Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa
File:                     34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (raw, json)
Hash identifier:          mhrM7ycUW02SW2LG1RSLCt8Br1DIKBNUskFeTt2PZ4g=
Subject key identifier:   9F:3A:29:A6:07:90:21:73:8F:5D:1A:00:A9:39:B5:54:BD:2D:EE:B4
Certificate issuer:       /CN=B41C5D20FCE773495931567B28D958303BB191D0
Certificate serial:       04CF226BB0551B530D337396736A0C9770658705
Authority key identifier: B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa
Signing time:             Fri 09 Feb 2024 12:32:33 +0000
ROA not before:           Fri 09 Feb 2024 12:27:33 +0000
ROA not after:            Fri 07 Feb 2025 12:32:33 +0000
asID:                     268878
IP address blocks:        45.174.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cf:22:6b:b0:55:1b:53:0d:33:73:96:73:6a:0c:97:70:65:87:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41C5D20FCE773495931567B28D958303BB191D0
        Validity
            Not Before: Feb  9 12:27:33 2024 GMT
            Not After : Feb  7 12:32:33 2025 GMT
        Subject: CN=9F3A29A6079021738F5D1A00A939B554BD2DEEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:09:09:97:2e:19:43:f2:0a:07:64:11:61:34:
                    56:80:6e:dd:ab:64:92:75:40:db:17:bd:68:45:b6:
                    d6:d4:54:b7:15:b6:70:7f:ea:35:e5:af:b2:ef:f5:
                    ce:df:d2:81:61:66:5c:6e:0f:2e:10:af:ca:ab:9f:
                    d2:bb:4f:6a:ac:74:ea:0b:cc:67:5f:3a:ae:64:40:
                    3b:57:2f:2f:1e:e1:2f:84:69:92:6f:e8:77:c5:99:
                    d8:ce:68:bb:80:e5:26:bb:8f:52:db:cb:15:6c:f4:
                    b8:20:6a:f6:58:e5:1b:4f:b5:d7:e8:a2:58:81:8f:
                    2b:ef:b8:a9:03:5f:97:bd:ee:a5:5e:23:86:b8:71:
                    fa:f4:09:e6:92:0a:a8:df:9c:9f:2c:6e:c5:16:01:
                    01:33:b7:e2:f2:12:65:09:92:a8:da:e9:88:47:54:
                    c5:4f:99:9a:da:da:6c:65:b9:c4:e4:a8:42:22:30:
                    4d:de:7e:2a:2f:05:4e:c6:40:17:02:15:d7:22:0a:
                    22:41:42:6a:7c:e4:3d:69:fa:88:aa:3f:95:85:06:
                    c8:30:a7:62:5b:ab:26:16:18:4b:ab:ef:e4:08:37:
                    8f:1d:4f:2f:a4:86:22:13:54:58:1a:f1:e7:c4:4f:
                    16:f0:d6:68:1e:d0:8a:6f:e1:90:a8:fe:fb:5c:a7:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3A:29:A6:07:90:21:73:8F:5D:1A:00:A9:39:B5:54:BD:2D:EE:B4
            X509v3 Authority Key Identifier:
                keyid:B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:a2:fc:0b:8c:7f:52:d2:06:f9:ca:2d:9b:e4:48:d6:04:1b:
         72:7d:e2:f9:32:87:cc:06:b2:3c:b3:cf:83:f4:44:da:cb:db:
         eb:80:53:e7:a1:ed:e9:8e:37:18:8a:67:ae:88:4f:24:80:74:
         1a:be:7b:1f:d2:95:f2:43:ca:9e:46:6c:3f:f2:e9:89:d0:64:
         69:d2:21:d2:df:5b:18:bc:5e:17:fa:f3:4c:3e:72:59:0f:a7:
         3a:ac:ac:48:b1:cd:57:8e:41:af:20:b4:69:ef:3e:95:5f:8f:
         8e:a1:cd:4f:ae:d2:73:fc:92:c7:d0:60:a8:88:ba:53:d5:26:
         10:b6:d5:39:06:e7:1d:c4:87:63:a9:b9:3f:0c:0c:52:f9:43:
         6f:75:58:98:d0:94:58:c2:1c:74:3d:94:d3:80:b9:5c:98:4a:
         41:5f:a5:8a:ee:dc:d8:e7:1f:18:92:4e:67:2c:a0:d3:3e:61:
         80:e9:04:d7:f2:c5:13:97:54:a0:54:ca:26:98:62:ef:e0:e6:
         53:b2:4c:7e:5d:e4:ea:e4:18:82:f1:63:83:36:1b:28:90:ca:
         ce:5d:44:82:77:5e:48:fe:db:84:9e:a2:ff:34:9e:75:01:9b:
         15:f0:bd:36:06:e7:37:a0:55:06:9a:b9:89:4b:27:96:2c:29:
         d0:ef:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org