Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e352e302f32342d3234203d3e20323638313335.roa
File:                     34352e3137302e352e302f32342d3234203d3e20323638313335.roa (raw, json)
Hash identifier:          LlwuOyQ1AEmJlBDcrov1scwRJLKishKBtBdMGo32doM=
Subject key identifier:   4F:AD:B2:3B:9B:C9:04:FE:76:9B:0A:B1:2C:F8:FB:F9:D3:54:00:75
Certificate issuer:       /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial:       301C8E7899DB01D039D9FE6D6B40A35E8600AD23
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e352e302f32342d3234203d3e20323638313335.roa
Signing time:             Fri 12 May 2023 13:17:10 +0000
ROA not before:           Fri 12 May 2023 13:12:10 +0000
ROA not after:            Fri 10 May 2024 13:17:10 +0000
asID:                     268135
IP address blocks:        45.170.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1c:8e:78:99:db:01:d0:39:d9:fe:6d:6b:40:a3:5e:86:00:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
        Validity
            Not Before: May 12 13:12:10 2023 GMT
            Not After : May 10 13:17:10 2024 GMT
        Subject: CN=4FADB23B9BC904FE769B0AB12CF8FBF9D3540075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:a9:78:9f:bd:84:ef:fc:0b:a5:e9:07:f6:
                    f0:8c:c9:16:df:04:0c:c2:27:5e:c1:19:b0:86:45:
                    a6:04:19:40:ad:ef:88:53:1e:b2:a1:f0:dc:a2:99:
                    82:d1:07:2a:1c:c6:37:b6:e4:07:a1:7e:9a:49:6e:
                    34:4f:af:d4:ae:98:d0:51:1f:d8:86:5a:ac:d9:8f:
                    3b:ac:00:3b:08:14:9c:84:0b:53:66:70:c2:1f:f1:
                    56:4d:ed:07:e9:8e:83:ca:89:99:f7:89:ca:bc:03:
                    b7:43:d6:0b:0f:c7:c7:fb:84:8c:ca:77:89:55:e1:
                    4e:ee:07:78:85:a7:9f:8f:df:45:b3:48:96:af:29:
                    a6:ff:17:b2:18:dd:fc:9d:78:6d:fd:f6:50:c3:15:
                    93:1b:8f:3f:35:f6:a2:c4:1c:52:ac:fd:0b:64:4c:
                    1c:9a:1f:56:a5:c4:90:aa:94:89:c5:19:92:cd:d0:
                    c1:75:e4:df:6b:04:9b:ac:50:b5:5a:62:e6:cf:da:
                    8e:c6:57:bb:c7:89:2a:b1:97:8e:df:31:83:ca:84:
                    68:84:d1:b0:a8:8c:a1:b7:48:df:f9:5c:b4:87:00:
                    ab:3e:f6:9a:d3:ea:03:62:bf:55:9d:40:f1:80:35:
                    86:77:72:3f:4e:26:e7:9b:a1:3b:3a:74:81:3f:7a:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AD:B2:3B:9B:C9:04:FE:76:9B:0A:B1:2C:F8:FB:F9:D3:54:00:75
            X509v3 Authority Key Identifier:
                keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e352e302f32342d3234203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:76:b7:d6:ad:20:aa:fe:c4:57:4d:3e:d8:65:1a:4e:47:
         6c:f6:0e:60:12:43:88:c4:bd:3c:1c:39:57:0c:c7:a3:3c:cb:
         ad:22:48:28:6c:ac:b9:7a:45:1b:d3:c3:35:3b:03:f8:08:11:
         a4:32:62:16:14:92:18:a0:94:d6:c7:28:1a:8d:d0:ff:7e:91:
         29:b5:7d:2e:14:42:6f:7e:db:b5:0a:46:12:3e:37:73:fd:9d:
         46:bd:62:61:69:30:3a:db:34:a3:51:6a:9e:5d:cc:4d:7d:e2:
         d0:16:78:7a:96:c2:bf:ab:39:9d:46:eb:86:b6:9e:5f:60:10:
         7d:82:30:9c:8a:fd:3f:46:22:61:32:b9:e7:5a:34:7e:a7:fd:
         da:80:26:6d:a7:54:eb:a3:49:f4:04:7e:b3:a8:81:a0:3a:e8:
         30:25:28:f5:ed:43:d4:b2:69:90:ac:61:91:55:cb:b9:d9:52:
         de:00:08:82:ae:db:4b:0d:cb:5d:bd:f3:b2:e1:44:bd:a1:7b:
         2b:0e:2f:78:f6:7e:08:16:8a:7a:b3:50:4c:c4:3f:3e:4b:95:
         b7:ec:18:21:bc:cb:67:e7:68:7a:f3:6a:d8:eb:ba:98:5e:1a:
         80:ac:93:0c:80:1b:27:65:d7:33:4a:b8:21:f7:97:ae:6f:af:
         5d:f9:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org