Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135332e302f32342d3234203d3e20323638373231.roa
File:                     34352e3137312e3135332e302f32342d3234203d3e20323638373231.roa (raw, json)
Hash identifier:          IkbTan35GxCaYyAzKv/hJy81AEbUT08ifiHjFez5BgY=
Subject key identifier:   D1:03:F1:70:BA:25:B2:69:35:C4:9F:01:91:CD:E8:F0:8D:61:17:3F
Certificate issuer:       /CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
Certificate serial:       3FC30913081B8437AD2379F6CA842DEF69AAD5EA
Authority key identifier: AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135332e302f32342d3234203d3e20323638373231.roa
Signing time:             Fri 29 Jul 2022 21:03:08 +0000
ROA not before:           Fri 29 Jul 2022 20:58:08 +0000
ROA not after:            Fri 28 Jul 2023 21:03:08 +0000
asID:                     268721
IP address blocks:        45.171.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c3:09:13:08:1b:84:37:ad:23:79:f6:ca:84:2d:ef:69:aa:d5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
        Validity
            Not Before: Jul 29 20:58:08 2022 GMT
            Not After : Jul 28 21:03:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:41:a1:9c:aa:a5:d3:8c:4b:7a:2b:6c:15:
                    5c:ae:51:42:0c:04:2f:fa:7a:de:e3:a9:c5:fa:e1:
                    bc:72:d3:29:a8:f4:60:25:20:88:85:e6:2b:93:22:
                    6c:32:49:fb:da:18:7a:56:cb:d0:f2:cd:ac:73:24:
                    84:af:6b:60:56:ca:a4:ce:86:8a:e6:c6:dc:d3:fc:
                    be:3c:b9:a2:33:1f:f5:08:cb:89:a1:d6:74:0c:d5:
                    17:64:21:ea:61:6d:6b:49:70:71:e3:3b:df:07:f5:
                    d6:61:fa:b0:9e:ef:cb:a9:49:79:d1:58:e7:bd:f8:
                    9a:32:a3:48:9b:32:c7:2d:c6:c1:00:2f:51:43:9e:
                    ab:1c:89:ef:6a:61:ef:80:48:7f:48:cc:e1:4f:90:
                    f9:4c:58:75:5e:8d:48:3d:e7:43:a9:cc:5c:18:e9:
                    5d:52:9d:4a:8f:d4:83:4d:d2:82:b6:fb:24:65:a5:
                    09:9e:c2:a3:18:2a:27:97:a6:e6:87:ae:da:92:6e:
                    2b:24:4d:d8:6a:a4:50:36:d5:2b:4f:36:f3:93:05:
                    cd:c7:bc:7f:ef:6d:c7:26:11:0f:97:19:95:83:13:
                    a1:dd:0f:f4:76:87:29:cd:8d:c9:8e:d9:5d:da:83:
                    7a:0d:ad:35:69:65:7b:29:34:69:49:62:80:35:c0:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:03:F1:70:BA:25:B2:69:35:C4:9F:01:91:CD:E8:F0:8D:61:17:3F
            X509v3 Authority Key Identifier:
                keyid:AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135332e302f32342d3234203d3e20323638373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:76:57:42:0f:3f:87:ad:47:fe:e6:af:f8:72:e6:bd:9d:73:
         1d:e8:9b:ef:85:c9:62:a5:65:2e:48:e8:7c:89:d8:ff:de:5a:
         d6:13:f4:1a:56:d4:f8:c9:2a:8d:83:c3:1d:a6:35:be:1a:08:
         da:9d:b2:20:24:39:ba:0f:70:73:37:cc:50:d6:83:f0:1e:0d:
         94:07:9b:07:af:8c:c0:0e:42:e7:ea:f8:ee:7a:2b:e8:94:83:
         c6:fb:46:b8:ee:c1:7f:b8:a6:39:33:78:3f:69:da:b8:be:fd:
         ff:8f:b5:93:87:d7:3f:e8:30:2b:e9:b4:e4:12:8c:ce:f0:3f:
         1a:8f:56:81:e7:e6:ac:a3:d0:cd:98:75:64:e2:e9:2b:64:58:
         e3:80:66:e1:69:ae:ca:21:19:40:44:a8:fd:34:54:8a:b6:50:
         5e:41:43:b5:b6:7b:44:e1:c8:95:7d:10:1b:37:7c:08:59:bb:
         ad:f3:dc:a1:f4:97:9c:bc:4e:6b:32:db:e1:4f:56:e2:01:e0:
         b0:48:a6:ec:68:ab:87:12:12:a2:3e:a6:27:c7:91:79:25:0a:
         fe:c2:71:93:3f:d7:7d:ee:68:2f:32:24:a6:f3:c8:d7:26:99:
         2e:71:94:2f:11:3d:0e:20:b1:e5:49:34:12:21:5d:be:d2:43:
         4d:1d:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org