Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3232203d3e20323637333230.roa
File:                     34352e3233332e3136342e302f32322d3232203d3e20323637333230.roa (raw, json)
Hash identifier:          F/6lxJeiPPoh2Fhwd8iYUWaK0qxP83ga8ScTyQkHjPU=
Subject key identifier:   25:A0:84:93:15:EE:88:E4:33:C8:C2:A5:E9:F6:4A:8B:4B:6C:7F:D0
Certificate issuer:       /CN=41B75113AE9716150D6BFBFA040F31771294DE81
Certificate serial:       1415669F0DF375760650371671E13E89422C7D2E
Authority key identifier: 41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3232203d3e20323637333230.roa
Signing time:             Wed 13 Jul 2022 01:52:05 +0000
ROA not before:           Wed 13 Jul 2022 01:47:05 +0000
ROA not after:            Wed 12 Jul 2023 01:52:05 +0000
asID:                     267320
IP address blocks:        45.233.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:15:66:9f:0d:f3:75:76:06:50:37:16:71:e1:3e:89:42:2c:7d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B75113AE9716150D6BFBFA040F31771294DE81
        Validity
            Not Before: Jul 13 01:47:05 2022 GMT
            Not After : Jul 12 01:52:05 2023 GMT
        Subject: CN=25A0849315EE88E433C8C2A5E9F64A8B4B6C7FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:c7:df:11:ba:2d:3c:06:57:a4:e7:6a:de:
                    38:db:f8:ae:1f:67:08:5c:61:65:02:3a:a3:a9:09:
                    2c:88:ea:f5:4d:3c:d1:93:a8:81:83:90:1d:9d:6c:
                    f4:76:5e:57:3b:29:26:4c:b2:2a:96:a7:26:4b:8a:
                    d1:72:72:49:76:99:77:46:4c:46:95:20:1a:0d:39:
                    80:20:43:b5:d3:d4:26:88:d2:ea:b2:98:c6:c7:b3:
                    b7:ca:39:2e:17:40:1e:b9:6e:3a:89:7e:6e:8a:10:
                    48:6d:18:09:7d:7e:bb:7b:2d:64:7c:e5:28:3f:7a:
                    70:27:25:03:45:e0:e1:ae:86:c4:8a:4d:c6:81:b8:
                    1a:d5:f5:ee:da:cd:6b:3f:89:15:d7:a1:37:93:a5:
                    ab:c2:19:11:e4:ea:9f:c4:73:5c:70:bd:4b:1c:35:
                    38:33:34:2b:34:bd:da:8d:0e:69:35:85:8a:2f:a1:
                    51:07:56:f0:64:85:7f:51:dd:6b:aa:1f:41:70:cd:
                    22:a2:89:50:95:14:6a:c8:f8:97:84:4e:8a:59:6e:
                    34:d0:dd:07:55:92:03:e2:cf:6d:51:2e:74:62:cc:
                    bb:57:17:9b:87:84:b1:88:22:c5:0c:75:0f:2b:fc:
                    83:6d:21:c6:a7:fc:b4:0b:72:ed:53:b1:85:14:18:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A0:84:93:15:EE:88:E4:33:C8:C2:A5:E9:F6:4A:8B:4B:6C:7F:D0
            X509v3 Authority Key Identifier:
                keyid:41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/41B75113AE9716150D6BFBFA040F31771294DE81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3232203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:ed:d6:09:c4:ed:e8:ec:67:ea:cb:06:4f:24:84:3e:7e:
         ed:86:5e:98:a2:6b:e2:27:64:ed:15:30:0a:62:74:eb:ca:e4:
         17:1f:02:cc:c2:f5:9f:71:0a:22:23:37:17:8d:a2:1f:fa:3b:
         08:71:38:3a:d3:eb:33:cd:99:28:4d:d2:60:16:39:a3:62:72:
         1c:e3:a1:a9:25:15:c8:bb:55:21:ab:ab:6f:15:29:2c:02:9e:
         c7:d2:63:37:76:f5:f7:6f:a0:32:c7:45:83:c4:e6:72:99:47:
         c3:46:2b:92:9d:92:53:d9:37:a7:f0:0c:d4:70:2a:53:32:92:
         12:63:8d:fd:2e:53:32:20:ef:f7:9c:34:86:45:17:ad:d9:93:
         88:56:86:10:32:4b:09:32:8d:a8:14:54:8d:7c:ae:82:79:cd:
         d8:ae:ca:79:87:6e:a9:5d:5d:d4:59:15:3c:29:50:1e:56:b5:
         5d:42:8e:8f:d8:c3:e5:a5:79:53:97:e7:d6:84:00:84:bd:31:
         ef:84:17:ad:d2:9c:8d:68:77:c3:14:b1:b9:68:31:c9:62:4e:
         fd:82:ff:f3:9c:6c:87:93:f2:d0:fe:69:7c:10:b8:5f:ac:f8:
         8c:a5:0c:62:4c:a9:30:79:a0:f4:27:e4:1b:23:0a:c5:c9:26:
         06:5a:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org