Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131342e302f32342d3234203d3e20323637353631.roa
File:                     34352e37302e3131342e302f32342d3234203d3e20323637353631.roa (raw, json)
Hash identifier:          r55m2IqipLO5eEMAs1H1GO9LHwS9+JkcQePxPASH0hw=
Subject key identifier:   52:77:10:33:D5:ED:C8:4D:C2:6C:A4:30:C5:B8:82:52:68:6D:02:E4
Certificate issuer:       /CN=9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9
Certificate serial:       6AFCEB31CF49CE31FE3E6F980BA64326D8F1B20A
Authority key identifier: 9A:70:F3:8D:C7:D8:D6:2E:DE:E0:B9:D5:B4:7E:71:66:54:1A:49:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131342e302f32342d3234203d3e20323637353631.roa
Signing time:             Wed 27 Dec 2023 11:50:41 +0000
ROA not before:           Wed 27 Dec 2023 11:45:41 +0000
ROA not after:            Wed 25 Dec 2024 11:50:41 +0000
asID:                     267561
IP address blocks:        45.70.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fc:eb:31:cf:49:ce:31:fe:3e:6f:98:0b:a6:43:26:d8:f1:b2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9
        Validity
            Not Before: Dec 27 11:45:41 2023 GMT
            Not After : Dec 25 11:50:41 2024 GMT
        Subject: CN=52771033D5EDC84DC26CA430C5B88252686D02E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:4d:6b:61:12:f6:0f:1c:3c:b0:44:d4:22:
                    25:33:18:56:c2:ff:61:77:7c:59:b7:30:7b:e9:cc:
                    3b:79:31:81:34:9b:6d:a3:6c:f4:98:5c:10:a7:d2:
                    1b:d4:dd:c1:22:3f:ae:f6:f1:af:d2:de:02:6c:5b:
                    7a:a6:48:95:75:5e:f5:91:e7:86:5b:3c:46:81:23:
                    1a:ac:88:52:e2:fa:5c:ee:d4:88:50:a4:e2:3e:39:
                    03:f5:93:cd:97:af:ec:5c:1f:ac:e2:57:fb:26:02:
                    91:38:f9:f8:34:5c:e0:9a:d9:f2:dd:16:4f:ab:54:
                    44:e1:10:41:5c:83:3c:21:d5:e8:f2:34:54:e7:45:
                    8c:8f:91:89:8c:b4:e3:d8:1b:c9:42:35:ea:b0:f0:
                    39:34:05:8a:80:86:cf:27:ff:59:7e:8c:07:1c:4d:
                    ee:a0:4d:fc:c3:00:71:87:2b:e9:83:c9:32:4e:3e:
                    42:91:f2:61:b9:f5:8b:92:01:d9:d0:7c:cc:d4:fb:
                    c1:0a:55:ef:8d:87:f6:5d:3f:be:50:e9:b2:b6:12:
                    8b:ac:33:4b:6b:7a:55:34:2f:f4:65:53:2e:4a:cb:
                    61:17:fb:e1:a7:8e:81:d6:cc:c4:0a:a3:b1:db:ad:
                    9c:f1:84:72:f6:a7:01:55:fa:81:f8:dd:0c:1c:9c:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:77:10:33:D5:ED:C8:4D:C2:6C:A4:30:C5:B8:82:52:68:6D:02:E4
            X509v3 Authority Key Identifier:
                keyid:9A:70:F3:8D:C7:D8:D6:2E:DE:E0:B9:D5:B4:7E:71:66:54:1A:49:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131342e302f32342d3234203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:5f:7d:6d:5a:bc:7d:3b:3b:31:92:a5:b1:64:cb:53:f1:fb:
         1a:fd:59:2d:c1:b8:d3:6a:42:a9:3e:c8:e2:c5:c2:51:74:85:
         f0:78:1e:e3:68:6f:21:38:a3:98:9a:99:49:9c:d2:e9:61:ea:
         4a:5d:3f:7d:7b:e4:a4:97:40:21:d9:0c:38:0e:1f:8a:8e:33:
         69:c1:80:11:ef:2e:60:ec:fb:56:53:0b:20:de:43:ca:4e:34:
         75:60:61:e6:e3:03:6e:c7:7a:35:9d:f8:9c:64:7f:86:47:21:
         81:ca:26:12:f1:99:c5:b1:61:a5:19:26:70:94:d0:f5:50:6c:
         82:e4:dc:df:fe:e3:94:cc:b5:20:52:09:0c:ad:76:1c:f8:6f:
         68:7a:c9:84:dc:28:b0:8d:91:4a:06:55:4f:2f:38:46:18:9c:
         94:a2:f9:a7:57:d8:ee:93:80:7a:e7:c7:80:1b:c7:98:57:42:
         a7:52:c6:f2:92:c4:2a:bd:c1:92:4e:1f:44:1c:7d:4e:0a:6b:
         7d:95:9f:5e:35:e9:02:3c:8e:38:ed:ca:13:5e:3f:34:a0:fb:
         5e:fd:98:53:fd:9a:81:5c:76:d4:6f:29:c9:57:a7:87:3e:c0:
         2f:ae:09:e0:a9:50:8b:ac:bf:18:9d:f8:d7:00:bf:ed:36:95:
         79:fe:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org