Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa (raw, json)
Hash identifier:          UIqLqGPxm7C5xcy8NmzbOqmA2a0UnZlW0lMPuQnqauc=
Subject key identifier:   62:44:8F:27:AB:94:12:94:90:49:9C:90:25:8B:50:64:F5:2F:FE:FC
Certificate issuer:       /CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
Certificate serial:       1A5FD5B492B6947CC6D56DE36E7F986A0E90E193
Authority key identifier: C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa
Signing time:             Wed 03 Apr 2024 13:30:52 +0000
ROA not before:           Wed 03 Apr 2024 13:25:52 +0000
ROA not after:            Wed 02 Apr 2025 13:30:52 +0000
asID:                     268726
IP address blocks:        45.171.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5f:d5:b4:92:b6:94:7c:c6:d5:6d:e3:6e:7f:98:6a:0e:90:e1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Validity
            Not Before: Apr  3 13:25:52 2024 GMT
            Not After : Apr  2 13:30:52 2025 GMT
        Subject: CN=62448F27AB94129490499C90258B5064F52FFEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f2:71:91:9c:3e:83:35:5d:b9:16:44:5a:a6:
                    42:64:66:73:2b:e8:fd:ae:9c:d4:47:29:50:6e:b5:
                    78:74:02:bd:82:b5:a5:5f:b5:c6:15:01:f7:9a:fa:
                    e9:67:88:67:60:98:87:b2:3e:1e:40:8c:98:37:88:
                    ba:9f:c2:70:d6:58:f2:a9:3f:b2:34:16:fb:67:b2:
                    0f:d0:87:30:2c:78:d7:e7:d5:95:43:28:4e:38:22:
                    fd:5d:68:91:58:f0:77:ae:87:b4:00:d7:7f:67:08:
                    fc:61:e6:7e:5b:93:24:36:ea:99:bb:89:a2:be:44:
                    12:e5:d7:26:e2:85:fd:d1:6d:12:fa:12:b6:5a:fe:
                    c8:34:1a:5c:b0:1f:5a:40:94:11:59:bc:cc:59:64:
                    fa:7e:d4:2b:6a:01:92:f8:39:ea:f0:8b:b3:06:01:
                    1e:eb:89:1a:7d:9f:22:1b:57:5d:58:a8:37:14:7f:
                    50:03:a3:c7:4d:ab:e5:63:78:57:2a:08:7d:c9:32:
                    8f:ca:c6:a2:76:0b:0d:1d:28:d1:a4:74:35:50:19:
                    dd:0e:ee:2b:f7:c5:f8:fc:6e:4c:b8:bd:36:0d:d0:
                    89:11:89:d8:73:d1:9d:80:d6:99:9f:4e:78:1b:4c:
                    1b:19:6a:d0:e5:57:e8:47:2f:08:d3:f5:cf:2f:b5:
                    9f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:44:8F:27:AB:94:12:94:90:49:9C:90:25:8B:50:64:F5:2F:FE:FC
            X509v3 Authority Key Identifier:
                keyid:C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:90:67:d6:6d:7f:2d:a8:2b:4b:69:9c:60:50:7f:c1:85:8a:
         d7:b1:b9:74:01:b3:83:c4:21:00:9f:36:d7:cb:a5:e2:76:82:
         de:11:78:da:27:a8:86:94:05:c7:6d:a7:a7:53:d6:3e:b9:ac:
         08:f1:73:4e:47:aa:c4:e7:fb:e1:40:32:d9:78:48:79:0f:21:
         4a:96:e8:46:c0:de:29:c2:11:0b:6a:28:59:e0:dd:8f:f3:d5:
         e2:23:fc:42:da:9a:56:ae:c4:c2:3f:70:3f:7b:68:85:90:51:
         28:ff:c1:5a:71:cf:01:34:94:b5:9d:41:e7:0b:33:ba:ba:23:
         c3:d7:53:eb:02:ac:ac:d2:34:0c:43:41:4a:ad:a7:90:da:3a:
         c1:57:05:e3:de:05:08:4b:02:c4:96:0a:cd:47:13:d0:fc:99:
         4e:a1:d9:e6:d4:c3:0f:42:53:e7:82:0d:33:19:3a:e1:93:24:
         b9:6b:ed:94:3d:61:ac:9c:4b:ac:86:0e:ae:bd:a8:d7:06:a9:
         7e:49:3a:e3:7a:ff:c3:68:57:41:c6:16:ef:27:33:1e:f8:f9:
         45:a3:e9:ae:7d:ad:96:1a:90:67:0b:f6:fe:7f:ba:03:c6:6e:
         2c:00:dc:7e:01:86:12:23:ee:fd:60:eb:c3:2d:08:6c:e5:5a:
         8f:88:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org