Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
File:                     34352e3137302e342e302f32322d3234203d3e20323638313335.roa (raw, json)
Hash identifier:          WGJXSI3ljkZTRjOkzameYCr5pP5GP0iSDu3u3p8LVfI=
Subject key identifier:   DB:37:D8:D1:98:79:50:AF:62:A2:D2:29:23:C3:86:42:47:79:61:D7
Certificate issuer:       /CN=F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9
Certificate serial:       3AEAACA70F774721D6433C202DA6715B89357083
Authority key identifier: F7:40:4F:5E:BD:7E:5F:7C:4C:44:10:47:EE:BA:E0:0C:C0:6D:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
Signing time:             Tue 26 Mar 2024 19:29:55 +0000
ROA not before:           Tue 26 Mar 2024 19:24:55 +0000
ROA not after:            Tue 25 Mar 2025 19:29:55 +0000
asID:                     268135
IP address blocks:        45.170.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ea:ac:a7:0f:77:47:21:d6:43:3c:20:2d:a6:71:5b:89:35:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9
        Validity
            Not Before: Mar 26 19:24:55 2024 GMT
            Not After : Mar 25 19:29:55 2025 GMT
        Subject: CN=DB37D8D1987950AF62A2D22923C38642477961D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:da:d6:7f:32:29:de:2c:82:af:d4:bf:78:
                    c2:8e:3d:9b:8f:c0:4e:26:bf:8d:f0:e4:2a:c2:a0:
                    8b:79:7b:bc:fb:60:8f:3f:cb:54:23:5d:0f:ea:68:
                    1e:15:bc:a3:9f:47:71:5b:37:c4:9b:77:a4:8f:7d:
                    9e:f8:c4:47:4c:18:d3:a1:7c:67:72:03:4b:97:4b:
                    05:91:15:7e:5a:0b:10:49:df:69:5e:42:42:05:e1:
                    67:f4:97:ef:31:7c:c0:09:87:ea:0a:58:ea:2b:9e:
                    ad:17:bb:33:a0:03:dd:ae:38:2c:92:13:2f:30:8b:
                    e4:14:fc:22:00:19:a8:97:28:a8:df:e6:46:f4:4f:
                    af:16:25:68:b8:96:23:f8:ab:40:c5:8e:cf:28:6f:
                    e6:8a:e0:8d:b8:d0:2c:b4:46:eb:c3:c3:a7:28:51:
                    88:ce:ef:2b:74:23:a6:58:e4:ed:cc:c9:89:e7:88:
                    3d:6c:cd:7e:fe:69:9a:ee:6f:a1:6a:3f:26:a1:56:
                    f1:e5:37:fd:73:ea:ff:6f:91:f5:73:8f:5b:aa:db:
                    3d:7a:2e:e9:93:db:cf:c5:5e:90:8b:20:7f:c7:e1:
                    f8:21:9b:3d:3e:b5:4a:57:61:28:fd:3b:1f:76:36:
                    20:23:97:7c:34:f0:82:89:4e:5b:ed:fe:0d:6a:9c:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:37:D8:D1:98:79:50:AF:62:A2:D2:29:23:C3:86:42:47:79:61:D7
            X509v3 Authority Key Identifier:
                keyid:F7:40:4F:5E:BD:7E:5F:7C:4C:44:10:47:EE:BA:E0:0C:C0:6D:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3234203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:8d:7b:ed:0f:a0:7d:09:7b:84:c9:b1:1a:d1:d1:e6:2e:
         0d:61:6a:78:93:d1:12:2b:bd:e8:97:da:b5:d2:eb:6c:31:d4:
         a3:3e:a3:da:57:af:f9:0a:94:16:86:60:96:5a:10:52:2e:57:
         28:94:fb:78:7d:78:db:a4:6a:2b:44:01:88:69:cb:38:76:dc:
         70:d5:07:9e:c0:62:17:e6:1c:8c:76:ac:99:f2:ef:2d:eb:06:
         e6:6b:fb:ff:8a:6a:2f:d6:46:ae:fe:22:f0:71:a7:da:a9:3c:
         07:cb:88:9f:98:65:8f:12:7e:ba:1f:ec:21:ca:82:6a:d9:db:
         8d:9c:d0:27:22:91:92:ae:81:be:32:a9:2d:fe:9b:c3:a0:81:
         45:41:1f:5e:f8:aa:27:10:9c:fa:53:74:91:9a:79:04:b9:8b:
         70:2e:b5:ab:56:b1:c0:af:9d:14:01:d0:70:ba:83:f3:0f:d4:
         cd:52:30:bd:ca:5c:8c:cf:21:75:29:76:bb:46:1c:21:7e:7d:
         e5:2b:2e:4c:18:59:38:b2:6f:e6:7f:7b:48:d5:24:c2:cc:82:
         79:c3:c0:eb:02:50:5d:6c:33:e1:51:43:25:cc:cc:24:da:b5:
         64:d1:dd:e5:af:ee:27:5e:a1:c3:58:77:53:5a:88:c4:9d:bd:
         27:b4:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org