Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139362e302f32342d3234203d3e20323637393838.roa
File:                     34352e3136362e3139362e302f32342d3234203d3e20323637393838.roa (raw, json)
Hash identifier:          kNCVKJkDNJKg5yL/F4ORQDzQ3JXBzNOKMTvyfVAimbw=
Subject key identifier:   A0:8E:9D:D0:DA:D9:0C:8E:80:82:C1:EF:F5:AB:7E:DA:8F:4C:31:81
Certificate issuer:       /CN=016CB67AEBF4799CDE3C034CBA37B0751824EEF1
Certificate serial:       72611499152206D86E921F23D71484D1E3503ECB
Authority key identifier: 01:6C:B6:7A:EB:F4:79:9C:DE:3C:03:4C:BA:37:B0:75:18:24:EE:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139362e302f32342d3234203d3e20323637393838.roa
Signing time:             Wed 11 Oct 2023 15:07:16 +0000
ROA not before:           Wed 11 Oct 2023 15:02:16 +0000
ROA not after:            Wed 09 Oct 2024 15:07:16 +0000
asID:                     267988
IP address blocks:        45.166.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:61:14:99:15:22:06:d8:6e:92:1f:23:d7:14:84:d1:e3:50:3e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016CB67AEBF4799CDE3C034CBA37B0751824EEF1
        Validity
            Not Before: Oct 11 15:02:16 2023 GMT
            Not After : Oct  9 15:07:16 2024 GMT
        Subject: CN=A08E9DD0DAD90C8E8082C1EFF5AB7EDA8F4C3181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:05:ca:2e:0c:d0:d7:b8:32:cb:42:ac:0d:
                    38:66:32:62:a3:f0:ff:14:c7:af:64:73:29:c4:5a:
                    da:45:9a:30:58:81:14:46:a3:f9:9a:5a:e7:d0:b9:
                    0a:06:da:2d:e6:26:82:95:63:5a:11:36:d6:16:89:
                    39:30:87:d4:0f:97:46:a3:b0:2e:aa:79:4a:50:d4:
                    2c:db:e8:69:ec:0c:5f:fa:3c:89:8f:a8:9a:b6:22:
                    4c:c6:03:ed:96:16:d0:6e:f1:dd:53:a6:09:9b:7e:
                    85:d4:00:92:df:b0:4d:46:41:12:19:10:a0:85:cc:
                    7d:20:0f:85:50:2e:b7:d2:1b:7f:1f:15:46:26:0e:
                    ad:cf:bd:9d:8a:6d:47:6d:96:dd:ed:de:7b:46:69:
                    a5:3e:45:17:3c:b4:74:83:48:fc:9b:e0:12:e1:6b:
                    ba:d5:66:f1:fe:01:c7:86:28:32:76:0b:42:5b:94:
                    2c:c1:32:50:f1:2b:b8:53:79:da:6a:07:96:e6:f1:
                    e8:46:5b:5a:c7:ce:ee:5f:e4:34:50:a0:d7:81:63:
                    8e:97:72:b4:a0:a7:97:79:25:31:24:ea:0e:1c:32:
                    f9:6c:a8:32:80:19:d0:ce:47:49:bd:74:10:0b:56:
                    5e:33:60:55:ac:ea:75:4e:ae:a6:a0:4b:da:e4:13:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8E:9D:D0:DA:D9:0C:8E:80:82:C1:EF:F5:AB:7E:DA:8F:4C:31:81
            X509v3 Authority Key Identifier:
                keyid:01:6C:B6:7A:EB:F4:79:9C:DE:3C:03:4C:BA:37:B0:75:18:24:EE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139362e302f32342d3234203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:91:ed:d7:65:b1:59:aa:f9:02:98:c0:ad:95:21:bd:83:ec:
         b3:8f:12:1d:41:2e:df:71:e4:f6:c1:04:b5:fe:29:c3:dc:b0:
         5e:90:b2:d1:f2:f3:01:55:fc:b2:02:bf:87:aa:7a:90:5f:1e:
         01:e5:17:a6:40:a8:f2:97:04:78:f1:23:cc:da:0a:9d:f0:45:
         79:c5:13:50:16:10:55:e2:61:ea:fd:d9:a3:a9:94:0b:5b:bc:
         0e:31:ed:88:6d:ca:9c:44:8a:8e:b0:17:eb:3d:51:6f:30:af:
         6b:25:28:c5:1d:ac:51:9e:2a:78:3f:19:d3:32:65:72:80:d7:
         85:3e:d0:7e:f8:5e:e9:8a:95:74:b4:d0:8e:03:98:e3:4d:fd:
         df:5e:7a:4b:c1:ff:4e:c7:5c:9d:31:fa:82:a3:74:43:82:b0:
         0e:f8:e3:39:a2:d6:eb:32:00:61:fd:91:9c:dd:16:b4:c6:a4:
         38:a8:51:3f:fd:b7:73:51:d1:4c:4e:a3:8e:ea:b7:92:5b:69:
         8d:56:4e:05:dd:d7:15:c5:0a:01:11:8a:80:4f:f1:b8:c6:01:
         17:9f:f0:85:5d:01:26:ca:90:16:a2:a0:cb:fe:f7:47:79:99:
         27:9e:ac:dd:49:2a:e1:92:29:0e:21:79:a0:0d:17:c4:9a:0b:
         4b:23:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org