Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37382e302f32342d3234203d3e20323634313137.roa
File:                     3137372e36362e37382e302f32342d3234203d3e20323634313137.roa (raw, json)
Hash identifier:          PsJCAZUMZ6yyxcZZ7Y8Q53qLYS2Al0xhGI+DJ6WXj2U=
Subject key identifier:   EB:7C:48:38:56:E2:3E:F2:5A:55:F2:92:08:59:DB:02:26:26:3C:EE
Certificate issuer:       /CN=45CE16AA7939EB17050D2F7FB4EE87F4A355D81D
Certificate serial:       171B03D33BAD6EB4FB1E7FA4DF1C58BEE0CE8D6A
Authority key identifier: 45:CE:16:AA:79:39:EB:17:05:0D:2F:7F:B4:EE:87:F4:A3:55:D8:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37382e302f32342d3234203d3e20323634313137.roa
Signing time:             Tue 23 Aug 2022 14:18:12 +0000
ROA not before:           Tue 23 Aug 2022 14:13:12 +0000
ROA not after:            Tue 22 Aug 2023 14:18:12 +0000
asID:                     264117
IP address blocks:        177.66.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1b:03:d3:3b:ad:6e:b4:fb:1e:7f:a4:df:1c:58:be:e0:ce:8d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45CE16AA7939EB17050D2F7FB4EE87F4A355D81D
        Validity
            Not Before: Aug 23 14:13:12 2022 GMT
            Not After : Aug 22 14:18:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:86:ce:0c:dd:23:47:e2:11:17:e8:2e:34:
                    c7:ed:27:69:16:94:fc:68:28:d4:1d:49:52:34:e8:
                    53:b9:b9:84:59:e5:a7:04:81:59:d6:59:a5:90:c5:
                    6f:1f:95:34:e2:91:93:cf:cd:c7:23:96:de:dd:44:
                    31:a2:55:1e:e1:f0:0d:aa:e5:6c:7c:74:29:be:ab:
                    ac:24:0f:ce:07:53:d2:1f:6b:e9:19:cf:4d:98:e0:
                    c1:92:38:b9:bc:13:a5:7b:35:7f:6b:61:b2:66:74:
                    ae:92:52:48:e5:de:89:0d:9e:0f:dd:b4:4c:b5:42:
                    2e:37:92:aa:b7:36:87:de:ee:bc:32:ee:96:9f:18:
                    a1:61:11:2a:ed:8d:00:65:08:5a:3e:b8:86:c9:dd:
                    d2:5a:94:31:4a:2b:cb:8c:3d:72:82:e4:b7:cd:0a:
                    c9:a2:37:23:ec:c8:f9:a5:f4:ed:54:f8:a9:a0:de:
                    eb:94:b9:63:0f:9e:a5:3a:ed:ab:b5:33:60:62:29:
                    e6:bd:00:f3:a1:d7:50:68:f1:91:83:99:c6:24:58:
                    0b:e5:a5:e7:40:d6:37:42:a7:02:de:ac:54:20:ae:
                    e5:d9:4f:58:2f:a2:72:38:34:53:32:e8:ec:7d:c8:
                    bc:bc:17:26:39:8d:92:81:90:ee:76:5e:06:b4:97:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7C:48:38:56:E2:3E:F2:5A:55:F2:92:08:59:DB:02:26:26:3C:EE
            X509v3 Authority Key Identifier:
                keyid:45:CE:16:AA:79:39:EB:17:05:0D:2F:7F:B4:EE:87:F4:A3:55:D8:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37382e302f32342d3234203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:07:8c:04:2b:bf:00:e1:6d:0b:da:b5:93:8a:ac:f9:5e:
         8b:59:16:8a:d5:70:bc:0a:e6:69:ff:9a:90:17:42:8d:bb:48:
         7e:95:ff:2c:41:af:ce:28:fd:f5:12:5b:9e:59:28:57:6f:32:
         99:d3:4e:5d:b1:9a:f5:56:4c:aa:1a:d3:27:83:56:e6:09:5c:
         71:15:a3:02:bf:33:11:67:5d:0e:8e:62:06:25:30:ba:69:2a:
         e1:3a:cd:77:e2:1b:00:18:4c:7a:30:ad:4d:1e:84:63:e1:42:
         d0:a8:92:bd:7d:86:7c:a0:a6:68:6f:ad:b8:e9:87:7e:28:9e:
         0c:74:2b:40:9c:02:e8:1e:98:67:b0:f3:1b:57:4d:ed:21:07:
         3f:1a:82:5b:2f:6b:74:01:dc:cc:9f:cb:0d:b1:99:0b:70:1c:
         6c:67:e6:6c:1c:74:0e:50:ba:73:6c:31:3c:53:c8:b2:7a:41:
         38:96:99:20:fa:24:03:8c:76:7f:d0:8b:e9:0b:4e:5c:e1:08:
         43:60:48:a5:5f:20:ac:d7:8d:a6:f3:ee:e0:68:21:43:79:95:
         3e:e3:17:e4:e1:8b:83:39:b1:7a:88:75:f2:40:37:ed:03:b9:
         6d:33:e9:a6:6a:e4:03:c9:da:22:dc:98:4b:8e:0e:12:ae:cf:
         48:f2:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org