Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
File:                     34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (raw, json)
Hash identifier:          JxtO2Z6Z0jDd29z5RNxvMeE8z9Dd5onlRNmra9kQado=
Subject key identifier:   71:1D:13:01:2B:40:AE:82:13:3B:CD:46:E3:67:BC:30:A2:A7:C2:A6
Certificate issuer:       /CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
Certificate serial:       65C167FF80D2BD6511574083BE686AF4FB3C19B0
Authority key identifier: 98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
Signing time:             Mon 08 Apr 2024 17:09:31 +0000
ROA not before:           Mon 08 Apr 2024 17:04:31 +0000
ROA not after:            Mon 07 Apr 2025 17:09:31 +0000
asID:                     268155
IP address blocks:        45.170.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c1:67:ff:80:d2:bd:65:11:57:40:83:be:68:6a:f4:fb:3c:19:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
        Validity
            Not Before: Apr  8 17:04:31 2024 GMT
            Not After : Apr  7 17:09:31 2025 GMT
        Subject: CN=711D13012B40AE82133BCD46E367BC30A2A7C2A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:68:33:01:e4:52:ec:0f:5d:cd:4c:d9:ad:
                    37:50:4d:ec:c7:51:87:ff:94:57:59:48:a3:a8:43:
                    66:7f:d7:be:27:99:11:b6:15:d0:fd:78:f0:c5:a5:
                    b0:ad:09:d3:71:7f:4a:fd:68:ea:77:d7:86:39:cc:
                    3f:96:96:76:76:68:f8:50:12:d7:93:53:71:cc:bf:
                    51:97:84:34:25:77:22:51:11:c8:75:32:53:b2:6d:
                    11:06:32:fd:5b:f0:d3:3f:2c:fb:4e:29:12:f0:fe:
                    57:03:be:36:49:08:8a:94:02:9c:74:a4:2f:24:99:
                    70:9c:b2:5d:d6:31:eb:c0:8b:67:22:90:6f:ce:93:
                    e2:b1:ca:b9:fa:24:4e:a9:c9:4b:3c:e2:76:c2:80:
                    7b:f0:34:e1:e5:22:10:05:49:31:52:d7:f4:c3:58:
                    e4:ee:dd:c5:cb:25:4d:32:05:dd:f8:47:ee:ae:ad:
                    da:a5:6d:9c:d9:a6:c4:75:53:7c:8a:80:5c:ff:83:
                    69:0b:67:4e:21:2e:12:63:10:49:c9:ff:7c:d4:56:
                    10:b7:a8:90:4d:31:67:dd:e4:3c:af:7c:f9:d7:f5:
                    d6:72:54:60:a6:67:14:89:ae:2f:2d:88:6c:c6:07:
                    e3:d1:cb:fd:c2:62:68:dc:7a:00:91:96:a8:fe:01:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1D:13:01:2B:40:AE:82:13:3B:CD:46:E3:67:BC:30:A2:A7:C2:A6
            X509v3 Authority Key Identifier:
                keyid:98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ea:db:17:f4:85:13:27:9c:c2:83:11:8e:2c:14:1d:78:ee:24:
         a6:cf:04:71:af:80:88:b0:d9:bb:ca:eb:32:0e:3d:41:e7:bf:
         b0:e1:84:81:e3:fd:fe:35:d4:42:3b:d3:9c:04:20:34:6f:19:
         d1:a8:bb:c2:62:e1:4d:f2:bd:fa:8d:8f:8a:c0:10:28:03:e0:
         c5:0d:d9:d0:8f:8c:d0:f8:b7:71:88:e2:b2:b1:7e:a8:eb:99:
         ec:9c:23:64:84:43:c9:24:5e:7d:d2:c4:60:f8:6a:78:43:03:
         ac:48:c3:b6:24:25:20:b4:7e:6f:28:a9:e8:2a:7a:02:25:9e:
         72:57:2e:08:81:73:68:f5:85:92:80:6b:fd:25:a6:6a:92:85:
         84:d7:31:bf:93:c2:17:68:78:fd:f7:61:ae:c0:31:16:12:1e:
         5f:0d:8a:98:0e:ac:ef:20:11:8f:f1:60:8c:1e:a3:db:2e:be:
         0e:25:93:da:af:00:41:0d:92:5f:9c:7c:cd:81:c0:85:a5:12:
         bf:a9:4d:d5:85:13:43:92:69:9b:6f:fc:28:28:d3:93:09:7e:
         fc:fe:ee:72:be:ad:7c:f3:7b:4a:0e:b3:87:22:30:16:f0:6d:
         0f:c0:ff:6d:f7:5c:63:4f:da:72:5a:b3:a6:1b:ea:e8:0b:0d:
         b9:d9:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org