Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
File:                     34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (raw, json)
Hash identifier:          POioAg3mGE1NqO/42D19tfkbohLjZYOI+frV0M1bUaQ=
Subject key identifier:   F1:A1:04:00:E7:0D:46:1E:F9:54:79:FB:09:7E:32:64:E2:C5:58:E7
Certificate issuer:       /CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
Certificate serial:       7681324B9EFA4710568FC1C4CA1C5FBF94D72EEC
Authority key identifier: 09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
Signing time:             Fri 26 Apr 2024 17:13:04 +0000
ROA not before:           Fri 26 Apr 2024 17:08:04 +0000
ROA not after:            Fri 25 Apr 2025 17:13:04 +0000
asID:                     268155
IP address blocks:        45.170.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:81:32:4b:9e:fa:47:10:56:8f:c1:c4:ca:1c:5f:bf:94:d7:2e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
        Validity
            Not Before: Apr 26 17:08:04 2024 GMT
            Not After : Apr 25 17:13:04 2025 GMT
        Subject: CN=F1A10400E70D461EF95479FB097E3264E2C558E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:37:5a:21:67:fa:76:b9:1a:d6:f1:a2:0e:
                    b6:2c:c5:8e:93:0d:fe:92:d5:8a:da:66:52:3e:c3:
                    2b:75:16:5b:d9:d6:ef:46:c5:21:19:de:da:f3:ca:
                    6a:f7:ea:46:8c:24:a6:a8:da:81:1e:a8:43:e0:67:
                    1b:e0:47:85:23:4a:3b:0e:39:6a:d2:a7:68:29:56:
                    76:a2:05:8e:91:8f:d6:8e:7a:76:b4:94:0f:90:d4:
                    18:3d:06:d9:d2:a5:95:ef:2c:c8:95:cb:48:c3:2e:
                    50:f4:17:38:15:ed:80:63:24:74:85:36:5f:09:d0:
                    f7:5d:59:7c:1b:51:52:d0:a4:6b:28:f0:c8:34:ca:
                    0d:33:cd:04:51:e5:98:29:72:8d:a5:4b:11:05:e3:
                    29:00:2e:00:89:1c:1f:dd:61:c8:a3:d6:26:f2:a2:
                    ae:7f:fa:f9:52:e7:26:72:57:c6:14:60:25:23:80:
                    64:bd:66:b7:f6:5e:df:f4:a8:8a:42:8f:a9:ec:d3:
                    b3:ad:69:bd:57:12:61:45:72:6c:d9:77:2a:de:dc:
                    55:0c:a7:f0:dd:1b:a9:68:45:a9:ec:4f:25:22:1b:
                    69:a2:72:77:72:fa:ee:95:d5:21:0e:00:60:2b:22:
                    cd:df:5e:18:d2:be:92:d1:4f:89:5e:08:64:e4:2f:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A1:04:00:E7:0D:46:1E:F9:54:79:FB:09:7E:32:64:E2:C5:58:E7
            X509v3 Authority Key Identifier:
                keyid:09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:47:71:6c:9c:c8:e4:bd:88:52:34:5c:97:79:82:de:4d:98:
         91:f6:f2:e8:21:06:25:61:5b:f8:93:c7:b6:bf:14:6d:1f:da:
         67:59:32:d9:ba:5c:27:38:1b:69:26:07:66:04:84:9d:37:c7:
         7a:39:09:19:b1:d2:e7:a7:e7:44:3b:19:30:9d:24:aa:81:5c:
         53:8a:90:22:ab:c7:e3:45:c5:0c:26:3a:76:b4:a2:35:ef:0b:
         c5:86:c2:bb:85:97:b2:29:e8:3e:61:97:97:e1:bb:36:e3:01:
         4b:a6:bc:be:91:d5:17:b6:3e:0d:86:6b:fe:62:18:6c:ad:88:
         9b:d5:59:ff:75:d0:bf:1b:82:42:c5:c3:fe:74:d3:eb:a1:1e:
         98:61:32:60:2d:b8:e6:dd:69:e4:5a:6d:be:92:62:ed:08:b9:
         89:4e:68:99:6a:f2:31:bf:c8:88:b2:d4:ec:71:f1:c0:1b:38:
         29:79:39:e2:a5:56:6f:6e:90:d0:d9:17:9b:b9:4f:ed:94:92:
         18:8c:a3:f6:d0:2d:b0:1f:23:3b:07:9d:01:92:e8:5d:34:c2:
         5e:8d:68:cb:b0:cb:66:f9:f3:a2:22:6d:fc:40:cc:c1:37:f7:
         c7:69:65:28:32:5e:61:31:23:63:d2:57:ac:cd:71:25:35:7e:
         a6:a1:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org