Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa
File:                     34352e37302e3135362e302f32322d3234203d3e20323637363534.roa (raw, json)
Hash identifier:          1dMPz8g1l5kbdZydEj8kqGdl0RJy3qFSeAt3TB9YQio=
Subject key identifier:   70:9B:AB:B6:A9:DE:DE:15:13:48:6D:3F:35:AA:7F:A3:46:6A:12:D3
Certificate issuer:       /CN=9E11B7426A8445D56C5FD41BEF6DE1638454BED0
Certificate serial:       21D74F408EAB5915E97D2E8C50947892AB8DB4E2
Authority key identifier: 9E:11:B7:42:6A:84:45:D5:6C:5F:D4:1B:EF:6D:E1:63:84:54:BE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa
Signing time:             Tue 06 Feb 2024 05:07:08 +0000
ROA not before:           Tue 06 Feb 2024 05:02:08 +0000
ROA not after:            Tue 04 Feb 2025 05:07:08 +0000
asID:                     267654
IP address blocks:        45.70.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d7:4f:40:8e:ab:59:15:e9:7d:2e:8c:50:94:78:92:ab:8d:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E11B7426A8445D56C5FD41BEF6DE1638454BED0
        Validity
            Not Before: Feb  6 05:02:08 2024 GMT
            Not After : Feb  4 05:07:08 2025 GMT
        Subject: CN=709BABB6A9DEDE1513486D3F35AA7FA3466A12D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:6c:25:d2:e2:15:88:c7:4c:da:80:6b:6a:
                    0b:09:57:34:32:9f:a2:e0:45:a8:d7:d7:61:4c:a8:
                    eb:10:eb:cf:94:b8:56:58:6e:27:84:27:84:29:5a:
                    91:50:5e:dc:cb:86:0e:7c:64:7a:76:ad:95:bc:15:
                    df:e1:8a:90:2c:27:fb:5b:79:bf:60:f9:ae:a6:b2:
                    7d:39:ff:87:63:27:19:af:e2:89:ff:9a:90:a3:f1:
                    95:0c:a7:2b:de:0d:a3:f3:96:90:c6:8c:a5:ef:8d:
                    1c:60:9e:93:44:d3:3d:77:f9:ee:7a:26:da:41:46:
                    37:bc:cc:97:e6:79:23:b3:4f:1d:5b:c1:c8:a6:0b:
                    fb:b9:5d:72:9a:3e:3b:ce:58:13:1c:ff:80:dd:d9:
                    37:92:05:27:c2:60:7a:aa:91:b6:96:bf:a4:4c:37:
                    83:74:10:12:4c:44:18:50:d2:73:05:78:73:ee:0e:
                    5b:fa:db:90:8b:5e:ab:6b:05:b3:23:35:74:dc:b6:
                    62:33:74:15:b9:ca:fd:df:9c:55:57:f9:62:a0:f4:
                    8a:f2:03:c9:b5:5f:d4:a4:3c:10:14:22:e0:fc:40:
                    ff:fc:95:30:ce:f1:93:d2:47:57:00:12:a0:80:f3:
                    26:e7:af:03:a8:e9:50:15:c1:66:06:c6:53:6b:4a:
                    c3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:AB:B6:A9:DE:DE:15:13:48:6D:3F:35:AA:7F:A3:46:6A:12:D3
            X509v3 Authority Key Identifier:
                keyid:9E:11:B7:42:6A:84:45:D5:6C:5F:D4:1B:EF:6D:E1:63:84:54:BE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/34352e37302e3135362e302f32322d3234203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:a6:c0:ab:f3:c4:c4:63:c6:01:85:f7:11:b5:9e:01:a5:
         ad:54:6b:b2:c7:02:65:00:86:36:f0:50:f0:25:1a:df:b9:9d:
         23:17:77:47:3d:c2:14:48:81:bf:48:8f:41:fb:02:ee:b9:e9:
         e1:1b:aa:ac:af:ad:79:54:95:00:65:99:f4:07:18:24:f9:79:
         9b:f7:7b:d3:10:70:df:83:34:60:c1:4f:e5:48:49:75:4c:66:
         47:e6:ae:71:9c:ef:09:0c:f9:21:03:23:ab:d9:5e:fd:52:1f:
         ed:fb:14:d7:57:cd:c3:d8:d3:ad:22:c3:93:0d:0c:52:ef:1d:
         63:cb:5d:08:93:53:60:2e:b2:55:6a:e1:a1:fd:86:28:52:17:
         45:89:c8:43:06:c8:ea:d4:71:c1:ce:4f:4b:3e:6b:af:54:7e:
         f4:42:15:6e:f3:cb:4e:97:89:10:6e:43:6a:b1:11:8d:94:fb:
         ea:47:4b:0d:22:b0:b0:2c:42:d7:f0:aa:e0:e2:bb:20:6d:3d:
         9c:8d:05:0d:a3:7f:da:20:ad:22:10:68:76:cc:17:e9:68:ad:
         1e:8f:3e:c9:06:bc:ec:0a:32:d9:c6:05:49:21:23:23:e0:f9:
         9e:b1:a7:42:1f:05:40:a2:86:29:bc:51:28:99:56:66:22:53:
         71:64:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org