Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e372e302f32342d3234203d3e20323638313335.roa
File:                     34352e3137302e372e302f32342d3234203d3e20323638313335.roa (raw, json)
Hash identifier:          0wowbdqo/pDLVOI4K9xQFdDAuC+WIh3rF0xk4ncUiQ0=
Subject key identifier:   35:9E:10:2E:8F:48:F8:56:BC:2B:8A:56:CF:9B:E9:4E:C7:C7:A0:0E
Certificate issuer:       /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial:       20CBE5508EDE2574F395A117F04248C688F699E2
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e372e302f32342d3234203d3e20323638313335.roa
Signing time:             Thu 22 Jun 2023 18:20:06 +0000
ROA not before:           Thu 22 Jun 2023 18:15:06 +0000
ROA not after:            Thu 20 Jun 2024 18:20:06 +0000
asID:                     268135
IP address blocks:        45.170.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cb:e5:50:8e:de:25:74:f3:95:a1:17:f0:42:48:c6:88:f6:99:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
        Validity
            Not Before: Jun 22 18:15:06 2023 GMT
            Not After : Jun 20 18:20:06 2024 GMT
        Subject: CN=359E102E8F48F856BC2B8A56CF9BE94EC7C7A00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:8b:9b:66:2d:9d:61:7b:54:8b:02:80:67:
                    76:c7:70:ef:16:a1:81:f3:4b:65:42:a2:6b:46:04:
                    07:6c:ab:4e:88:a2:79:e0:1a:8e:cc:a6:7c:8d:18:
                    ae:97:54:d2:70:c9:e9:3e:c3:bf:fe:77:da:2c:b4:
                    72:53:0d:b9:e2:55:80:ea:70:9c:f6:db:38:9d:18:
                    df:b6:5b:34:16:7b:8e:ee:76:34:19:9d:8a:21:be:
                    18:f5:a2:30:34:57:45:93:55:fe:5e:a9:cb:8d:61:
                    6e:aa:01:50:2f:4f:57:c1:e9:c6:ec:28:01:98:72:
                    ad:34:87:58:9f:fe:c2:88:95:5f:49:df:58:0a:27:
                    3a:f1:18:82:6e:b0:cb:fc:e7:98:b2:c6:95:6c:30:
                    d2:bc:9f:f2:df:ce:94:c7:8d:95:c3:ea:28:84:5c:
                    0c:5e:ad:86:2e:89:e8:67:c4:39:de:b1:70:70:6e:
                    0a:ca:5f:db:a9:2d:3b:8a:be:fc:6e:7f:7d:4f:c7:
                    e4:24:a4:45:ab:cb:ba:bd:d2:b8:5c:3e:65:17:3d:
                    71:3e:f3:2e:75:fc:01:7f:e5:90:82:15:14:a1:a1:
                    63:74:0d:50:3d:8f:37:fd:e2:e4:d0:1c:16:5c:46:
                    4a:30:db:e5:9c:fa:a6:f8:d9:7e:ec:17:e8:f2:a4:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9E:10:2E:8F:48:F8:56:BC:2B:8A:56:CF:9B:E9:4E:C7:C7:A0:0E
            X509v3 Authority Key Identifier:
                keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e372e302f32342d3234203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:c9:99:eb:69:0d:f3:b7:3a:e1:28:76:1d:66:db:1b:c5:fa:
         08:70:28:c9:b3:e0:36:26:74:3d:1e:0a:a2:bc:25:1c:cb:d0:
         63:99:fb:66:10:fc:ec:9b:31:60:58:fd:de:98:cd:96:6d:06:
         74:2e:6f:ac:98:e5:c3:4b:30:d8:83:c6:6e:1e:92:15:2c:a0:
         0a:43:d9:1e:6e:c1:bd:cc:7c:7a:e0:95:ba:c1:f3:70:39:2b:
         8c:1c:dd:cb:c7:1a:e7:ae:b5:90:7b:ef:89:66:93:6f:47:ea:
         5a:58:84:36:7a:18:6f:aa:c7:6c:68:84:17:0e:7d:90:80:08:
         82:39:b0:b5:60:a3:82:96:3a:b6:a2:44:ad:5b:7d:39:b5:95:
         46:4f:3a:86:dd:6b:ec:7c:d5:e9:5a:54:e6:7f:14:2b:a4:07:
         50:bc:c1:5d:62:4d:6e:72:8f:52:cc:73:14:b0:50:6b:5d:38:
         61:58:cc:05:8f:1c:4a:06:ef:c5:ee:19:ff:5b:37:f5:f7:a1:
         98:2a:59:9b:05:29:83:6c:3f:80:f7:e1:1b:20:ac:b2:76:5d:
         24:a8:69:c6:92:fe:b7:52:e2:bc:ba:40:e8:f7:f5:56:e5:86:
         25:dc:1d:41:76:20:43:32:1a:e8:e3:6e:62:88:71:ed:df:ef:
         4e:11:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org