Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/34352e3137302e3232302e302f32322d3332203d3e20323638313734.roa
File:                     34352e3137302e3232302e302f32322d3332203d3e20323638313734.roa (raw, json)
Hash identifier:          3qWaeCgP7yPauxWxlUfudNeOVWYi+dA1y0XEU3Ssc7E=
Subject key identifier:   ED:35:5A:AA:A0:D7:62:75:96:0F:C2:2B:5F:66:DC:70:CB:77:AB:E4
Certificate issuer:       /CN=E24FA91D4BC06D0AC6625AE77CB8922782C93BBC
Certificate serial:       5A880D243EA06FBE6F4B124D88D98956A3FE8A7D
Authority key identifier: E2:4F:A9:1D:4B:C0:6D:0A:C6:62:5A:E7:7C:B8:92:27:82:C9:3B:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/34352e3137302e3232302e302f32322d3332203d3e20323638313734.roa
Signing time:             Wed 28 Feb 2024 13:23:34 +0000
ROA not before:           Wed 28 Feb 2024 13:18:34 +0000
ROA not after:            Wed 26 Feb 2025 13:23:34 +0000
asID:                     268174
IP address blocks:        45.170.220.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:88:0d:24:3e:a0:6f:be:6f:4b:12:4d:88:d9:89:56:a3:fe:8a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E24FA91D4BC06D0AC6625AE77CB8922782C93BBC
        Validity
            Not Before: Feb 28 13:18:34 2024 GMT
            Not After : Feb 26 13:23:34 2025 GMT
        Subject: CN=ED355AAAA0D76275960FC22B5F66DC70CB77ABE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6d:97:fa:86:d6:4a:cf:1b:69:0a:bb:e4:a6:
                    8f:d8:28:ed:98:39:27:cf:b3:1c:35:cb:dc:cc:a6:
                    45:fc:00:48:e3:93:8b:8b:10:2b:7a:00:cc:8e:16:
                    2f:b8:4f:39:91:54:70:89:31:31:7f:ef:7f:9a:3d:
                    fd:b7:1f:29:9a:f7:92:57:15:03:61:75:d6:3e:ba:
                    a3:c7:b0:4d:07:9d:06:fc:45:6e:c7:c0:7e:bd:6f:
                    0a:e5:ef:08:c2:8f:61:98:7b:7d:5a:0a:c6:c3:a4:
                    0e:23:f2:93:e7:af:80:35:0e:d2:d3:03:5e:d6:84:
                    43:19:c6:9b:02:06:62:5a:4f:91:37:e0:c8:e1:6d:
                    05:65:42:45:f9:88:b9:f5:cf:37:e1:35:a6:bc:02:
                    d3:2a:3f:82:2c:9c:af:1d:1a:97:19:32:d1:ab:c2:
                    ba:bf:ea:bb:12:28:17:9c:d9:54:92:ea:16:ed:ff:
                    6c:b1:e5:e4:11:29:eb:5c:1c:8d:da:91:86:0a:ee:
                    85:2c:de:f8:7a:c1:d9:0f:9a:94:e0:62:c2:be:a9:
                    eb:54:71:89:a2:f2:2c:76:33:60:3f:2a:be:1a:99:
                    ee:d5:86:02:a9:0a:99:bf:66:81:51:63:55:dc:09:
                    63:bc:d5:61:31:0b:21:4d:36:5f:e1:24:9a:a4:a8:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:35:5A:AA:A0:D7:62:75:96:0F:C2:2B:5F:66:DC:70:CB:77:AB:E4
            X509v3 Authority Key Identifier:
                keyid:E2:4F:A9:1D:4B:C0:6D:0A:C6:62:5A:E7:7C:B8:92:27:82:C9:3B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/34352e3137302e3232302e302f32322d3332203d3e20323638313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:af:4b:c9:c4:3a:86:9e:c5:24:b0:61:5c:84:c9:46:9c:3b:
         b6:68:e5:71:0a:31:62:c9:df:2d:30:81:0c:18:ac:fd:09:2a:
         74:cf:28:9d:c7:65:e5:9d:2a:e5:6c:13:c5:f5:29:5d:4b:84:
         ef:6a:2b:30:dc:d2:79:32:ad:91:25:d1:e6:22:96:77:0a:4e:
         8f:51:4e:ba:1e:18:80:44:c0:ee:9b:a9:0c:a8:e9:e7:5e:ae:
         58:da:f2:bf:28:bd:59:91:2f:fe:7e:92:d1:5e:88:ab:a0:16:
         4b:32:7f:68:74:7a:3c:ac:64:c6:85:4f:e6:30:68:13:ea:c8:
         11:41:81:ee:20:b8:6a:06:1f:f4:a0:38:5f:e2:fa:13:b7:9f:
         ab:22:b4:87:f5:1b:32:99:ce:cb:db:f2:d1:7b:3b:90:47:66:
         a8:26:e3:83:52:a8:b6:65:dd:5b:e9:b5:3e:35:4b:34:7a:2d:
         fa:e7:06:ab:1b:81:b3:07:6c:ab:2b:1b:7d:94:00:e3:90:99:
         03:f3:e7:d7:94:1d:e9:b4:03:e7:60:b3:9e:ff:4c:90:a3:92:
         9f:fe:bd:69:70:e8:61:16:14:3f:f4:ba:74:22:1b:c4:6c:f8:
         36:57:ef:3d:89:60:ea:e4:a3:6a:49:e0:00:37:40:07:37:6c:
         ed:4a:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org