Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32342d3234203d3e20323638313837.roa
File:                     34352e3137312e36302e302f32342d3234203d3e20323638313837.roa (raw, json)
Hash identifier:          kjkogamYAhvdGuPQwXVJJaZAyj6HSXvwjzpU3QoyZw0=
Subject key identifier:   1A:0E:5D:B4:B9:82:24:5C:1C:D1:74:B8:29:E3:11:0E:24:73:8B:81
Certificate issuer:       /CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
Certificate serial:       6180D0D3861BAC6D174864BF5A4F6B725763DC51
Authority key identifier: 02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32342d3234203d3e20323638313837.roa
Signing time:             Sun 11 Sep 2022 14:20:03 +0000
ROA not before:           Sun 11 Sep 2022 14:15:03 +0000
ROA not after:            Sun 10 Sep 2023 14:20:03 +0000
asID:                     268187
IP address blocks:        45.171.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:80:d0:d3:86:1b:ac:6d:17:48:64:bf:5a:4f:6b:72:57:63:dc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
        Validity
            Not Before: Sep 11 14:15:03 2022 GMT
            Not After : Sep 10 14:20:03 2023 GMT
        Subject: CN=1A0E5DB4B982245C1CD174B829E3110E24738B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:df:9e:9d:4e:8a:17:a8:07:13:d2:39:d8:
                    72:ae:b5:e1:2a:aa:36:48:d2:62:77:e7:40:0b:02:
                    60:f1:ec:42:27:46:12:1e:b6:0c:a4:2f:04:e6:89:
                    99:ac:a2:25:e7:1f:d5:d7:81:bc:89:97:73:e5:21:
                    91:c0:f1:43:63:d9:3f:6f:51:d3:ff:03:c9:2a:bc:
                    f7:47:45:cc:6d:0f:a1:6b:a4:09:9f:5b:ac:45:da:
                    4a:1c:fa:e6:e6:5b:d9:7e:b4:15:34:10:b2:77:12:
                    a7:cd:78:01:ce:00:52:12:a3:95:39:d1:64:57:8f:
                    34:80:02:53:c1:75:91:a5:ef:83:96:8f:74:20:d9:
                    77:95:b3:7e:dd:25:16:c0:1b:d9:dc:e4:65:bb:4f:
                    ef:37:17:54:62:96:d0:01:e4:6a:9e:d8:ae:af:99:
                    c4:f1:c1:f1:c2:fb:63:51:ae:d6:5e:b2:a6:07:f5:
                    79:0e:84:ae:fb:87:05:fb:da:04:1d:02:0c:66:fd:
                    08:2d:ad:1e:c7:7e:d2:1f:e8:71:22:d8:e2:20:55:
                    33:ad:d9:33:93:ed:d2:53:f1:0e:f7:c8:2f:5a:40:
                    65:61:d6:03:74:dd:a9:9e:a7:e5:71:ff:c6:ce:7c:
                    6c:ba:3e:e5:74:bf:07:d0:87:34:63:f4:f8:ec:22:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0E:5D:B4:B9:82:24:5C:1C:D1:74:B8:29:E3:11:0E:24:73:8B:81
            X509v3 Authority Key Identifier:
                keyid:02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32342d3234203d3e20323638313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:f5:f8:64:ba:ff:1d:56:38:5f:3f:17:82:b1:ab:dc:e4:d5:
         04:87:db:ee:76:b3:22:1e:a1:cd:c1:a3:76:0f:1e:66:6a:42:
         29:61:c6:6c:90:47:b6:4e:42:20:80:cf:df:9a:3c:f0:7b:cd:
         a1:d9:c7:a1:3c:ba:97:4c:0a:a4:90:cc:d0:5a:d5:f0:f0:a6:
         e8:ee:51:90:24:3d:94:49:a3:4d:91:a2:88:d3:e1:26:89:39:
         33:8e:a3:5f:e6:af:32:4f:7a:83:a5:c2:a7:c4:e5:16:2a:0a:
         fa:ef:97:ba:eb:39:22:15:99:a3:a1:c4:ec:52:96:6e:75:f0:
         77:a1:3b:80:a6:7a:f6:11:c3:03:3a:06:2b:c5:87:9a:dd:e9:
         87:da:87:48:2e:52:c6:97:af:cc:e4:d1:77:3e:e9:dd:6c:6f:
         f6:8c:6c:30:3a:05:5c:0b:04:9a:d0:43:bd:b7:21:5a:42:40:
         45:27:19:eb:ea:d7:24:ce:fb:54:69:55:b2:49:72:9b:ee:f7:
         bc:bb:c0:fc:ac:be:94:4b:c7:1f:2d:9f:b2:51:d5:de:ce:a5:
         21:fa:54:63:88:d4:11:ac:ff:04:e7:3c:91:37:d3:c9:91:6d:
         79:b3:c6:77:f9:64:c7:39:4f:ac:ef:63:26:cd:07:fb:b0:d0:
         5b:08:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:41 2024 by rpki-client on console-ams.rpki-client.org