Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31322e302f32342d3234203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32342d3234203d3e20323635343633.roa (raw, json)
Hash identifier:          O30ZLz6nMB0kdVlZltkoa4sjewt8U+uAUO+io8DEG58=
Subject key identifier:   34:BF:81:20:F8:75:A1:18:1A:34:75:5E:80:38:0B:FD:20:E4:13:B3
Certificate issuer:       /CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
Certificate serial:       453BCAB815172BBDDC86676C2EE990A39271C4F8
Authority key identifier: 1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31322e302f32342d3234203d3e20323635343633.roa
Signing time:             Thu 04 Apr 2024 16:55:43 +0000
ROA not before:           Thu 04 Apr 2024 16:50:43 +0000
ROA not after:            Thu 03 Apr 2025 16:55:43 +0000
asID:                     265463
IP address blocks:        168.197.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3b:ca:b8:15:17:2b:bd:dc:86:67:6c:2e:e9:90:a3:92:71:c4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA76B20E8CBB253F233A085B8C916B9BFD78B79
        Validity
            Not Before: Apr  4 16:50:43 2024 GMT
            Not After : Apr  3 16:55:43 2025 GMT
        Subject: CN=34BF8120F875A1181A34755E80380BFD20E413B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:72:1a:3e:6e:2c:0d:f1:7d:ca:d0:d9:48:
                    fa:f1:c3:7e:eb:4f:61:77:77:24:94:47:1e:d3:75:
                    31:aa:74:4c:53:cb:dc:3e:5e:ee:5f:c6:ef:cc:11:
                    02:3e:67:04:63:fb:5a:c6:b5:64:f0:5e:fc:70:1d:
                    1c:9d:80:ca:56:c7:8c:4c:f6:56:0e:c1:66:e0:13:
                    80:7e:0e:6c:7f:c5:60:7b:22:94:c6:4c:6e:9f:79:
                    cf:0f:d0:3d:b6:e0:24:e5:d9:2d:08:09:84:cd:38:
                    cc:44:d4:f5:c7:3f:a6:63:d1:2b:a3:18:d9:06:b3:
                    54:f4:87:51:cc:0c:3d:0e:9c:13:15:ff:72:fc:fd:
                    b8:11:c7:aa:34:9e:71:d0:b4:4f:e7:58:7e:c7:c1:
                    dc:49:07:8c:02:26:90:50:ab:23:19:19:92:59:e2:
                    65:2a:5f:f7:f8:f4:9c:3a:7e:47:bc:ce:26:69:d4:
                    65:c9:72:a2:12:a5:a7:a9:1e:d7:93:e7:cb:76:88:
                    06:fb:29:62:cb:fb:e3:33:50:63:7a:45:dd:37:d0:
                    4a:6d:96:55:a2:7a:03:9c:3d:d0:a9:13:21:83:23:
                    0e:7b:70:20:c6:12:1c:02:06:ff:77:31:5c:29:d8:
                    4b:18:f1:fe:d0:34:07:4f:d4:a5:20:f7:a0:9a:19:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BF:81:20:F8:75:A1:18:1A:34:75:5E:80:38:0B:FD:20:E4:13:B3
            X509v3 Authority Key Identifier:
                keyid:1E:A7:6B:20:E8:CB:B2:53:F2:33:A0:85:B8:C9:16:B9:BF:D7:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EA76B20E8CBB253F233A085B8C916B9BFD78B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/1/3136382e3139372e31322e302f32342d3234203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:29:10:bd:3d:d0:87:d1:34:a5:2f:62:aa:82:0c:ab:a4:48:
         85:c1:53:c8:b0:23:6d:de:72:d3:31:e4:ab:04:32:ac:36:e3:
         68:9f:06:ea:0c:58:25:9a:ee:21:ea:a3:6a:e0:22:92:2b:70:
         86:f8:7f:81:ab:11:4b:14:da:e1:db:a5:fb:42:dd:85:0e:99:
         b5:7e:ab:a0:47:5b:98:97:d0:f4:86:70:e9:1b:bd:4d:ae:db:
         54:04:1c:f4:04:18:61:b5:f1:c1:04:c9:b6:ef:2c:a2:f8:dd:
         0b:eb:6a:27:ce:e8:a5:6a:cf:d8:7d:2a:cc:7a:c6:c2:c4:87:
         a3:b5:67:4c:7d:32:b5:b6:32:15:4d:a4:50:8d:be:41:c7:c0:
         5b:e1:34:7d:a1:f1:6a:10:db:60:3d:14:27:45:fd:30:8c:66:
         e5:6d:ab:de:08:9f:b2:df:34:43:cb:23:ac:7c:29:d7:63:95:
         dd:8e:64:fd:25:9a:c1:82:64:da:2b:e7:cb:85:f9:9e:b7:49:
         b3:d2:49:8c:a2:0d:0e:8f:c9:55:39:80:8d:c7:b3:8e:08:af:
         fb:73:7c:3f:8b:e8:24:6a:c8:e6:ce:9c:e2:65:5d:1a:26:49:
         34:2e:70:d2:5d:e8:a0:59:b1:a1:d3:8c:07:25:ab:63:b9:dd:
         62:8a:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org