Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa
File:                     34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa (raw, json)
Hash identifier:          bM5pEfzpFCPFxMgThcoPP2wEJUB+07Qb1FQ1BUTNpZY=
Subject key identifier:   5B:CD:D8:84:E9:49:A8:25:2A:96:4F:F9:B7:3A:33:0F:F6:0B:E4:3F
Certificate issuer:       /CN=9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED
Certificate serial:       51B68FE69ED8FB8BD243A49FB812C0F5EEB15E1D
Authority key identifier: 9D:84:1D:6D:EB:2E:8B:9D:0A:50:4C:0E:C9:F0:4B:E1:7C:45:29:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa
Signing time:             Wed 14 Jun 2023 17:00:01 +0000
ROA not before:           Wed 14 Jun 2023 16:55:01 +0000
ROA not after:            Fri 14 Jun 2024 17:00:01 +0000
asID:                     268426
IP address blocks:        45.160.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b6:8f:e6:9e:d8:fb:8b:d2:43:a4:9f:b8:12:c0:f5:ee:b1:5e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED
        Validity
            Not Before: Jun 14 16:55:01 2023 GMT
            Not After : Jun 14 17:00:01 2024 GMT
        Subject: CN=3082010A0282010100D3DB065FC8E19E7616D9FFA54052C642D9AE68A18D488C175CCBAE0BDBFC4CA664F8E0880D420AF28C56C8C023D04363984CC22DDC2CC08291B88ABDB8E19F4F376CD58CFBD3AE34471218CBC48FA62757E10C4D352CF59122E018F9019C078C4AA4705377BF12A971312016A895077BB73661A0E53E1FC8F8E8E083E3852241428A2CB12B4694A621B33B577E8AC9FBCF3C31257A59C5A6BA6C5D2164E4F2A36A70C0EE39F22308165533504C5ECCBA846BFD04442FD030960279CA5A37A732FB937C78FB0F52C5DFA0903EF8E1CFE3F5DE037D214572091B870794118BE20D6A7057336D6782050BC9CB4CDF295EA1B9A2C750DF4E88EE502DE536A56F527B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:db:06:5f:c8:e1:9e:76:16:d9:ff:a5:40:52:
                    c6:42:d9:ae:68:a1:8d:48:8c:17:5c:cb:ae:0b:db:
                    fc:4c:a6:64:f8:e0:88:0d:42:0a:f2:8c:56:c8:c0:
                    23:d0:43:63:98:4c:c2:2d:dc:2c:c0:82:91:b8:8a:
                    bd:b8:e1:9f:4f:37:6c:d5:8c:fb:d3:ae:34:47:12:
                    18:cb:c4:8f:a6:27:57:e1:0c:4d:35:2c:f5:91:22:
                    e0:18:f9:01:9c:07:8c:4a:a4:70:53:77:bf:12:a9:
                    71:31:20:16:a8:95:07:7b:b7:36:61:a0:e5:3e:1f:
                    c8:f8:e8:e0:83:e3:85:22:41:42:8a:2c:b1:2b:46:
                    94:a6:21:b3:3b:57:7e:8a:c9:fb:cf:3c:31:25:7a:
                    59:c5:a6:ba:6c:5d:21:64:e4:f2:a3:6a:70:c0:ee:
                    39:f2:23:08:16:55:33:50:4c:5e:cc:ba:84:6b:fd:
                    04:44:2f:d0:30:96:02:79:ca:5a:37:a7:32:fb:93:
                    7c:78:fb:0f:52:c5:df:a0:90:3e:f8:e1:cf:e3:f5:
                    de:03:7d:21:45:72:09:1b:87:07:94:11:8b:e2:0d:
                    6a:70:57:33:6d:67:82:05:0b:c9:cb:4c:df:29:5e:
                    a1:b9:a2:c7:50:df:4e:88:ee:50:2d:e5:36:a5:6f:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:D8:84:E9:49:A8:25:2A:96:4F:F9:B7:3A:33:0F:F6:0B:E4:3F
            X509v3 Authority Key Identifier:
                keyid:9D:84:1D:6D:EB:2E:8B:9D:0A:50:4C:0E:C9:F0:4B:E1:7C:45:29:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:20:a5:71:ef:6b:e3:90:4d:04:10:94:59:d5:77:7b:f8:00:
         3b:27:71:f1:a6:05:e8:72:7b:76:da:96:40:bf:ac:02:ba:73:
         b6:74:56:74:6b:bf:7a:e7:9d:a9:09:21:80:ad:d5:29:e9:70:
         84:f3:21:c3:29:94:55:b7:72:9f:fc:ee:7e:9a:1d:a5:5c:83:
         02:7c:33:1c:e4:41:03:c1:6f:36:c5:5c:61:ce:7c:ec:55:b4:
         52:55:33:89:7e:86:c0:51:6c:86:7e:51:ef:fb:a6:84:56:eb:
         b9:31:17:2c:7c:8d:0e:d7:9b:05:78:24:2c:55:8c:0a:2b:9b:
         9c:eb:c8:d7:c1:06:6a:bd:73:38:cb:27:d4:8c:18:f1:11:de:
         27:cd:81:37:df:a8:f4:2e:70:32:91:62:f0:06:42:21:fe:eb:
         bf:09:ee:d1:0e:e0:c1:cd:8a:f5:df:5a:e1:52:19:36:bb:85:
         bf:05:0d:ab:8f:21:1a:03:7c:12:52:b8:12:29:3a:48:c8:73:
         82:86:63:ac:20:c8:5b:b5:6f:2c:f0:56:c4:47:38:65:9f:92:
         5b:63:a8:99:91:c4:d5:58:81:4d:2e:46:80:a6:96:9e:03:6b:
         b1:60:9e:43:69:6a:af:cc:b8:92:6e:0b:d9:e4:6d:e9:b7:6b:
         de:2b:05:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org