Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136352e302f32342d3234203d3e20323637333230.roa
File:                     34352e3233332e3136352e302f32342d3234203d3e20323637333230.roa (raw, json)
Hash identifier:          22ytzFvfHJWNpBZZPmK1SqOlxGDI7GElK1Dlc/Mzg6k=
Subject key identifier:   44:26:FF:2D:E1:3D:24:61:EC:88:B5:7C:44:51:8C:A4:5F:2E:84:35
Certificate issuer:       /CN=41B75113AE9716150D6BFBFA040F31771294DE81
Certificate serial:       4EFBD3E3300309282E61342191D3CF33A0FDC40B
Authority key identifier: 41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136352e302f32342d3234203d3e20323637333230.roa
Signing time:             Tue 04 Jan 2022 02:20:18 +0000
ROA not before:           Tue 04 Jan 2022 02:15:18 +0000
ROA not after:            Tue 03 Jan 2023 02:20:18 +0000
asID:                     267320
IP address blocks:        45.233.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fb:d3:e3:30:03:09:28:2e:61:34:21:91:d3:cf:33:a0:fd:c4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B75113AE9716150D6BFBFA040F31771294DE81
        Validity
            Not Before: Jan  4 02:15:18 2022 GMT
            Not After : Jan  3 02:20:18 2023 GMT
        Subject: CN=4426FF2DE13D2461EC88B57C44518CA45F2E8435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:f3:b3:c9:72:1d:94:1c:b1:9e:79:f6:5e:
                    10:f3:06:1b:d8:43:a5:d5:6e:f8:8d:d5:c1:c1:a5:
                    3a:64:be:0c:f0:bd:ae:44:23:b9:19:66:81:0e:32:
                    5d:1d:c9:97:0a:5e:5a:ee:df:2e:3e:bf:fc:1c:74:
                    96:98:23:d0:b3:c6:9a:b9:0b:1c:9a:cf:a5:07:bd:
                    25:76:8f:3d:54:4f:59:98:05:2b:b9:11:31:28:df:
                    5c:4e:62:25:16:02:fe:a7:8f:3e:6f:a6:3c:25:c9:
                    a3:e4:fa:6e:17:d9:9e:11:12:0a:e1:42:f3:0d:59:
                    e3:c7:3e:a2:54:e7:f0:e1:b6:15:2d:eb:60:cf:36:
                    a1:f7:ee:d5:21:e2:56:27:e4:02:23:13:ba:14:99:
                    5a:26:53:99:36:aa:8b:be:37:b2:43:74:7c:7e:ff:
                    db:ee:99:23:f7:c5:82:41:43:06:32:09:4a:6a:04:
                    aa:57:96:da:03:1e:7f:b8:73:28:f0:dd:ff:fb:88:
                    c0:9f:46:77:85:b4:42:12:61:36:86:39:96:b8:5e:
                    d4:1e:2c:25:69:b3:e9:1f:f3:94:9c:1a:1d:99:41:
                    b2:f2:dc:5c:45:c4:65:9d:70:31:79:7a:02:95:45:
                    6e:93:b9:b6:24:ad:0f:5e:40:42:42:44:97:cf:e1:
                    6d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:26:FF:2D:E1:3D:24:61:EC:88:B5:7C:44:51:8C:A4:5F:2E:84:35
            X509v3 Authority Key Identifier:
                keyid:41:B7:51:13:AE:97:16:15:0D:6B:FB:FA:04:0F:31:77:12:94:DE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/41B75113AE9716150D6BFBFA040F31771294DE81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B75113AE9716150D6BFBFA040F31771294DE81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136352e302f32342d3234203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:a6:f3:23:10:39:35:17:0e:5e:c4:d3:9c:d1:37:87:57:
         6c:2e:02:8f:40:b3:78:ba:42:05:bf:55:d6:2d:b2:f9:e3:12:
         6d:5a:10:99:b6:a1:a2:d3:af:04:ac:d1:39:c0:40:6f:ba:bd:
         52:c5:64:7d:b9:46:a3:4a:29:e2:c6:64:20:17:36:a3:d5:3c:
         2d:41:64:7e:fe:18:41:bc:1d:ce:a8:0f:3e:a3:a5:fd:b7:ce:
         0b:76:3e:34:e8:88:bb:b4:97:c1:48:f4:23:ec:07:d1:63:0d:
         9a:d3:ea:4b:1f:55:19:f2:5a:09:30:48:07:68:a9:2d:cb:9e:
         63:3d:8d:6b:d5:bf:64:77:6f:4b:36:13:ef:82:c6:48:56:c6:
         2d:64:0e:d9:70:66:fb:48:d7:22:ff:d1:b9:0a:1e:d1:d1:1a:
         70:79:e3:09:1e:94:a5:67:bf:27:83:ca:14:2d:15:46:0f:82:
         69:4a:69:71:97:03:ee:95:33:b6:6d:1d:74:73:22:01:5d:db:
         f3:85:99:d2:cd:8d:38:da:fa:8e:17:4f:dd:08:e2:3d:eb:7e:
         e1:eb:9a:7d:3b:0a:fd:14:52:57:f7:f9:6c:aa:6d:9e:7e:39:
         4f:c5:fe:3e:95:57:cb:98:36:3f:c8:f2:18:34:c3:36:1f:54:
         16:37:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-ams.rpki-client.org