Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/34352e3137302e3136302e302f32322d3332203d3e20323638313638.roa
File:                     34352e3137302e3136302e302f32322d3332203d3e20323638313638.roa (raw, json)
Hash identifier:          KBdBUcP2GQ9OdbrB4+GSPGtnN2vehBkDo4lXqe0fwes=
Subject key identifier:   62:27:4C:D4:33:B4:62:0D:69:B5:2B:2B:59:13:85:DA:15:86:72:D8
Certificate issuer:       /CN=71207E5607DB6402520A3C56A289E2F2B63BEF0A
Certificate serial:       21E6D7B18020A5925B0223E434CE2D02781391BB
Authority key identifier: 71:20:7E:56:07:DB:64:02:52:0A:3C:56:A2:89:E2:F2:B6:3B:EF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/34352e3137302e3136302e302f32322d3332203d3e20323638313638.roa
Signing time:             Mon 26 Feb 2024 19:01:41 +0000
ROA not before:           Mon 26 Feb 2024 18:56:41 +0000
ROA not after:            Mon 24 Feb 2025 19:01:41 +0000
asID:                     268168
IP address blocks:        45.170.160.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e6:d7:b1:80:20:a5:92:5b:02:23:e4:34:ce:2d:02:78:13:91:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71207E5607DB6402520A3C56A289E2F2B63BEF0A
        Validity
            Not Before: Feb 26 18:56:41 2024 GMT
            Not After : Feb 24 19:01:41 2025 GMT
        Subject: CN=62274CD433B4620D69B52B2B591385DA158672D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:ab:a5:0b:10:18:31:19:93:00:25:86:47:
                    72:4f:9a:c2:e2:c0:c2:cf:c9:02:1d:f8:ff:77:9f:
                    56:37:33:ca:ec:59:99:fa:7e:64:37:0a:5b:30:4a:
                    48:ce:95:3d:d6:59:17:78:43:23:3f:03:ce:78:26:
                    50:d2:b9:eb:b8:6d:96:cc:ac:6a:35:24:e8:e2:88:
                    61:83:7c:e4:23:c3:44:26:44:fa:0c:da:cf:a5:3f:
                    98:31:0a:f6:67:7d:65:8b:3e:1f:b1:72:fb:39:55:
                    89:b6:96:e3:dd:17:01:f3:b4:1a:88:81:91:e0:1d:
                    09:ea:69:2b:4a:ed:00:1e:bc:49:58:48:99:9c:61:
                    73:6b:2c:a7:9a:c2:22:e0:61:83:ab:08:d2:92:94:
                    2c:b5:b1:87:3c:f7:6e:65:89:83:b0:a4:a7:04:99:
                    f5:5e:1c:0d:69:ff:88:db:3d:64:42:5c:7f:48:6a:
                    7b:26:ef:91:67:c2:d8:d5:4a:a5:5a:a3:4d:df:5c:
                    16:9e:74:3c:b3:b2:7f:67:9b:e8:97:95:88:7b:5d:
                    de:8b:a3:9c:d4:2b:3d:d8:9f:3e:aa:59:35:5e:87:
                    0b:46:3f:c1:67:b1:6c:17:30:90:e7:4a:fe:cd:e2:
                    57:07:26:83:5e:99:87:6e:72:75:fd:10:c7:9f:e2:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:27:4C:D4:33:B4:62:0D:69:B5:2B:2B:59:13:85:DA:15:86:72:D8
            X509v3 Authority Key Identifier:
                keyid:71:20:7E:56:07:DB:64:02:52:0A:3C:56:A2:89:E2:F2:B6:3B:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/34352e3137302e3136302e302f32322d3332203d3e20323638313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:27:52:4a:cb:05:c1:ff:68:e2:e3:30:0d:f7:7f:b1:cd:1a:
         1a:b4:bc:9f:6f:ad:86:82:8d:5c:aa:3d:14:5b:4c:c6:cd:9e:
         0f:93:98:96:e1:c0:d3:c8:f9:c5:6e:9f:84:07:e8:8c:5f:55:
         47:a5:10:89:4d:6b:e6:91:d7:29:73:a4:5f:8c:fe:fb:85:1e:
         7a:68:96:59:ba:df:b5:52:d7:17:ff:fa:4d:11:f6:27:99:7c:
         33:39:f8:7a:3b:61:3e:b9:f4:f3:6b:e6:02:55:c1:c2:e6:05:
         8a:02:39:67:96:e3:5f:ef:fd:e4:70:5f:a7:af:91:32:46:a8:
         74:45:3a:b4:44:5f:03:31:6c:56:d6:63:76:b9:ff:ee:e0:a6:
         b5:8c:20:89:71:f3:c3:23:cc:f0:f6:7d:8c:93:d3:25:1f:82:
         46:c0:36:b4:8b:8b:58:8f:e6:ad:b7:55:82:6a:94:61:49:0f:
         f8:ac:a4:05:12:7c:73:2c:16:d1:9c:1a:b0:5c:55:53:76:e6:
         22:5e:55:72:67:11:13:df:8f:a1:4c:bf:9f:e3:5b:54:57:5b:
         64:2a:28:c2:9c:50:fc:48:7a:13:be:02:96:21:65:39:ba:d3:
         33:b2:98:bc:ba:b4:05:e5:96:4f:47:2f:eb:82:5e:c5:07:f2:
         55:ec:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org