Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32342d3234203d3e20323638313335.roa
File:                     34352e3137302e342e302f32342d3234203d3e20323638313335.roa (raw, json)
Hash identifier:          J50gMWOz171Nvc8/zCVFAYXXX19QB09LX6HZid+xEfE=
Subject key identifier:   7A:89:B4:CF:89:52:D6:C4:9A:85:03:64:B0:CA:A9:C7:A1:56:1C:30
Certificate issuer:       /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial:       3FCC4CCB8F300694038AE247A7DDD70156FB4A3E
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32342d3234203d3e20323638313335.roa
Signing time:             Fri 12 May 2023 13:17:05 +0000
ROA not before:           Fri 12 May 2023 13:12:05 +0000
ROA not after:            Fri 10 May 2024 13:17:05 +0000
asID:                     268135
IP address blocks:        45.170.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cc:4c:cb:8f:30:06:94:03:8a:e2:47:a7:dd:d7:01:56:fb:4a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
        Validity
            Not Before: May 12 13:12:05 2023 GMT
            Not After : May 10 13:17:05 2024 GMT
        Subject: CN=7A89B4CF8952D6C49A850364B0CAA9C7A1561C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:91:fc:87:dd:a9:85:c7:f5:1d:2d:9c:45:
                    4b:7c:e5:98:93:23:d8:40:c6:63:6f:32:b5:55:1d:
                    8c:fd:0c:8d:64:33:f9:d8:74:5b:3a:d8:c3:63:d6:
                    23:94:82:d2:45:1f:f9:e5:b0:00:03:41:d3:3d:46:
                    98:92:58:db:5c:f7:03:61:4b:9a:34:f4:d8:24:84:
                    e4:5b:6c:cf:8b:34:cd:6c:4d:bc:b3:0b:0f:d4:44:
                    31:29:44:83:6a:49:aa:71:96:10:a3:34:07:10:56:
                    e0:4f:7b:44:3a:9f:c7:79:0c:8e:d2:26:87:65:8b:
                    65:86:4e:d7:81:96:cf:95:95:0c:fa:9a:7e:6c:ee:
                    79:5d:7a:ce:c6:e7:ae:3a:17:3b:16:f6:d8:d9:2e:
                    a5:6e:2b:0d:9c:dc:fb:36:f1:f7:59:ba:fc:7e:73:
                    13:34:4c:3f:a9:a9:61:95:38:7a:46:a2:40:e3:a8:
                    bc:87:db:a6:f1:ed:0d:41:d3:36:c8:38:c3:88:f9:
                    72:15:a8:e4:2b:6e:55:2a:cd:1e:83:51:3b:3f:fa:
                    c8:3a:24:85:80:ad:97:5e:92:3e:51:35:79:4c:17:
                    21:ce:a0:1a:5e:b9:b5:72:98:55:92:04:13:f4:0d:
                    2a:31:67:09:ef:19:79:91:30:b9:ef:18:89:2d:00:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:B4:CF:89:52:D6:C4:9A:85:03:64:B0:CA:A9:C7:A1:56:1C:30
            X509v3 Authority Key Identifier:
                keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32342d3234203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:cc:fc:ba:80:b0:c5:ab:b5:8d:70:17:90:00:a7:e9:37:72:
         db:d8:96:b1:3b:a5:5e:34:e2:76:19:8f:14:10:a7:da:2f:35:
         17:1a:32:58:a9:e4:4b:48:b6:c1:88:5d:fd:a2:2e:04:8a:ce:
         19:cb:fc:ae:66:e9:96:01:1f:d5:ad:a3:1e:af:ce:ea:cc:de:
         e5:b1:ab:2f:96:ef:51:b3:39:31:33:13:51:f1:b4:20:53:41:
         5e:b5:c5:c9:4f:7f:c9:42:5f:4e:90:7b:7a:4f:39:7d:88:54:
         94:4c:03:02:02:0e:79:78:9f:c4:2d:ca:fb:2d:6c:d5:2d:65:
         9f:dd:d2:e4:07:4d:73:0b:fc:31:1b:a0:cb:a2:3a:be:77:e4:
         ff:91:0a:65:ab:7c:3b:f9:0b:68:ed:52:ff:c9:27:28:28:48:
         e3:a5:3a:c5:fe:50:bf:6b:b0:a6:2e:8c:a3:54:de:5d:40:8d:
         ef:d8:16:14:f9:ea:e6:79:00:68:b1:4d:7c:5c:1b:13:12:46:
         74:ec:18:e1:97:9a:cc:09:bc:0b:ec:85:1a:eb:6a:f0:5f:35:
         b1:a5:95:4c:16:be:0f:59:96:1c:ea:39:03:9a:42:d8:d5:9d:
         3c:9b:7b:b4:66:59:a8:11:cc:e0:21:75:d7:6d:d8:0c:ba:2c:
         34:c2:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org