Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32322d3332203d3e20323639313633.roa
File:                     34352e3138312e32342e302f32322d3332203d3e20323639313633.roa (raw, json)
Hash identifier:          VxETTRlYykmp0p5MDIsqyzScUugQg77O284U53qeXzs=
Subject key identifier:   E1:A2:28:65:BC:79:CB:76:98:FD:D7:36:1B:A1:C8:55:7B:03:37:16
Certificate issuer:       /CN=1C369BFA51261164707FB6B5F75426A1F466648D
Certificate serial:       75B697DA3C70852CFF22917D4BDDC1A8A9F8616D
Authority key identifier: 1C:36:9B:FA:51:26:11:64:70:7F:B6:B5:F7:54:26:A1:F4:66:64:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C369BFA51261164707FB6B5F75426A1F466648D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32322d3332203d3e20323639313633.roa
Signing time:             Thu 28 Mar 2024 22:02:54 +0000
ROA not before:           Thu 28 Mar 2024 21:57:54 +0000
ROA not after:            Thu 27 Mar 2025 22:02:54 +0000
asID:                     269163
IP address blocks:        45.181.24.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b6:97:da:3c:70:85:2c:ff:22:91:7d:4b:dd:c1:a8:a9:f8:61:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C369BFA51261164707FB6B5F75426A1F466648D
        Validity
            Not Before: Mar 28 21:57:54 2024 GMT
            Not After : Mar 27 22:02:54 2025 GMT
        Subject: CN=E1A22865BC79CB7698FDD7361BA1C8557B033716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:c3:d5:a3:1f:32:52:09:1e:0c:e7:09:15:
                    c5:a6:87:1a:80:8c:69:29:c7:d6:e5:a7:e2:0e:af:
                    5e:ba:18:88:9e:4d:de:2f:f5:e3:82:d0:2b:8e:e4:
                    96:8b:cd:3e:2e:63:ce:3f:8a:b5:52:9a:ed:a6:2a:
                    16:ab:84:b2:8b:50:df:45:ed:db:ee:60:89:8d:05:
                    f5:4e:aa:ac:ba:b9:b3:a4:08:c5:bf:a2:a2:08:02:
                    04:e2:14:ab:c5:25:f9:59:22:ae:1a:75:11:84:e8:
                    fb:e6:f1:4b:ea:6b:a1:62:0b:d9:90:39:f3:5d:62:
                    c8:7d:65:92:2b:39:c5:7c:9c:89:04:b9:59:23:e0:
                    44:95:b1:c7:a3:8c:ff:01:2c:14:d1:73:a4:fe:ea:
                    81:84:01:8c:fb:7f:e1:f4:26:77:8f:a5:70:77:c8:
                    6c:4b:92:f5:2f:09:a3:e2:d3:9d:db:10:cd:42:80:
                    86:7e:bb:b7:c9:91:f6:28:49:10:25:48:63:6d:0c:
                    cc:9d:e0:78:64:5e:b0:88:6b:f0:97:10:71:58:8d:
                    12:1a:d5:38:69:38:ed:aa:23:b2:04:f9:07:b0:0c:
                    81:d4:d2:b4:ef:f6:9b:92:fa:2c:46:14:ed:45:59:
                    f6:3b:69:e8:69:9f:21:37:53:f5:63:57:b4:5b:0c:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A2:28:65:BC:79:CB:76:98:FD:D7:36:1B:A1:C8:55:7B:03:37:16
            X509v3 Authority Key Identifier:
                keyid:1C:36:9B:FA:51:26:11:64:70:7F:B6:B5:F7:54:26:A1:F4:66:64:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1C369BFA51261164707FB6B5F75426A1F466648D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C369BFA51261164707FB6B5F75426A1F466648D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32322d3332203d3e20323639313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:9b:a8:46:02:5a:bd:68:cb:a8:e2:cc:ef:e1:aa:7e:87:20:
         57:1e:47:28:06:83:bb:5f:45:39:d1:76:d5:77:2c:fb:bb:56:
         79:97:29:28:70:04:86:33:da:b2:df:00:23:b4:95:96:61:cd:
         a7:3e:a0:a7:64:20:0a:74:64:84:3e:11:94:4d:b9:b4:11:73:
         13:18:f0:6e:c4:5b:cc:1e:41:cf:de:34:9c:11:a3:41:da:88:
         be:c8:08:46:02:d6:17:ad:d1:a8:d2:a0:19:d2:90:49:d7:83:
         ff:a9:0a:84:b0:05:48:59:e4:56:8c:88:09:f1:4e:82:de:e3:
         0e:aa:a6:38:72:3a:d4:ee:dc:6e:ef:bb:a1:30:e7:09:94:3b:
         12:33:dd:1f:cc:04:db:df:43:28:30:98:f2:88:a2:db:82:9a:
         03:1c:ff:58:b5:bd:cf:3b:bf:4e:7a:44:c2:97:ba:6e:1b:e1:
         06:46:c3:3e:02:40:c0:26:5c:88:06:59:3c:ff:da:5c:7f:ab:
         34:32:62:d0:45:0e:df:27:90:d6:38:da:d0:bf:50:09:ab:3f:
         5d:d7:8e:80:2c:70:87:d6:59:d5:c1:e3:5b:58:1d:26:62:71:
         28:c8:b9:cc:79:1a:e3:47:bc:ea:39:cb:17:f6:0d:51:fb:4d:
         e7:d7:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org