Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
File:                     3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          H2rcbn3ylnsCxGQBW9T8elBVDam/8yiXztdLe7GDyn0=
Subject key identifier:   E3:5F:21:06:E1:42:A1:76:EE:DC:ED:68:EE:CB:1A:62:D2:24:94:8A
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       66063DD766F5F29C972CCB153C3A6E0D1829F818
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 21:50:51 +0000
ROA not before:           Mon 23 Jan 2023 21:45:51 +0000
ROA not after:            Mon 22 Jan 2024 21:50:51 +0000
asID:                     262509
IP address blocks:        170.247.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:06:3d:d7:66:f5:f2:9c:97:2c:cb:15:3c:3a:6e:0d:18:29:f8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 21:45:51 2023 GMT
            Not After : Jan 22 21:50:51 2024 GMT
        Subject: CN=E35F2106E142A176EEDCED68EECB1A62D224948A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a4:4c:68:2b:3f:7f:57:43:46:e3:f7:75:29:
                    8b:db:7b:ff:34:ba:fa:dc:f9:d7:30:3d:b0:4b:35:
                    4f:79:54:73:5b:12:49:16:24:9e:9f:18:90:6a:b2:
                    6a:3f:90:b7:a2:2d:93:f1:b6:6b:b1:57:69:a4:61:
                    60:c0:aa:fe:6c:4e:38:85:d3:70:0a:fa:d2:8e:58:
                    3c:57:a7:f1:f2:ce:b8:a3:3b:70:fa:6a:6b:96:5a:
                    da:7b:83:1f:ef:64:88:0a:ea:d7:81:9d:a1:4e:db:
                    a9:c0:e6:f3:0b:a7:ee:fd:4e:f5:ca:1f:03:32:67:
                    e8:54:b5:67:f4:33:0e:b8:09:0c:f3:d2:df:33:c7:
                    4a:5d:06:d2:f5:3a:e7:af:cb:97:35:e5:3a:6e:59:
                    d2:f0:48:3b:81:63:47:f9:cf:6c:98:81:d8:f1:ff:
                    60:54:91:79:32:7b:b5:75:d3:88:89:c3:ec:29:b2:
                    4b:f0:ed:39:22:25:8a:35:d3:8c:15:49:de:61:b9:
                    04:47:c1:d3:f8:6c:87:47:b8:3b:0c:2c:a3:00:77:
                    bb:1a:80:f4:95:d9:1f:27:a0:50:2f:07:1f:51:dd:
                    a6:d2:3f:1c:6f:4f:a3:59:00:37:1f:91:62:94:b1:
                    7b:7c:a1:cd:b2:32:44:3e:7d:f6:8b:ef:13:ac:a2:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:21:06:E1:42:A1:76:EE:DC:ED:68:EE:CB:1A:62:D2:24:94:8A
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:37:70:72:bc:79:0f:91:2a:08:72:a3:a8:a8:2f:b6:8f:cf:
         eb:86:b5:c7:10:9a:c9:9d:0d:8a:cf:03:08:d6:4a:39:78:18:
         89:4a:3d:4f:8b:f8:ba:da:32:ea:3d:e1:8c:cc:b1:44:ce:ef:
         b4:b3:fd:fa:00:ce:77:9f:0e:de:e1:93:60:21:5b:ab:d6:7e:
         2c:d7:0a:e6:48:1f:ac:a1:ec:2c:28:0f:f8:0b:46:45:da:dd:
         ca:09:00:19:02:df:97:73:d3:81:0c:0c:3d:e4:18:73:74:92:
         bf:11:82:f4:ef:bb:f3:cf:29:03:9d:9b:51:e1:80:15:32:db:
         38:11:a4:11:93:79:1e:e9:b1:6e:58:10:b9:ce:e1:b6:4e:6f:
         59:0b:7b:8c:f0:36:51:df:b0:f8:c0:83:ce:9c:70:ac:fc:7d:
         ef:92:7c:35:3e:0a:02:65:ef:b1:36:28:3a:be:4e:7a:b9:7a:
         05:a1:c0:82:79:04:28:8d:46:02:58:34:0c:34:40:7e:53:5a:
         d3:98:10:d0:ab:55:f6:93:c2:8b:5f:f4:bd:85:1c:09:a3:fb:
         05:b4:c5:9d:25:8c:25:58:70:c6:67:b7:ac:2a:33:6a:14:28:
         a7:82:ce:01:66:ba:7f:02:b0:a0:76:32:a6:68:f4:17:22:5c:
         6f:cc:0c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org