Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa
File:                     34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa (raw, json)
Hash identifier:          Pi1TJBBC/URAKe3vvUHeOFBPe6yzZYkWEI72RQeBGso=
Subject key identifier:   E9:18:AF:6D:8F:F1:D4:31:FA:01:80:0E:C4:49:2D:7D:09:62:4E:0B
Certificate issuer:       /CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
Certificate serial:       0173BFC8EEAD3E94B05F80B73F30BCA1E1448D27
Authority key identifier: 16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa
Signing time:             Wed 29 Nov 2023 21:18:34 +0000
ROA not before:           Wed 29 Nov 2023 21:13:34 +0000
ROA not after:            Wed 27 Nov 2024 21:18:34 +0000
asID:                     268179
IP address blocks:        45.170.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:73:bf:c8:ee:ad:3e:94:b0:5f:80:b7:3f:30:bc:a1:e1:44:8d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
        Validity
            Not Before: Nov 29 21:13:34 2023 GMT
            Not After : Nov 27 21:18:34 2024 GMT
        Subject: CN=E918AF6D8FF1D431FA01800EC4492D7D09624E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ea:b8:39:86:25:86:27:78:fb:85:06:91:49:
                    e6:50:91:ce:09:a9:f7:b6:ae:9c:93:a7:6c:13:2f:
                    1e:ab:c4:57:ef:61:92:c2:45:dc:81:ac:c0:49:38:
                    76:a8:3c:30:6d:83:71:7c:77:28:17:44:2e:7b:6a:
                    9a:7f:19:ed:2a:d1:b4:bc:b7:4d:03:eb:f0:f2:b4:
                    0d:cd:5a:00:27:b9:6e:99:5e:55:96:1a:f8:14:68:
                    82:6e:a8:b9:70:0b:64:08:fc:05:14:eb:72:6c:06:
                    08:d7:6d:97:2b:9b:30:7c:88:22:2b:bf:a7:51:65:
                    2b:06:51:12:1f:a2:e0:92:96:e5:b4:5b:02:43:96:
                    c2:c5:9c:d6:b1:d7:dc:5e:66:ea:a8:bc:d4:a2:b0:
                    54:a2:97:9f:af:18:7b:ad:32:2f:2c:89:3e:a8:a1:
                    07:93:c0:c1:d9:49:a6:d5:c6:15:fc:38:44:4c:ed:
                    58:35:e1:29:fe:f2:74:c7:5b:32:27:3d:78:d7:e2:
                    c0:ad:d4:f8:39:3c:61:5c:bc:6e:6f:14:ab:f4:a2:
                    49:f9:0f:25:ba:5b:30:7f:5d:0d:5a:93:4b:78:26:
                    89:2d:17:a5:42:b7:c4:d6:b7:ac:6c:18:a9:b1:39:
                    a5:a4:cd:6b:95:b8:23:1d:54:26:56:d8:dd:04:cc:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:18:AF:6D:8F:F1:D4:31:FA:01:80:0E:C4:49:2D:7D:09:62:4E:0B
            X509v3 Authority Key Identifier:
                keyid:16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:59:9f:ab:ec:8c:22:df:2c:51:c1:df:59:66:1e:72:24:6c:
         18:cc:1b:ea:85:ad:4d:a7:be:49:20:24:74:cf:ec:91:59:78:
         80:fd:93:60:09:0b:6a:4d:33:9f:dc:1a:2c:e5:19:46:a2:ef:
         06:24:49:58:bf:49:10:6c:3f:f8:00:03:b1:48:b0:42:c7:57:
         69:bb:f2:80:a3:e7:21:85:e8:a1:65:d2:b0:39:e2:b7:36:fc:
         47:c1:55:26:33:b6:4c:a9:8d:5d:26:3a:e3:7c:8b:db:5b:89:
         d4:3d:19:66:cd:cd:07:64:45:fc:74:fb:04:b2:4a:45:c9:a3:
         58:c4:5d:1f:af:94:2b:b7:e6:ad:fe:e5:84:98:08:1e:86:f5:
         90:8f:c3:0f:10:2b:d2:6f:ad:49:b7:51:4a:84:11:b4:b1:31:
         96:16:59:07:0f:fe:98:ff:63:d0:24:76:92:3b:15:bd:91:89:
         9f:0d:65:39:4e:58:c8:4a:48:06:bb:6c:81:e5:2f:c2:7e:28:
         b0:10:2e:bf:d2:7a:d9:a2:37:21:fd:4a:d2:7f:29:7d:4e:ca:
         bd:ba:9b:43:c5:8b:21:3c:63:df:d0:dc:1c:6a:d0:ad:75:67:
         e7:da:fd:fb:3e:a9:7d:4a:86:04:b5:a3:bc:0b:68:a4:f2:a7:
         aa:09:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:06 2024 by rpki-client on console-fra.rpki-client.org