Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa
File:                     34352e3136352e39362e302f32332d3233203d3e20323638363734.roa (raw, json)
Hash identifier:          4GkL9ShagmISDSujLi8p7OmNor6Mvr3ouQNnBQ6RBRM=
Subject key identifier:   84:19:C9:30:FD:2E:2C:60:56:C8:AE:EC:8B:37:05:39:B0:E3:BB:6B
Certificate issuer:       /CN=04004212A99696A4F283C73FE7EC609301933701
Certificate serial:       360C3E28BCFB856F047479A78A2E6D96C5E66D1A
Authority key identifier: 04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa
Signing time:             Fri 15 Mar 2024 13:18:58 +0000
ROA not before:           Fri 15 Mar 2024 13:13:58 +0000
ROA not after:            Fri 14 Mar 2025 13:18:58 +0000
asID:                     268674
IP address blocks:        45.165.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0c:3e:28:bc:fb:85:6f:04:74:79:a7:8a:2e:6d:96:c5:e6:6d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04004212A99696A4F283C73FE7EC609301933701
        Validity
            Not Before: Mar 15 13:13:58 2024 GMT
            Not After : Mar 14 13:18:58 2025 GMT
        Subject: CN=8419C930FD2E2C6056C8AEEC8B370539B0E3BB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:5a:04:7e:08:eb:8b:b8:07:66:c3:1e:a5:
                    62:39:f8:bd:cc:08:24:44:e8:94:87:92:48:7b:4a:
                    0f:d9:d2:e2:d6:56:da:f6:af:ca:8a:e9:eb:15:a7:
                    5d:f8:e9:b5:78:ba:03:65:20:7e:a3:3f:77:d9:67:
                    43:e7:88:a9:25:00:64:65:c0:33:9b:22:85:82:f2:
                    8f:6c:92:9e:cf:33:ad:29:c1:9e:3a:3a:74:19:0e:
                    aa:c2:1c:aa:cc:ca:d8:b4:10:fb:a7:7e:cc:6a:9f:
                    63:57:a8:45:45:55:62:eb:4a:c2:89:95:fe:13:ed:
                    c2:70:11:f2:3f:cd:3a:f7:17:ba:c6:2c:6d:5e:0a:
                    10:81:60:b3:9d:83:ae:77:51:1c:ba:c6:f7:7e:6b:
                    d8:80:b5:07:71:75:34:19:59:16:79:46:48:f1:c1:
                    78:a4:79:6e:6f:5c:25:92:f1:93:97:1f:fa:98:ae:
                    88:5f:06:c0:5c:80:e7:d8:63:80:27:0c:01:ca:6a:
                    ca:b6:cf:a9:a9:9f:75:f2:0f:90:ab:10:9e:b8:f1:
                    67:0b:d1:2f:80:8b:27:12:21:68:fb:fd:13:e3:03:
                    fe:3e:25:a8:87:dd:04:54:24:db:ec:4e:c9:5c:72:
                    ec:6e:f4:7c:7d:f9:37:40:18:8e:9f:69:eb:11:da:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:19:C9:30:FD:2E:2C:60:56:C8:AE:EC:8B:37:05:39:B0:E3:BB:6B
            X509v3 Authority Key Identifier:
                keyid:04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/04004212A99696A4F283C73FE7EC609301933701.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:db:8b:5d:e0:b1:31:6a:96:74:7a:70:84:ce:ae:6f:06:8c:
         89:0e:23:9e:e9:98:a4:18:b3:cc:c3:1a:0f:70:80:74:38:38:
         79:e7:94:ac:8f:99:f4:02:47:2b:30:a2:e7:a4:fb:bf:17:f6:
         96:52:5f:88:ee:47:ec:1d:ee:96:0d:03:d4:36:a1:6a:b7:fe:
         e3:e6:e2:b8:11:78:f0:7b:1a:d7:fa:a9:e1:43:f8:c1:29:45:
         42:a1:a1:70:fc:10:9d:ac:c9:d3:77:a4:43:83:42:7a:73:1b:
         bd:61:ab:43:28:3a:3c:00:9e:e0:22:fb:b2:fd:9f:5c:c6:7c:
         35:3d:c1:38:dc:d6:b1:00:93:a1:60:f2:b8:02:79:42:c5:2d:
         ef:4f:7c:c6:32:32:67:1c:ed:31:01:b1:fb:f6:13:23:c5:0c:
         59:71:73:a1:a6:73:e3:79:73:74:ac:58:c4:96:4b:b7:33:62:
         b4:1f:6d:98:e7:be:19:76:dc:3a:3f:cf:e1:fa:e8:fa:91:c3:
         e8:89:9a:ba:a0:fd:ac:86:3d:59:f3:a5:a7:5b:bb:de:e2:f8:
         7c:4f:d0:a3:8b:5d:2b:ef:cf:ef:b7:e4:33:19:29:58:a4:9d:
         af:45:31:5d:62:8e:6c:f7:01:1a:7b:4f:cc:34:d9:7e:f9:c0:
         8c:88:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org