Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3232203d3e20323638313335.roa
File:                     34352e3137302e342e302f32322d3232203d3e20323638313335.roa (raw, json)
Hash identifier:          SYS7wE9tHJpqC92MyHsJ1nHnY8mREVnfNkAKPjUUal0=
Subject key identifier:   96:4C:AA:BB:0A:F6:52:50:F3:3C:7F:D4:D1:37:39:FC:18:52:BE:84
Certificate issuer:       /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial:       6CE5EA5E9F70FAE52D1940A23CE99F6B1A75232A
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3232203d3e20323638313335.roa
Signing time:             Fri 12 May 2023 13:17:00 +0000
ROA not before:           Fri 12 May 2023 13:12:00 +0000
ROA not after:            Fri 10 May 2024 13:17:00 +0000
asID:                     268135
IP address blocks:        45.170.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e5:ea:5e:9f:70:fa:e5:2d:19:40:a2:3c:e9:9f:6b:1a:75:23:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
        Validity
            Not Before: May 12 13:12:00 2023 GMT
            Not After : May 10 13:17:00 2024 GMT
        Subject: CN=964CAABB0AF65250F33C7FD4D13739FC1852BE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:ee:14:0b:ec:0a:e2:54:0a:20:2c:d6:77:
                    a8:74:50:a6:1b:2a:53:30:4e:fb:ab:d6:f4:62:c4:
                    2f:be:ff:07:4f:3c:d3:a5:48:53:12:ff:56:4e:13:
                    a6:d4:cc:a1:ed:29:5a:dd:c7:c3:c3:aa:15:a0:7c:
                    19:29:aa:a1:47:27:55:24:5d:31:66:bc:a6:ad:c8:
                    e3:ca:cc:f0:08:8a:40:f2:a5:07:04:7f:8c:f2:42:
                    b0:d1:ab:1a:79:b2:ee:50:89:b7:90:3c:b4:8d:37:
                    f9:93:db:31:86:e5:96:9d:c7:f9:49:17:4f:5e:f1:
                    43:b9:c9:1f:9c:2f:ce:e5:a3:f3:38:e8:bd:d2:64:
                    50:62:8c:34:3f:82:5a:71:fa:6b:1f:16:ba:01:6f:
                    2e:3d:20:0e:c2:bd:c5:0d:b3:5e:d6:7f:db:3c:01:
                    bf:f3:60:ed:26:c8:7d:a0:d6:60:4e:c2:53:8b:ef:
                    f7:67:4c:a3:1f:5d:cd:00:a9:b2:95:2f:47:b1:ee:
                    fa:6e:e2:25:61:8f:71:fb:4a:20:6d:3c:7a:c6:90:
                    40:98:dd:2c:c7:7a:fe:a2:e1:61:2d:5c:59:c3:65:
                    27:8e:9b:9f:32:43:13:28:34:1b:07:47:94:84:15:
                    fe:47:e8:48:82:5e:44:1c:fe:2c:df:22:4a:d0:98:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4C:AA:BB:0A:F6:52:50:F3:3C:7F:D4:D1:37:39:FC:18:52:BE:84
            X509v3 Authority Key Identifier:
                keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3232203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:82:27:2d:43:f8:31:26:34:19:91:c2:77:88:29:1c:8b:
         f3:4d:09:77:b9:b2:de:90:30:4b:f3:2c:0b:a3:8a:98:80:b7:
         6a:83:63:21:fd:46:11:8f:d8:4e:80:b8:82:ec:d8:37:96:a2:
         90:be:79:6a:b7:db:8b:48:49:22:3a:f6:f3:88:22:28:2e:7e:
         32:ea:9f:ce:b3:d9:5a:e5:d1:c5:2b:2a:8c:25:88:8c:ad:17:
         80:13:93:2f:13:fa:30:e6:9a:3e:ee:4c:0f:e5:c8:cc:1f:65:
         c9:f7:01:c5:93:bc:53:40:e7:88:8d:aa:19:72:ec:3e:25:e8:
         f4:66:0c:93:a3:60:0e:39:27:5a:cd:1a:d0:12:6f:c8:b6:b8:
         db:0f:ce:29:e8:4c:f1:9c:81:27:82:83:24:c6:31:1f:b2:f3:
         b2:70:95:d6:ad:8e:29:fb:0d:a3:3d:9d:a4:24:68:8d:8f:df:
         0f:8e:92:f1:1b:be:80:68:da:0a:7f:fe:d4:5d:65:de:8d:c0:
         71:88:10:e3:a0:f7:24:27:91:dd:bc:96:b9:07:4d:f4:33:38:
         41:5e:1d:ef:d7:19:ce:38:82:6a:72:68:ec:b3:82:8f:1c:fa:
         d8:62:a9:74:1b:c5:b9:86:92:db:85:51:2d:c0:d9:43:3b:b8:
         46:63:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org