Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3235203d3e20323637363534.roa
File:                     34352e37302e3135362e302f32322d3235203d3e20323637363534.roa (raw, json)
Hash identifier:          kYG6yTDqtHfxDApxH005/V/IDiLjfV8IlgCRPFgAnrw=
Subject key identifier:   17:F8:11:B9:5D:8C:E6:38:A7:C6:AD:F1:09:DB:F7:9A:FD:61:18:94
Certificate issuer:       /CN=36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C
Certificate serial:       576183DC595A5EA75938E88C793430BDFB406368
Authority key identifier: 36:A6:B5:8C:6D:CD:21:60:E5:60:A1:B8:AC:69:EF:09:02:B0:CD:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3235203d3e20323637363534.roa
Signing time:             Sat 12 Feb 2022 07:31:38 +0000
ROA not before:           Sat 12 Feb 2022 07:26:38 +0000
ROA not after:            Sat 11 Feb 2023 07:31:38 +0000
asID:                     267654
IP address blocks:        45.70.156.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:61:83:dc:59:5a:5e:a7:59:38:e8:8c:79:34:30:bd:fb:40:63:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C
        Validity
            Not Before: Feb 12 07:26:38 2022 GMT
            Not After : Feb 11 07:31:38 2023 GMT
        Subject: CN=17F811B95D8CE638A7C6ADF109DBF79AFD611894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f7:c6:5a:1d:40:a5:1b:05:a0:1e:ae:e3:af:
                    88:ed:c4:bc:0c:2e:b5:97:95:21:77:5c:b1:a3:8b:
                    e0:58:a2:f7:68:87:b3:5f:22:23:3f:59:df:31:47:
                    cf:09:29:db:f7:55:3d:f1:bb:92:a4:de:c8:d0:d4:
                    09:4f:d7:85:7e:95:46:91:5f:7e:27:ed:cd:66:a9:
                    96:28:e4:32:65:aa:60:e8:2d:61:cd:1c:8f:b6:2f:
                    b0:4f:03:b7:33:c1:62:49:6d:2d:69:c0:4f:e2:94:
                    db:50:95:d1:09:82:c3:5d:d7:45:ad:4c:ba:44:9e:
                    cf:c9:01:76:6a:42:c0:49:d4:c3:44:19:c0:7f:b4:
                    78:00:bb:2e:c5:93:c0:2d:fc:01:f0:9d:66:89:f9:
                    5c:59:5f:54:e9:e3:6e:cd:86:81:45:53:fd:02:09:
                    7f:cb:d7:b5:48:e5:7f:db:f6:cf:2e:eb:91:fa:57:
                    f6:24:fe:17:e5:a6:aa:29:32:53:cf:6d:61:e8:5f:
                    3c:dc:f2:65:9d:c5:86:df:54:1e:e4:a3:d3:dd:ad:
                    be:27:71:ae:62:56:e6:ba:06:59:3b:a6:df:7a:73:
                    4b:c3:cb:0f:ec:a7:a3:19:f2:9c:66:32:8a:ba:a8:
                    f0:46:72:0d:45:23:59:4d:e0:84:cb:f1:31:fb:b2:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:11:B9:5D:8C:E6:38:A7:C6:AD:F1:09:DB:F7:9A:FD:61:18:94
            X509v3 Authority Key Identifier:
                keyid:36:A6:B5:8C:6D:CD:21:60:E5:60:A1:B8:AC:69:EF:09:02:B0:CD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/34352e37302e3135362e302f32322d3235203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:eb:43:29:6b:7c:6f:f9:b0:ea:0f:c6:14:c8:cb:cd:27:
         64:4c:d5:89:13:4a:aa:31:d5:9a:ea:db:a8:4f:84:28:75:48:
         76:49:be:59:26:5e:3e:a8:13:5e:08:d8:30:c0:c0:5c:83:c6:
         03:9f:4a:02:09:80:cd:ad:f4:a6:e0:76:14:c8:b1:38:2d:84:
         8e:ed:fb:36:f3:44:80:f9:25:17:80:a7:66:0c:6b:9d:8a:f9:
         99:30:45:21:03:cb:c8:7e:9d:2c:cc:ae:f8:af:34:66:d8:5e:
         41:3d:82:2e:8b:9b:54:a8:76:e9:c6:66:5c:08:f3:c2:12:f6:
         ca:5d:19:b7:1b:3d:a5:5c:35:85:23:e7:90:8a:5c:0b:59:22:
         d8:69:74:16:19:01:29:a6:f7:a1:b6:31:83:cb:f1:e4:e7:8e:
         40:e0:31:91:f3:58:c3:c9:82:93:bb:fe:d0:d1:6a:7c:f0:44:
         5b:f0:3a:d5:50:5c:31:da:18:44:cb:78:4b:8c:ae:c3:2a:b6:
         c2:a5:e5:19:fe:bc:88:75:af:fd:8b:d0:cb:6b:40:00:8c:f3:
         8c:d1:be:7d:f5:c7:a0:83:1e:8e:5e:0a:11:9c:a5:0b:b6:76:
         4f:5b:69:95:ec:14:7a:8f:cb:33:ae:dd:95:9d:9b:80:4e:51:
         cc:51:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org