Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa
File:                     34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa (raw, json)
Hash identifier:          rJPtWt5D3PjJ8qE8QmWkUuO1+sFY5rBLRG34JswAkkY=
Subject key identifier:   F2:CB:1E:64:C0:37:01:BB:26:14:35:E4:2A:49:EF:66:1F:A9:35:37
Certificate issuer:       /CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
Certificate serial:       50CD92157D0B895F3B184336057A869E17E7020B
Authority key identifier: 17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa
Signing time:             Wed 26 Jul 2023 14:12:13 +0000
ROA not before:           Wed 26 Jul 2023 14:07:13 +0000
ROA not after:            Wed 24 Jul 2024 14:12:13 +0000
asID:                     268070
IP address blocks:        45.167.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cd:92:15:7d:0b:89:5f:3b:18:43:36:05:7a:86:9e:17:e7:02:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
        Validity
            Not Before: Jul 26 14:07:13 2023 GMT
            Not After : Jul 24 14:12:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:d3:c4:47:ad:a8:0e:19:7c:23:f4:e6:d7:
                    12:8d:97:4b:5c:16:27:65:58:3b:ac:1c:8f:e6:72:
                    86:74:19:a5:b0:ce:d2:a5:78:09:fa:c4:31:71:75:
                    54:c3:ab:a4:d9:e2:cd:c6:9e:b4:b8:e0:ea:d2:ac:
                    0d:26:3c:d7:6a:c0:de:06:3d:46:f4:d0:05:11:36:
                    02:7a:d1:c1:e6:59:07:bc:a3:39:67:e8:18:78:72:
                    49:ee:9d:7b:cc:3f:55:ad:b4:2c:6c:1e:0d:b4:ac:
                    c0:80:a1:36:53:97:16:50:62:9c:2b:00:16:2c:48:
                    e3:dd:07:cb:35:a8:d5:2c:1d:c3:e2:8a:4f:2b:88:
                    07:9c:e4:58:2f:cb:3c:4f:a9:d8:a7:1d:b4:35:f4:
                    97:5e:4b:c6:23:da:b5:30:27:d2:ec:0e:bd:59:2d:
                    42:1d:c0:2f:be:81:a9:fe:81:0f:ee:4f:e8:5c:e0:
                    a7:6d:99:43:e8:e7:65:ea:93:d3:fa:2e:c7:d2:ce:
                    dd:33:dd:8f:f8:2c:c6:e2:fa:5e:e5:80:1c:e5:ce:
                    4b:5f:f5:25:16:1f:af:c7:e2:79:e7:1d:63:61:cf:
                    2b:64:b7:e9:d4:38:01:b8:94:b1:cb:71:21:42:5c:
                    04:52:c8:34:68:bc:78:84:d9:8b:c8:57:9f:93:03:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CB:1E:64:C0:37:01:BB:26:14:35:E4:2A:49:EF:66:1F:A9:35:37
            X509v3 Authority Key Identifier:
                keyid:17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:ad:49:be:15:b0:94:85:67:db:a0:8e:8a:76:ba:1f:e6:e4:
         9e:fc:89:f1:64:30:e2:9b:0e:8b:fe:bd:67:a4:f2:44:0f:b2:
         87:38:0a:d2:47:79:c5:26:31:a6:87:55:45:36:3c:b1:b6:fd:
         83:45:ed:4b:84:5f:fb:d9:e2:60:18:af:3a:85:f2:f9:53:7c:
         bd:41:3c:df:18:1f:11:34:ca:6d:5e:54:3e:95:ad:83:a0:2b:
         ca:b3:8f:7e:57:63:ee:72:0c:74:e8:2c:37:cc:d0:74:c2:1d:
         c6:58:d6:85:0c:f0:96:b0:9d:1b:6c:db:94:ba:94:0b:7e:80:
         43:c7:af:da:9d:1d:d6:9e:c4:99:de:56:b1:04:3f:57:b2:af:
         3b:8a:ed:3c:88:27:b0:ed:17:9f:a5:3c:53:bc:df:02:bb:ea:
         98:96:c8:f1:8b:80:cf:26:7f:b5:18:65:5e:6b:c2:13:e2:60:
         dc:6a:b3:16:5c:71:af:05:c3:de:71:f7:1e:d0:d8:28:cf:c3:
         37:09:90:e0:9d:ec:6e:7a:11:a2:c5:48:70:40:60:d5:72:2d:
         68:ca:60:a2:c5:d0:c3:c6:d3:b4:b0:c8:b6:28:21:00:c5:e1:
         f5:0d:9b:a8:53:71:a6:f4:f8:8a:cd:09:8a:03:f7:1f:87:c6:
         69:ad:46:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org