AB:6D:FD:FD:44:41:96:60:45:A2:3C:F0:6D:02:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131322e302f32342d3234203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:23:f2:e9:a3:b5:42:d8:a4:fb:3f:5d:28:65:fa:c6:07:
         69:05:0f:87:98:5e:58:40:fd:f0:42:2f:a9:10:2c:72:df:28:
         af:b1:4c:88:40:20:f5:63:1b:66:45:cc:0f:c5:5e:68:03:4f:
         25:20:5f:35:bc:e1:7a:d0:a7:e1:1d:74:c3:ca:ec:04:bd:99:
         2f:2c:88:ee:37:d1:37:41:2c:a6:85:47:8f:04:0c:1b:60:4f:
         ab:52:d2:1b:05:fd:90:70:df:33:25:25:dd:0e:ae:a7:c8:27:
         16:63:61:ef:3b:21:45:80:8a:b5:20:23:5e:af:37:e2:b3:c1:
         03:99:b4:57:7e:14:82:04:71:ba:89:55:fb:0e:d3:50:75:85:
         50:30:b1:9a:0e:f1:5d:3e:78:73:d6:e9:50:19:1f:87:1d:47:
         8d:49:4a:9e:c2:f3:f4:55:36:93:f1:91:e8:08:09:3f:a7:30:
         14:86:ef:b0:88:40:72:66:9f:c2:2b:d4:ae:0a:e2:25:6a:fa:
         7f:a3:05:68:97:1b:92:a1:29:16:5f:bf:70:e0:16:86:a6:22:
         37:78:39:9f:29:c4:31:18:e3:37:19:e6:d9:fd:b1:95:ef:19:
         90:e2:4b:57:96:c6:54:7d:16:7e:9b:b9:82:71:d2:7c:d7:b0:
         d3:23:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org