Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32332d3233203d3e20323638313533.roa
File:                     34352e3137302e37342e302f32332d3233203d3e20323638313533.roa (raw, json)
Hash identifier:          ncw8of3XyfjeocyV8zNjjOXifK0snz0pHVJtVCU+eK0=
Subject key identifier:   37:60:02:41:CB:61:68:F5:46:D5:C2:57:C4:4F:78:1C:8C:4F:33:35
Certificate issuer:       /CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
Certificate serial:       381113FA99A21F247889479A6C54E6AF5AAFAF2B
Authority key identifier: B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32332d3233203d3e20323638313533.roa
Signing time:             Fri 07 Jul 2023 16:24:51 +0000
ROA not before:           Fri 07 Jul 2023 16:19:51 +0000
ROA not after:            Fri 05 Jul 2024 16:24:51 +0000
asID:                     268153
IP address blocks:        45.170.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:11:13:fa:99:a2:1f:24:78:89:47:9a:6c:54:e6:af:5a:af:af:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
        Validity
            Not Before: Jul  7 16:19:51 2023 GMT
            Not After : Jul  5 16:24:51 2024 GMT
        Subject: CN=37600241CB6168F546D5C257C44F781C8C4F3335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:5e:dc:10:63:05:08:93:1b:9a:5b:db:02:
                    db:45:ce:e5:59:09:78:7c:fd:42:59:74:c9:7f:3f:
                    42:bd:44:1b:5a:ed:68:3a:af:74:ae:da:13:28:41:
                    52:be:66:45:39:43:7e:b2:bb:23:16:b9:84:fc:4a:
                    aa:b7:8d:80:85:49:05:02:f7:13:85:41:e5:af:b1:
                    b7:84:f9:dc:9b:3e:82:8c:a8:49:2c:e3:04:4a:38:
                    a2:18:29:fa:8a:cf:e0:8e:c6:c8:0c:75:74:5f:d2:
                    7c:e5:7e:49:27:62:d6:4a:90:11:91:60:ff:25:4e:
                    7c:58:5d:a6:20:25:4d:05:ab:fb:65:be:8c:0e:36:
                    65:17:ad:59:19:08:79:c0:ee:2f:74:5e:4a:3b:e0:
                    3c:13:7e:34:fd:30:2e:8e:a3:34:1f:8e:fe:80:3d:
                    5c:b1:f6:b4:a5:15:d7:d1:13:e7:88:a3:90:51:cd:
                    4e:3a:1d:a7:54:34:93:6a:e2:84:73:33:6a:7a:a5:
                    bd:39:13:a5:db:a8:41:f8:69:be:7a:e5:cc:69:d6:
                    8c:ca:21:5e:8b:62:4e:0d:dd:79:4c:83:bb:c0:06:
                    93:ef:14:9c:f3:f9:63:cf:74:2e:43:8b:a7:23:2b:
                    9a:09:14:26:d5:b3:56:5a:d2:22:ed:54:f0:75:b1:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:60:02:41:CB:61:68:F5:46:D5:C2:57:C4:4F:78:1C:8C:4F:33:35
            X509v3 Authority Key Identifier:
                keyid:B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37342e302f32332d3233203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:ba:70:87:10:28:75:9d:98:5d:00:25:71:e5:f1:09:a5:
         7c:9f:89:5e:77:03:ea:ca:62:27:2b:65:8b:b0:27:77:5c:c1:
         02:e7:ca:07:67:a5:8f:4e:eb:f1:09:b5:4c:71:c9:da:e0:32:
         43:5c:90:27:15:5e:2f:4c:c1:33:ec:a6:d3:f8:c9:c6:df:3e:
         32:8f:34:a6:a8:f8:ff:b6:4d:00:e2:70:43:49:cf:65:41:68:
         25:a7:34:46:a9:be:ac:cb:45:56:c8:81:c1:b5:57:69:ba:7c:
         ab:0e:57:f5:9a:7d:8c:17:33:04:95:d6:5a:74:da:f9:81:2c:
         52:30:99:5a:66:d0:ac:90:c3:80:4e:74:9b:f2:4b:5d:71:df:
         82:ce:ed:57:62:3e:ab:cb:24:61:ae:05:a8:4a:e3:54:68:3d:
         b1:63:e8:be:62:e4:3d:b3:d6:53:f7:01:a1:c7:0d:7a:c8:64:
         b9:89:fc:d6:f3:07:5e:32:72:e2:6b:fa:90:8e:40:4e:c8:ec:
         3d:d8:c9:81:79:9b:10:bc:43:a8:90:66:b4:cb:b7:aa:05:f2:
         16:16:f8:87:0f:cb:b1:ee:36:f5:a0:3a:0f:b2:18:c4:f0:ea:
         22:d5:67:e4:1b:04:48:3f:8f:18:37:96:c9:5f:88:f2:b9:04:
         ca:d9:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org