Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa
File:                     34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa (raw, json)
Hash identifier:          YT5fsy2mmth+CwDM3GyFahywUkrDvnuDCt1xCis9x38=
Subject key identifier:   0B:90:3E:FB:2D:D1:CA:8E:AE:B8:B1:5E:0B:01:1A:C4:BD:51:7E:AC
Certificate issuer:       /CN=41B75113AE9716150D6BFBFA040F31771294DE81
Certificate serial:       6596713E1F4FA046CA732AB258F79706A898BE32
Authority key identifier: 41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa
Signing time:             Wed 09 Aug 2023 19:28:47 +0000
ROA not before:           Wed 09 Aug 2023 19:23:47 +0000
ROA not after:            Wed 07 Aug 2024 19:28:47 +0000
asID:                     267320
IP address blocks:        45.233.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:96:71:3e:1f:4f:a0:46:ca:73:2a:b2:58:f7:97:06:a8:98:be:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B75113AE9716150D6BFBFA040F31771294DE81
        Validity
            Not Before: Aug  9 19:23:47 2023 GMT
            Not After : Aug  7 19:28:47 2024 GMT
        Subject: CN=0B903EFB2DD1CA8EAEB8B15E0B011AC4BD517EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3a:0c:16:6c:5c:04:7c:c3:e4:97:8d:92:a2:
                    46:45:33:d3:56:da:ef:6b:37:db:b4:b7:9a:43:3d:
                    48:ab:2d:59:a8:97:4f:6e:c9:af:be:b7:04:9e:65:
                    49:4b:e8:75:ff:92:84:40:8d:fe:10:a1:8a:ab:4d:
                    b0:d5:7d:78:86:79:17:5c:c1:5f:54:bd:e3:0c:ab:
                    4f:2b:64:cd:67:a1:f8:0d:9a:83:5b:b5:6e:63:b4:
                    64:3d:58:d2:59:d0:5b:cf:cf:73:fd:09:80:8b:8f:
                    9b:af:30:ac:f1:8d:c5:50:a2:8a:8f:7a:7f:c3:ec:
                    45:39:87:90:bc:8f:ee:ba:ce:9f:7f:99:e4:98:e5:
                    fa:a6:e3:a4:ba:86:01:af:c9:1a:77:9e:cb:a1:55:
                    4f:52:5b:ca:76:4a:ba:0c:3e:13:da:e6:7c:19:e4:
                    a2:10:e9:8c:58:63:c4:bf:b5:d2:74:29:b9:55:b7:
                    7c:dd:ea:d8:35:01:8f:e4:93:f2:28:23:76:a6:4f:
                    60:07:cb:c4:c2:c4:4a:03:d4:93:85:e9:9c:15:ef:
                    22:4e:85:37:ee:18:58:39:f7:e8:9f:aa:87:30:ee:
                    91:e8:3d:c3:ae:ba:e7:ad:a7:a0:24:d6:56:2e:ad:
                    20:13:42:e3:fa:bb:50:33:02:3a:d0:1e:16:08:dd:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:3E:FB:2D:D1:CA:8E:AE:B8:B1:5E:0B:01:1A:C4:BD:51:7E:AC
            X509v3 Authority Key Identifier:
                keyid:41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/41B75113AE9716150D6BFBFA040F31771294DE81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:a8:83:0a:a5:14:ed:fd:bd:98:cb:c6:0c:25:5b:5e:4e:
         b5:51:9a:e1:17:ab:e2:8f:d3:12:9f:37:34:3c:41:e3:9c:bd:
         f2:8e:92:ad:de:ce:33:63:80:43:b4:c3:6f:1d:4f:79:4b:3f:
         db:5d:da:f9:6c:4a:32:6a:89:4c:f1:ef:b1:c1:bb:fa:90:37:
         0b:dd:62:b2:5c:5d:85:ce:41:8c:cb:b7:94:73:47:15:46:28:
         b1:13:15:09:86:15:cb:68:38:f5:97:71:66:5b:09:60:ad:63:
         5d:0b:bf:c6:1a:b6:08:5d:d6:04:e3:8e:96:56:fd:a4:5c:0c:
         f7:a9:a3:21:91:de:30:07:a5:a1:95:6d:da:1c:6d:4a:9e:8c:
         cf:65:19:55:53:14:50:e7:b1:f3:25:8e:4f:3e:52:77:94:49:
         09:bd:cd:e7:55:7a:40:61:3f:44:75:cb:e9:88:57:32:d0:25:
         57:32:4c:be:8f:37:6c:16:b9:8c:f0:43:bb:cd:3c:19:a3:28:
         e1:7e:58:b0:9c:31:f7:fc:16:23:98:59:ba:98:5d:cf:03:ca:
         d2:22:70:60:63:5c:ea:3f:94:b3:66:cc:39:fa:95:a3:10:95:
         03:cb:a6:53:b4:48:4a:34:8b:bc:02:cd:a6:6b:0d:0f:8c:66:
         bc:e8:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-ams.rpki-client.org