Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3232203d3e20323638313535.roa
File:                     34352e3137302e3135322e302f32322d3232203d3e20323638313535.roa (raw, json)
Hash identifier:          yWfPM1m5Dxb5tIPE8u8jD/NoFkyB3nWH7OR9JJ+Nnbs=
Subject key identifier:   70:77:D1:B4:76:78:57:85:81:94:EC:B1:59:12:AA:16:FE:E2:F0:D7
Certificate issuer:       /CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
Certificate serial:       2732F70510E66220067366B33B3696D1C932ECBE
Authority key identifier: 98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3232203d3e20323638313535.roa
Signing time:             Fri 15 Jul 2022 20:15:42 +0000
ROA not before:           Fri 15 Jul 2022 20:10:42 +0000
ROA not after:            Fri 14 Jul 2023 20:15:42 +0000
asID:                     268155
IP address blocks:        45.170.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:32:f7:05:10:e6:62:20:06:73:66:b3:3b:36:96:d1:c9:32:ec:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
        Validity
            Not Before: Jul 15 20:10:42 2022 GMT
            Not After : Jul 14 20:15:42 2023 GMT
        Subject: CN=7077D1B4767857858194ECB15912AA16FEE2F0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:dd:05:dd:b4:b6:12:7c:f8:2e:11:29:7a:
                    d5:ea:f2:02:b4:5a:89:ab:2f:70:3c:04:4c:a0:db:
                    b9:84:24:aa:e1:e3:18:2a:c9:e2:9a:3d:22:14:11:
                    ee:cc:8f:80:39:37:88:c1:4b:e0:2f:42:c7:22:4d:
                    50:5b:0d:d4:97:77:37:2d:70:c7:04:20:cf:26:ea:
                    ca:a7:80:c7:f6:08:59:db:00:14:7c:ea:11:1b:fb:
                    2a:0d:5c:3c:60:0e:24:1e:a9:a4:21:d0:ba:a2:ed:
                    88:73:ef:c8:0e:da:b7:36:17:cc:cb:cb:72:ca:dc:
                    70:3f:aa:97:27:e1:37:f6:96:08:e4:de:c9:63:2a:
                    86:e8:28:32:d1:3d:5e:f3:f5:b0:67:31:2f:34:ff:
                    b7:21:cd:38:ac:2f:46:ec:b5:42:1e:48:19:6c:c0:
                    dc:e3:94:3f:7c:fa:46:1f:71:37:80:1f:2c:64:0b:
                    da:54:12:30:73:5c:fc:c9:50:6b:99:48:54:19:0e:
                    4f:ca:c1:81:ca:61:48:17:a8:45:8a:f2:62:36:19:
                    16:0a:55:3a:a6:10:54:db:99:27:13:79:47:93:23:
                    45:69:41:04:a8:2d:da:5e:0c:dd:55:fc:42:3e:92:
                    c4:51:9d:1c:27:80:f7:c4:bd:cb:e0:ae:13:cf:78:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:77:D1:B4:76:78:57:85:81:94:EC:B1:59:12:AA:16:FE:E2:F0:D7
            X509v3 Authority Key Identifier:
                keyid:98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3232203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:9b:a4:0e:5b:60:c3:1b:ab:e9:1a:41:b3:8a:75:86:da:ac:
         db:23:06:92:15:e9:7b:7e:19:e5:7c:2e:29:6c:fa:a8:91:79:
         8c:72:fc:65:4b:64:b3:e5:e1:d2:35:d5:f4:0d:be:e0:90:8f:
         05:3c:6a:91:f6:df:fb:2d:03:90:68:5d:ad:c1:02:dd:74:01:
         52:41:6f:f3:cf:9f:09:a7:09:9f:e3:58:39:7e:8e:84:35:27:
         2f:46:84:df:bb:ea:26:62:9d:9d:a5:d8:0b:f2:bc:6a:a8:6c:
         f2:fe:a6:4b:dc:8a:ad:c2:1a:c3:5f:6f:de:ee:90:4f:a1:63:
         ae:a6:5a:d7:94:68:70:67:cf:85:e3:45:14:31:07:9b:63:22:
         69:0a:98:08:3b:bc:90:d8:68:59:87:9d:cc:90:bd:24:57:21:
         d5:a1:f2:3c:62:fe:25:78:f1:f5:a0:fd:a8:94:65:17:b7:ed:
         a4:fc:2d:90:22:e0:83:26:4b:6a:45:01:fe:10:18:e8:fd:71:
         73:79:3c:c7:27:f4:63:bf:17:34:d5:9d:5a:82:b2:a7:0a:c1:
         af:e8:4d:89:2d:7f:a6:c9:21:9a:8b:40:6f:13:83:84:0a:67:
         0f:90:91:ce:c4:ab:54:1e:5d:2a:0c:7d:72:b9:b2:4f:77:a5:
         67:f4:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org