Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139362e302f32322d3232203d3e20323637393838.roa
File:                     34352e3136362e3139362e302f32322d3232203d3e20323637393838.roa (raw, json)
Hash identifier:          XX77QPi0Z7tEfU2Rs6iBsAjXBvPO0cJo2HIVdUSG8l4=
Subject key identifier:   FC:D2:32:A8:71:C7:51:F6:01:F7:6E:89:3C:DC:FF:A7:79:B8:57:FB
Certificate issuer:       /CN=016CB67AEBF4799CDE3C034CBA37B0751824EEF1
Certificate serial:       650493096529232F66BAA28CCCE2997E3065D06E
Authority key identifier: 01:6C:B6:7A:EB:F4:79:9C:DE:3C:03:4C:BA:37:B0:75:18:24:EE:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139362e302f32322d3232203d3e20323637393838.roa
Signing time:             Wed 11 Oct 2023 15:07:17 +0000
ROA not before:           Wed 11 Oct 2023 15:02:17 +0000
ROA not after:            Wed 09 Oct 2024 15:07:17 +0000
asID:                     267988
IP address blocks:        45.166.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:04:93:09:65:29:23:2f:66:ba:a2:8c:cc:e2:99:7e:30:65:d0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016CB67AEBF4799CDE3C034CBA37B0751824EEF1
        Validity
            Not Before: Oct 11 15:02:17 2023 GMT
            Not After : Oct  9 15:07:17 2024 GMT
        Subject: CN=FCD232A871C751F601F76E893CDCFFA779B857FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9c:1c:80:70:48:64:2c:ec:c7:dc:f6:7b:99:
                    ec:cc:16:27:91:95:7f:0e:f8:36:a6:a1:e0:b9:ef:
                    9b:ef:1f:c4:4e:91:44:20:00:45:33:39:4d:3c:92:
                    68:74:61:96:9f:3b:51:c5:4d:be:5d:94:50:30:12:
                    f1:db:06:c6:61:94:62:3d:dc:0a:1e:42:5d:b5:ba:
                    16:5d:11:6d:eb:58:96:7e:37:9d:06:7e:bc:69:ce:
                    7c:ca:b5:d7:0f:50:6f:c2:c0:83:27:73:5b:f0:8f:
                    94:3d:1d:95:44:05:6f:8d:4e:2a:d0:2e:df:a7:64:
                    ba:29:4e:95:72:64:00:30:66:76:8f:08:0c:3b:19:
                    19:4a:c5:f4:20:24:b5:5f:94:37:66:38:d9:3d:16:
                    d5:88:6a:b4:97:4f:92:25:24:48:ed:64:27:8c:79:
                    96:63:95:ca:d0:cb:24:49:4b:02:c5:fe:43:41:bf:
                    ac:0c:9a:31:69:ca:b2:ca:d5:f5:0d:af:1d:45:94:
                    31:a3:ec:8b:d1:ea:24:34:5c:ac:5b:22:8e:41:5e:
                    b0:20:fe:fa:bc:16:6e:b1:63:36:48:65:43:0a:fc:
                    a6:20:c8:db:c6:66:46:14:1d:f2:28:94:7c:07:7a:
                    e3:3f:ce:81:28:c8:3a:e1:44:40:5b:cb:3d:02:d9:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:32:A8:71:C7:51:F6:01:F7:6E:89:3C:DC:FF:A7:79:B8:57:FB
            X509v3 Authority Key Identifier:
                keyid:01:6C:B6:7A:EB:F4:79:9C:DE:3C:03:4C:BA:37:B0:75:18:24:EE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139362e302f32322d3232203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:cd:83:24:6b:48:df:33:61:02:7f:e5:e3:17:94:da:80:
         30:10:bd:71:ef:4d:37:e7:c4:51:78:81:29:5e:a5:09:ca:d7:
         10:1a:b7:84:85:80:fe:b8:3b:53:ea:51:31:e4:2c:05:65:89:
         19:d9:97:6a:48:3a:9b:0a:29:4c:22:a6:ce:dc:d3:d2:71:74:
         20:f8:8c:81:67:9e:e3:bd:a8:2d:a2:c2:18:d7:21:c3:92:ac:
         e2:95:95:85:72:60:36:50:be:f7:72:66:8d:9d:39:c0:3e:21:
         fe:0e:08:89:d6:d1:1e:6f:8f:7c:1c:10:d3:c6:46:df:ab:32:
         c0:30:bf:7b:7a:d8:d1:67:b0:10:db:9f:ef:bb:82:de:e4:ba:
         59:c2:b4:a9:d7:47:e5:f4:c9:55:be:85:81:22:d1:c6:05:5b:
         25:50:eb:2b:dd:e0:51:b7:0a:e6:5c:29:ea:82:11:60:12:67:
         60:32:cf:ef:e1:64:d4:aa:45:de:d9:d9:34:bb:2a:91:3a:56:
         1f:79:ca:d5:b9:08:30:cc:f5:7a:d7:75:10:1f:18:73:6d:2d:
         a2:7b:53:41:0e:af:63:04:8f:5f:62:43:88:cb:35:2a:88:e2:
         ff:85:a2:dc:1b:54:9b:c4:b2:70:5a:86:fd:15:f2:d8:68:ce:
         74:8f:b4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org