Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3233203d3e20323638313535.roa
File:                     34352e3137302e3135322e302f32322d3233203d3e20323638313535.roa (raw, json)
Hash identifier:          dc/Vd2GyHaAfaOFCyX5mWDYSCaD9cJlcDg/3iBL0x8Y=
Subject key identifier:   E3:3A:32:DD:C8:96:C4:E7:DE:B7:B1:E1:B0:86:51:91:88:8C:88:EF
Certificate issuer:       /CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
Certificate serial:       28D0B3ED1096CD356F465E867FEDD5D4437DC52B
Authority key identifier: 98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3233203d3e20323638313535.roa
Signing time:             Fri 06 Jan 2023 19:53:26 +0000
ROA not before:           Fri 06 Jan 2023 19:48:26 +0000
ROA not after:            Fri 05 Jan 2024 19:53:26 +0000
asID:                     268155
IP address blocks:        45.170.152.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d0:b3:ed:10:96:cd:35:6f:46:5e:86:7f:ed:d5:d4:43:7d:c5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
        Validity
            Not Before: Jan  6 19:48:26 2023 GMT
            Not After : Jan  5 19:53:26 2024 GMT
        Subject: CN=E33A32DDC896C4E7DEB7B1E1B0865191888C88EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:58:f8:76:df:e2:dd:e1:e6:57:15:4d:f3:
                    9c:67:79:de:27:c7:89:3a:b6:f2:ae:0b:a7:c4:8d:
                    87:f8:cd:58:6f:17:ac:ef:ea:46:4d:f4:59:93:47:
                    41:41:6f:b2:bc:03:c4:c7:f5:9e:6a:c6:7a:b3:41:
                    53:8b:89:7e:7f:d6:a0:d6:64:df:90:87:cb:29:ea:
                    71:46:72:49:04:13:7b:8a:5b:a4:c7:bf:a5:06:2b:
                    54:aa:d0:23:a4:e3:14:47:c6:63:00:81:5b:19:a0:
                    2d:54:13:67:a8:18:1a:22:6e:8d:e7:71:7d:a9:70:
                    bd:7b:e2:18:3d:36:59:5d:cf:00:5d:62:5a:3d:30:
                    34:7e:53:02:46:b9:79:48:cd:a3:ad:b3:aa:99:1e:
                    92:9a:04:78:57:7d:1f:c1:af:bb:83:f8:01:18:5e:
                    ce:01:91:0a:67:c8:cd:e7:20:58:41:d6:be:4f:64:
                    02:68:dc:42:e6:b8:f4:0d:b7:d1:36:54:1d:39:80:
                    52:4c:ca:24:a1:d1:26:46:02:24:4f:44:f9:03:8c:
                    42:46:c7:e0:26:6b:58:1e:fd:4b:59:fd:26:cb:5c:
                    dc:c3:2c:b8:8b:36:1b:4c:7d:81:00:91:42:e1:bd:
                    9a:e3:15:43:69:63:15:56:8a:8a:20:21:ae:e4:47:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3A:32:DD:C8:96:C4:E7:DE:B7:B1:E1:B0:86:51:91:88:8C:88:EF
            X509v3 Authority Key Identifier:
                keyid:98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3233203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:5f:aa:dd:ad:6c:86:96:66:a7:76:3b:f4:49:66:ae:fd:bd:
         ab:58:7b:d8:8e:4c:f6:5c:13:ea:07:de:f5:e4:cf:a0:ff:38:
         9b:6c:79:82:53:d2:3c:ec:6c:a7:24:ed:7d:88:bc:d9:18:88:
         c7:98:90:04:57:43:03:9b:0e:3a:73:7f:33:eb:43:21:ee:c4:
         f9:e5:8e:cd:0c:ca:9b:7a:bf:38:58:5b:31:67:99:07:6e:d1:
         23:a9:16:1b:7b:df:d8:d5:b2:6b:25:d1:aa:91:1b:d1:30:68:
         92:1d:8a:78:9d:b0:b2:94:68:0c:ab:e4:9a:3a:b7:e6:d6:86:
         0e:d9:3a:38:20:af:42:d9:80:ad:eb:f3:68:42:c4:b7:8b:4e:
         a6:76:d5:f1:0e:2c:1e:28:29:52:4b:99:f2:aa:87:30:c9:55:
         3f:5c:59:ac:fe:1e:06:44:61:4c:cd:0e:0f:d6:63:44:d4:de:
         02:3f:ee:9d:f9:8b:49:aa:ed:2d:af:99:0d:f7:36:85:22:64:
         40:9f:83:f7:cc:7f:b3:0b:b4:61:77:99:3b:51:ae:f1:65:ee:
         5b:89:06:70:38:4b:0a:7c:32:71:37:9b:e2:b5:77:13:50:da:
         cd:3e:93:bc:6d:3a:fd:83:14:ad:c0:2d:cf:33:f2:34:6e:d1:
         eb:9f:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org