Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa
File:                     34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa (raw, json)
Hash identifier:          QYd/rmSgO0jfbfQXTSPx7n6QBIfSv5PeTFaqN3rYoZw=
Subject key identifier:   E4:8A:03:B7:91:6A:55:42:D7:B9:30:08:AE:25:59:08:91:0B:88:FF
Certificate issuer:       /CN=B1DDEB2AE17570AD2AFA8F646F3982491AE32A38
Certificate serial:       2647FE07BFAC2EAFC76683CE08960E3D5826927D
Authority key identifier: B1:DD:EB:2A:E1:75:70:AD:2A:FA:8F:64:6F:39:82:49:1A:E3:2A:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa
Signing time:             Tue 26 Dec 2023 14:00:00 +0000
ROA not before:           Tue 26 Dec 2023 13:55:00 +0000
ROA not after:            Tue 24 Dec 2024 14:00:00 +0000
asID:                     268627
IP address blocks:        45.164.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:47:fe:07:bf:ac:2e:af:c7:66:83:ce:08:96:0e:3d:58:26:92:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DDEB2AE17570AD2AFA8F646F3982491AE32A38
        Validity
            Not Before: Dec 26 13:55:00 2023 GMT
            Not After : Dec 24 14:00:00 2024 GMT
        Subject: CN=E48A03B7916A5542D7B93008AE255908910B88FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:a6:3b:ed:50:35:48:77:40:db:33:ce:1f:
                    8a:fe:85:63:5c:17:f2:ac:ba:3d:3c:32:a1:a4:c9:
                    72:4d:6b:33:c8:26:74:c0:04:b9:01:95:ad:70:b9:
                    53:f6:54:1a:98:48:68:36:81:06:98:ff:c6:98:b5:
                    9c:44:2e:e6:11:c0:32:0b:b7:6b:1f:59:06:78:6e:
                    a7:60:a6:9c:38:fa:1a:74:9b:7e:1d:0f:e8:ea:34:
                    9b:38:e3:f3:d1:70:8d:a4:9f:24:96:11:28:c0:eb:
                    ac:12:8c:3d:84:1b:ed:5d:80:da:0c:8b:fb:ca:cc:
                    7e:c7:52:7c:ea:b5:10:7b:01:ef:96:54:16:84:68:
                    21:1d:b3:45:c0:86:49:fb:e6:db:e6:94:ac:f9:30:
                    8a:52:d7:b3:71:8a:5c:ce:bc:9f:49:5c:7e:53:58:
                    3f:c1:38:c1:e7:14:95:69:88:e7:b5:ea:1c:f3:6c:
                    3d:c3:08:60:07:05:9b:90:aa:58:4d:8a:e6:20:95:
                    5f:7c:91:8f:88:22:52:38:f0:f7:8e:a2:2f:36:64:
                    14:8b:12:54:90:47:88:d5:c1:c1:44:9f:03:64:39:
                    9a:88:c8:64:13:97:03:6f:85:55:02:c3:70:00:03:
                    e5:95:3a:a3:46:c5:ff:22:71:95:9b:77:f1:0a:81:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8A:03:B7:91:6A:55:42:D7:B9:30:08:AE:25:59:08:91:0B:88:FF
            X509v3 Authority Key Identifier:
                keyid:B1:DD:EB:2A:E1:75:70:AD:2A:FA:8F:64:6F:39:82:49:1A:E3:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:c8:e0:76:3d:fb:08:86:18:ca:7d:33:8d:ac:99:92:f7:46:
         02:ad:06:d4:d5:3a:07:7b:0d:99:66:8e:1c:3e:f0:f3:05:b3:
         6e:e6:8e:6e:58:9c:d0:27:eb:c3:1e:22:62:32:3c:09:d0:10:
         36:21:9d:22:30:5a:bd:db:37:86:2e:75:c1:81:b1:ee:24:aa:
         7b:c2:b5:51:c6:8c:a3:a3:03:ae:f7:f6:8c:e1:d8:d4:a6:e1:
         57:a2:4e:b7:41:a7:6f:25:0c:2d:2d:fa:77:e1:ee:5d:6d:19:
         cc:33:90:8c:6f:af:bb:3f:e0:6a:96:2a:f4:c9:ed:f8:33:95:
         11:3c:84:39:06:32:78:0b:0b:51:c0:60:a4:34:4c:88:c1:d9:
         50:95:92:4c:79:46:eb:a7:4b:45:9d:50:28:f0:f4:da:47:c7:
         8b:2c:ca:19:32:29:e5:ff:6e:21:bd:7c:2a:41:9c:d0:32:f6:
         22:49:eb:f0:10:f9:8e:ab:4a:ed:51:40:d6:60:00:69:0a:8a:
         3a:81:72:87:ab:6a:b6:9d:96:9d:fd:db:c3:17:63:f7:b8:9e:
         86:20:26:79:a2:52:d5:70:db:d4:70:c1:62:10:97:dc:6a:c1:
         be:4f:51:5a:2c:02:30:ce:40:ea:6a:93:e2:56:64:72:27:86:
         4e:30:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:54 2024 by rpki-client on console.sobornost.net