Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/1/34352e3136332e3136302e302f32322d3234203d3e20323638353731.roa
File:                     34352e3136332e3136302e302f32322d3234203d3e20323638353731.roa (raw, json)
Hash identifier:          4NHhE9rVo1+b8sJTjcUu6cmu4oLoCwnzrv8UntpQmZo=
Subject key identifier:   60:70:0B:3E:34:04:65:AC:60:B9:BC:BE:9B:35:35:A7:6A:DE:11:D6
Certificate issuer:       /CN=5B23C36E850EFC7F8B7E5BCF989CE2459536FA80
Certificate serial:       751566716F6F0648A81AE260D9E791C94A8A969B
Authority key identifier: 5B:23:C3:6E:85:0E:FC:7F:8B:7E:5B:CF:98:9C:E2:45:95:36:FA:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B23C36E850EFC7F8B7E5BCF989CE2459536FA80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/1/34352e3136332e3136302e302f32322d3234203d3e20323638353731.roa
Signing time:             Wed 03 Apr 2024 20:47:32 +0000
ROA not before:           Wed 03 Apr 2024 20:42:32 +0000
ROA not after:            Wed 02 Apr 2025 20:47:32 +0000
asID:                     268571
IP address blocks:        45.163.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:15:66:71:6f:6f:06:48:a8:1a:e2:60:d9:e7:91:c9:4a:8a:96:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B23C36E850EFC7F8B7E5BCF989CE2459536FA80
        Validity
            Not Before: Apr  3 20:42:32 2024 GMT
            Not After : Apr  2 20:47:32 2025 GMT
        Subject: CN=60700B3E340465AC60B9BCBE9B3535A76ADE11D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:fa:35:87:36:7c:e7:5b:1d:ee:1d:d9:76:
                    95:dd:66:44:b0:61:ac:f0:7e:9a:2e:6d:d4:f0:f2:
                    e4:11:f5:2c:a3:a9:0e:1e:6e:66:60:3e:19:5b:f4:
                    e9:3f:6c:ae:d9:5e:9b:59:2e:39:99:21:5b:46:c2:
                    28:57:8d:54:97:60:6f:b1:53:99:d8:51:77:9e:ad:
                    6f:23:f9:6b:38:98:c3:2a:a2:1b:5b:80:dd:8c:67:
                    73:98:c0:ed:ef:f7:3a:24:d8:82:38:7e:1f:da:f8:
                    64:80:fa:16:39:35:b5:f4:63:ad:92:ce:b5:fa:e2:
                    d1:95:a1:ec:ff:9d:9e:24:4a:5a:23:c3:55:8d:84:
                    9a:7d:8b:cf:39:f0:66:39:64:86:2d:97:7f:5f:21:
                    c5:ef:c6:0c:f4:92:22:2d:7a:8f:61:ed:b6:7f:99:
                    84:12:80:03:c2:d0:9c:17:c8:07:76:74:17:92:a2:
                    8f:85:de:25:72:0b:26:eb:0c:60:51:85:c4:f8:1e:
                    bc:ab:82:31:49:74:57:60:b4:55:be:ff:03:53:2f:
                    03:00:ac:68:1a:70:4a:01:68:c5:90:ff:56:29:51:
                    85:c8:85:ac:d9:3a:7a:d3:97:53:3d:83:12:ce:25:
                    79:fd:e8:47:44:98:cc:78:e4:54:30:0d:72:84:67:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:0B:3E:34:04:65:AC:60:B9:BC:BE:9B:35:35:A7:6A:DE:11:D6
            X509v3 Authority Key Identifier:
                keyid:5B:23:C3:6E:85:0E:FC:7F:8B:7E:5B:CF:98:9C:E2:45:95:36:FA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/1/5B23C36E850EFC7F8B7E5BCF989CE2459536FA80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B23C36E850EFC7F8B7E5BCF989CE2459536FA80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/1/34352e3136332e3136302e302f32322d3234203d3e20323638353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:b7:68:97:86:84:a8:72:bc:c2:d9:43:a1:b8:e2:00:51:1c:
         67:59:b9:0e:7d:38:de:2a:4a:c5:a9:41:eb:5c:26:97:41:f9:
         7e:ef:e0:18:0b:a7:df:5d:c0:84:f4:83:d6:77:31:31:b8:de:
         a7:92:79:bc:dd:a8:03:58:cb:06:3d:87:6b:be:de:58:3c:c8:
         49:32:57:84:a1:e2:36:d5:f8:69:61:bc:ea:38:c1:2b:bd:2b:
         90:94:16:3a:4b:d7:8d:52:3d:a1:ca:0a:4a:f0:1e:b5:c9:44:
         d2:55:fe:e3:fc:ab:18:2b:5f:28:7c:0d:1d:47:20:d7:e5:8b:
         ce:5a:4f:40:4c:44:67:92:63:f2:4f:57:8e:99:f0:fa:86:18:
         1d:ba:b0:81:e7:c4:a2:08:07:34:b8:30:25:dc:d9:b2:b0:1a:
         5d:b1:37:a5:35:4d:38:af:25:e3:d1:2b:c0:67:f9:a3:53:42:
         cf:86:50:6d:f9:cc:22:71:b7:40:92:77:23:99:76:80:43:c7:
         d9:d6:13:24:e9:9a:f7:90:f9:18:49:72:81:32:e0:d5:ff:24:
         5e:8f:2d:f9:f1:05:f0:51:4b:e8:e5:ca:58:a9:ba:61:48:27:
         77:b1:57:60:0c:ef:8b:93:f9:7b:d1:7e:78:8b:54:10:a0:c4:
         09:93:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org