Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32332d3332203d3e20323639313633.roa
File:                     34352e3138312e32342e302f32332d3332203d3e20323639313633.roa (raw, json)
Hash identifier:          4CscGMWlJUdVj3u8G21gdWswJxUynJffAuJKhHfNxdw=
Subject key identifier:   A2:33:6E:9B:1D:C8:BB:29:AF:D3:C7:A2:25:E5:7C:47:89:4A:7C:E0
Certificate issuer:       /CN=66F12A0CECEF1C562203A473D5B993BF54BBA70A
Certificate serial:       2DB9E38DE615539AE0B871684ACC2854D13298B7
Authority key identifier: 66:F1:2A:0C:EC:EF:1C:56:22:03:A4:73:D5:B9:93:BF:54:BB:A7:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32332d3332203d3e20323639313633.roa
Signing time:             Tue 05 Sep 2023 23:08:40 +0000
ROA not before:           Tue 05 Sep 2023 23:03:40 +0000
ROA not after:            Tue 03 Sep 2024 23:08:40 +0000
asID:                     269163
IP address blocks:        45.181.24.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b9:e3:8d:e6:15:53:9a:e0:b8:71:68:4a:cc:28:54:d1:32:98:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F12A0CECEF1C562203A473D5B993BF54BBA70A
        Validity
            Not Before: Sep  5 23:03:40 2023 GMT
            Not After : Sep  3 23:08:40 2024 GMT
        Subject: CN=A2336E9B1DC8BB29AFD3C7A225E57C47894A7CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:e1:cd:bd:21:d8:91:0f:6d:b2:1b:03:65:
                    c9:31:6a:bf:77:96:69:ca:b0:90:f7:46:0e:30:50:
                    b1:e6:db:8b:b6:29:23:0e:9f:ed:e6:30:64:a4:23:
                    72:5b:da:98:ee:12:27:79:d1:45:3e:66:46:81:2f:
                    07:4b:95:0d:3a:2c:35:f5:a6:c4:35:ab:7c:72:c1:
                    fe:db:b1:fe:97:4e:fc:c0:74:32:62:c8:60:ea:4e:
                    5a:21:fe:7a:89:d4:45:0d:1e:ea:02:0c:10:99:1b:
                    15:09:0d:09:7b:89:a4:94:fd:a9:1a:09:07:59:01:
                    42:7c:bd:72:1a:93:9d:c7:63:b2:44:b9:6a:e1:1a:
                    be:67:28:d0:6e:52:06:65:ef:1d:c3:18:ab:9e:36:
                    27:a0:72:96:4c:8c:5d:84:f2:89:e9:29:bd:58:c4:
                    ae:1b:ba:7e:38:de:1e:0b:8f:80:be:b9:c3:3d:76:
                    11:29:d5:84:35:66:aa:6f:09:53:07:b2:52:83:84:
                    8a:a8:88:3b:f2:28:ef:e3:89:48:e8:bb:0c:61:ad:
                    91:73:cf:fd:2e:ac:3c:13:7e:06:af:dc:52:04:9c:
                    0f:ab:d6:82:9a:29:ba:bb:04:15:78:b0:02:58:48:
                    d6:16:80:07:cc:4f:e7:31:78:10:3a:31:e8:1a:10:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:33:6E:9B:1D:C8:BB:29:AF:D3:C7:A2:25:E5:7C:47:89:4A:7C:E0
            X509v3 Authority Key Identifier:
                keyid:66:F1:2A:0C:EC:EF:1C:56:22:03:A4:73:D5:B9:93:BF:54:BB:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32332d3332203d3e20323639313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:fa:be:66:0a:16:8a:ac:60:60:82:fc:95:52:e1:14:68:
         a8:60:c5:d2:20:dd:94:77:5a:00:6c:dc:e5:fc:29:1d:43:be:
         70:e7:5b:24:85:5b:eb:d3:92:34:80:f0:eb:6e:68:fb:d3:45:
         74:72:98:5a:3f:c8:79:2f:51:f0:c6:c6:04:50:2c:e1:8f:e4:
         45:88:ff:4b:af:dd:0a:ae:8c:09:67:94:89:74:f3:bd:4f:19:
         d7:a4:83:7a:79:90:48:9e:49:aa:a1:d0:95:a9:45:40:5c:27:
         f1:95:53:2e:13:75:42:01:28:6f:16:e4:3d:d3:3d:e2:fc:2a:
         30:b4:2e:64:e6:cf:b7:3d:b2:90:af:94:62:5a:4f:40:9b:dc:
         89:34:82:59:7e:d7:1b:35:2b:f8:d9:d1:93:b0:5c:27:26:6a:
         7b:a0:29:70:e5:c5:af:ec:1e:78:3c:6a:90:4f:06:ff:83:7a:
         75:62:5f:c5:ca:3e:db:6b:c7:17:da:90:2a:9f:b5:3c:6c:af:
         9d:24:a5:1d:e8:70:e7:16:d2:7e:d5:ca:35:c1:d1:7c:5e:fa:
         eb:a4:ce:40:38:fb:60:d6:05:91:1b:0c:83:d3:4d:b4:56:de:
         f9:51:e1:25:82:27:f2:15:f7:a8:44:f8:0f:15:54:c8:63:e9:
         e8:34:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org