Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa
File:                     34352e3137302e37322e302f32322d3232203d3e20323638313533.roa (raw, json)
Hash identifier:          FOJPqp6ao9QNFlG142FDPYZEtlpSlyggTLJn0c4qunY=
Subject key identifier:   6A:A2:D7:5B:18:9B:68:85:F2:97:F4:93:5F:AA:6F:01:29:8F:57:E2
Certificate issuer:       /CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
Certificate serial:       0A30A2854F2159EFC8CFA7875AF2E31D70C5C2F9
Authority key identifier: B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa
Signing time:             Fri 07 Jul 2023 16:24:51 +0000
ROA not before:           Fri 07 Jul 2023 16:19:51 +0000
ROA not after:            Fri 05 Jul 2024 16:24:51 +0000
asID:                     268153
IP address blocks:        45.170.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:30:a2:85:4f:21:59:ef:c8:cf:a7:87:5a:f2:e3:1d:70:c5:c2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
        Validity
            Not Before: Jul  7 16:19:51 2023 GMT
            Not After : Jul  5 16:24:51 2024 GMT
        Subject: CN=6AA2D75B189B6885F297F4935FAA6F01298F57E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:b6:f4:2f:20:59:95:92:4c:b5:bd:43:d2:
                    b3:5d:d5:e5:c8:ac:ca:8d:16:3b:dc:68:8e:f0:d5:
                    7b:49:cd:bc:fc:9d:1e:09:cd:96:ea:13:17:47:c6:
                    29:e2:24:31:26:eb:5c:ae:a6:07:48:c8:09:b4:57:
                    39:fe:04:51:9c:d6:ce:d6:f3:11:79:cc:30:a1:4d:
                    d7:7a:11:51:d5:66:ff:8a:d4:64:9a:f1:8d:25:f5:
                    67:c1:86:1a:d8:ea:ba:c7:73:c6:d7:57:fa:5f:09:
                    ba:91:85:cb:b9:1a:3a:84:00:8d:74:92:37:4a:af:
                    b6:6d:05:eb:e3:00:ae:78:48:3d:ac:6d:09:4d:dd:
                    d2:fa:91:bc:1c:48:01:08:36:2b:16:2d:bb:49:46:
                    ab:88:3d:df:2a:05:4a:2c:25:11:8f:f0:09:81:16:
                    10:50:80:34:c3:b6:66:62:f6:f9:d6:d7:a5:c6:48:
                    36:11:58:55:da:07:a8:60:12:16:76:e2:2d:41:4f:
                    28:d8:4e:10:eb:2c:d9:d3:06:64:1d:2a:13:ca:af:
                    61:89:5f:c7:6f:6f:de:9c:30:cc:31:e2:c6:47:aa:
                    da:c8:1c:b9:53:64:70:ee:e3:c8:a4:03:67:ed:09:
                    9f:21:93:f7:46:b7:d8:ac:28:e3:34:01:6e:39:56:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A2:D7:5B:18:9B:68:85:F2:97:F4:93:5F:AA:6F:01:29:8F:57:E2
            X509v3 Authority Key Identifier:
                keyid:B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:10:70:a2:32:de:18:6f:87:52:3b:d2:68:7f:8f:0b:3c:
         2d:4a:64:5d:53:88:23:a4:65:11:07:26:f7:e7:cf:42:4b:67:
         ff:74:62:69:79:be:92:51:44:d9:13:17:0d:f2:f1:d4:d8:9e:
         a1:0e:f6:a5:e2:69:6a:ca:c8:20:50:3e:0e:07:2b:4b:e3:04:
         7d:b9:60:f0:a3:75:cf:49:87:65:c4:8e:a7:a9:dc:a9:6d:63:
         82:eb:7b:92:0b:53:21:a1:02:80:f0:84:2b:7f:f4:41:b5:f1:
         45:45:7c:f6:c5:d1:b8:42:f4:a7:d3:03:a0:be:d5:7c:3a:ff:
         76:da:eb:62:4d:63:e3:21:19:b2:c7:2c:b5:37:0c:e1:fd:f8:
         e3:57:25:85:31:96:86:92:0e:d9:6a:78:35:5b:2a:f0:65:47:
         38:34:0c:6d:c1:7c:fa:8c:8b:8e:4c:98:3a:84:58:c1:6f:4a:
         5b:73:e4:a3:89:0c:29:f8:01:76:93:59:18:c0:51:af:dc:72:
         c6:7e:74:ef:d1:af:d6:8b:32:42:8a:c2:ed:67:2c:62:c8:08:
         0a:6c:b6:73:9a:3f:1e:e1:a1:f6:2c:75:37:40:fb:90:8e:57:
         52:ce:02:42:36:2d:be:50:88:48:32:43:fe:7c:84:4d:84:c2:
         12:89:7d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org