Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa
File:                     34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa (raw, json)
Hash identifier:          qVVe846mgGa4gMnx8WV7TICEeqd8jyNkO+/08yPDPdI=
Subject key identifier:   F6:3C:6D:8A:8F:78:89:58:BD:7C:7D:04:F5:16:A3:37:E5:29:D0:65
Certificate issuer:       /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial:       64C9A833971ED57D92094229224C5DEA277F6ECE
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa
Signing time:             Fri 14 Jul 2023 18:58:02 +0000
ROA not before:           Fri 14 Jul 2023 18:53:02 +0000
ROA not after:            Fri 12 Jul 2024 18:58:02 +0000
asID:                     268101
IP address blocks:        45.168.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c9:a8:33:97:1e:d5:7d:92:09:42:29:22:4c:5d:ea:27:7f:6e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
        Validity
            Not Before: Jul 14 18:53:02 2023 GMT
            Not After : Jul 12 18:58:02 2024 GMT
        Subject: CN=F63C6D8A8F788958BD7C7D04F516A337E529D065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:e0:9a:ab:d6:f7:f2:2a:8e:88:68:5f:10:
                    0b:03:e9:19:74:0c:dd:6f:f2:e1:e6:d5:8d:03:b7:
                    f9:12:9b:a1:c4:58:3e:e4:04:cc:40:8a:47:d6:9e:
                    40:ff:c8:fb:c6:82:e0:9f:1f:8b:b5:15:04:99:46:
                    25:b2:8d:10:66:ab:59:82:db:19:0b:2a:37:6b:ca:
                    ee:35:e1:fc:36:e7:4a:81:e8:40:5a:72:08:08:e3:
                    59:37:45:06:a5:d8:7d:3e:eb:c2:73:4f:8a:0d:2a:
                    ab:93:c3:49:08:86:84:92:61:a3:b4:06:15:fb:fb:
                    f3:39:cd:db:67:29:97:8c:aa:74:cf:d7:9b:44:67:
                    c0:c4:8e:fb:bb:58:a2:e3:22:ff:46:34:cb:60:13:
                    cf:b5:35:1a:5b:39:08:cc:a6:b9:49:2e:34:5d:5d:
                    73:1a:5d:b0:cc:f8:08:2f:da:4b:23:e9:9f:4e:26:
                    ff:ee:e8:ea:03:48:a6:57:5d:26:70:3e:f1:56:06:
                    ba:a2:5d:f1:74:b7:10:11:bf:e3:8f:96:13:c8:3f:
                    e9:fe:92:84:79:03:25:c0:2f:97:07:8f:46:b1:e0:
                    7d:66:37:7d:10:76:97:c0:2b:4b:55:ec:c1:46:da:
                    85:40:e2:93:80:3a:75:a1:8b:b6:40:af:56:31:c1:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3C:6D:8A:8F:78:89:58:BD:7C:7D:04:F5:16:A3:37:E5:29:D0:65
            X509v3 Authority Key Identifier:
                keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:30:c6:82:86:41:3c:fd:5e:5f:6e:59:85:dd:88:27:36:
         68:fb:7d:ea:23:d9:72:4d:48:a4:ea:4e:53:cf:a7:2e:a9:de:
         7f:10:7d:ab:5b:d6:57:14:40:6b:15:12:f3:4f:de:00:26:9f:
         dd:56:ed:47:46:26:5f:64:9f:b0:9e:b7:6b:ba:86:65:c9:97:
         c8:3a:ca:db:68:e8:a6:68:34:63:42:8e:d4:b3:04:3b:ea:20:
         91:45:58:6e:36:ed:d9:26:1e:c5:7b:a4:94:1f:41:2b:b1:c7:
         79:0f:90:f4:bb:93:6f:5e:11:11:c2:55:75:85:4b:03:45:98:
         f0:8f:84:94:56:79:e7:72:ba:83:8d:e1:10:8c:2e:be:5f:f9:
         d1:eb:82:36:6d:a4:b3:1b:03:a3:a1:cc:c9:ea:a2:d3:98:9f:
         7e:23:f1:43:d9:ad:29:ec:e0:a7:d9:27:93:5a:7f:34:23:72:
         4c:b5:4a:ce:4d:40:23:80:81:85:2d:05:a5:d7:90:6a:06:c0:
         c8:af:af:7a:86:64:2f:dc:17:07:b4:b8:34:6f:53:13:15:77:
         e0:d9:bb:11:ad:73:14:a8:3a:1a:05:b7:49:99:67:29:8b:87:
         b1:8e:f9:3e:7f:fc:d7:7e:fe:b3:8d:69:cf:86:c8:0f:23:b9:
         c8:bf:89:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org