Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
File:                     34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa (raw, json)
Hash identifier:          C4ym7W8ZH5+vS2G44qKwka9GcLBZMsUTkDmWzn6yBJU=
Subject key identifier:   87:A8:5C:D4:B5:8A:E5:DE:B4:88:E4:7D:78:4D:19:92:90:2B:7F:B8
Certificate issuer:       /CN=74CC5D8F94712011D08C267BAB3AEEFF6592BDB4
Certificate serial:       2D905913024E4BF91D62E06714DFA8798844BEEE
Authority key identifier: 74:CC:5D:8F:94:71:20:11:D0:8C:26:7B:AB:3A:EE:FF:65:92:BD:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74CC5D8F94712011D08C267BAB3AEEFF6592BDB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
Signing time:             Fri 09 Feb 2024 12:31:07 +0000
ROA not before:           Fri 09 Feb 2024 12:26:07 +0000
ROA not after:            Fri 07 Feb 2025 12:31:07 +0000
asID:                     268160
IP address blocks:        45.170.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:90:59:13:02:4e:4b:f9:1d:62:e0:67:14:df:a8:79:88:44:be:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CC5D8F94712011D08C267BAB3AEEFF6592BDB4
        Validity
            Not Before: Feb  9 12:26:07 2024 GMT
            Not After : Feb  7 12:31:07 2025 GMT
        Subject: CN=87A85CD4B58AE5DEB488E47D784D1992902B7FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:22:42:98:c5:95:46:32:44:37:98:8a:b9:
                    00:f6:a5:f3:7d:eb:03:32:eb:f3:ab:40:9a:64:73:
                    75:e3:47:1d:49:26:6d:d5:dd:ab:be:6d:d1:da:ab:
                    09:3f:c4:5c:ed:d9:9c:a3:b2:11:2d:07:ae:55:82:
                    92:6f:13:94:fb:f8:5f:9f:c6:8a:36:72:a1:5a:e7:
                    d1:f9:ab:bf:e4:03:9e:22:24:d7:01:7c:1b:eb:c9:
                    e3:8b:3d:25:e5:7e:d0:f6:e1:8b:e9:90:18:50:69:
                    9d:35:c5:8f:14:7b:9e:eb:ff:61:ff:c4:22:21:f2:
                    47:91:9d:89:24:ff:36:e1:c1:57:c2:77:c7:9b:a2:
                    d3:7a:8d:72:d7:af:f8:f9:98:9c:ff:dd:d1:1e:31:
                    d5:cc:1a:8f:d9:5b:4a:fc:5f:08:01:f1:9b:f4:e7:
                    9a:e1:30:73:6e:80:5e:84:31:7d:fb:25:a9:b0:5a:
                    17:94:5e:0a:ba:2c:f9:ec:84:a3:9e:57:04:97:af:
                    3a:c5:35:d7:2e:56:03:c3:2b:fc:90:14:45:16:22:
                    fe:e5:04:56:ee:d3:b3:48:da:89:e1:bd:0b:93:2a:
                    8b:72:6c:35:51:01:31:c7:32:b6:49:8c:02:94:12:
                    5f:bf:7d:9a:28:af:12:97:61:17:03:35:b9:eb:5d:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:5C:D4:B5:8A:E5:DE:B4:88:E4:7D:78:4D:19:92:90:2B:7F:B8
            X509v3 Authority Key Identifier:
                keyid:74:CC:5D:8F:94:71:20:11:D0:8C:26:7B:AB:3A:EE:FF:65:92:BD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/74CC5D8F94712011D08C267BAB3AEEFF6592BDB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74CC5D8F94712011D08C267BAB3AEEFF6592BDB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:0f:57:96:03:cb:3b:73:96:b4:0b:51:1a:ea:f9:46:0b:65:
         2e:89:41:2e:53:07:7e:d0:28:d7:d6:71:cf:0e:dc:81:62:28:
         f9:20:86:55:4a:3a:c0:3c:85:49:68:9e:7b:cd:42:e6:5e:17:
         84:a3:da:00:68:89:6c:e8:20:d3:d6:d0:2c:e8:59:bd:c7:58:
         cc:2c:55:87:83:2e:fd:2c:c4:90:da:4d:8c:12:8f:56:fe:b1:
         54:f5:27:ab:0b:95:3f:38:11:27:ea:a6:de:db:df:5f:23:11:
         af:bf:bf:a8:02:54:ea:40:75:ed:a1:8a:87:99:ba:56:bc:ec:
         90:57:bf:2d:af:af:c7:67:1d:d6:aa:21:1d:58:f6:51:d4:cf:
         95:5a:b6:b5:d0:83:70:8e:2f:0c:c8:aa:a1:f4:28:1b:74:17:
         8b:fd:32:b6:96:a6:cd:a5:c7:ae:ed:73:8b:96:75:22:eb:8c:
         86:39:21:8d:0b:45:75:76:53:96:eb:02:c8:63:83:1c:a7:f3:
         1f:b5:fc:5a:0f:ff:56:40:4a:e0:5a:a6:70:31:18:8f:38:9b:
         11:f2:5f:8e:e8:43:2f:b3:f2:19:4f:6d:a3:1f:e2:12:3b:9d:
         6e:96:bb:45:cb:db:03:92:18:bd:bd:dc:57:66:19:d8:88:b8:
         22:10:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org