Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139392e302f32342d3234203d3e20323637393838.roa
File:                     34352e3136362e3139392e302f32342d3234203d3e20323637393838.roa (raw, json)
Hash identifier:          WtBvhr/4VTD5GFq69hPMzRPsxz2r6vf9+WFHqCMLM74=
Subject key identifier:   E7:3B:24:93:3D:F5:F5:65:5F:24:38:21:1E:EA:26:89:3B:8C:D8:F2
Certificate issuer:       /CN=016CB67AEBF4799CDE3C034CBA37B0751824EEF1
Certificate serial:       381599A93B923BBF2445A0B076F839D34E46C921
Authority key identifier: 01:6C:B6:7A:EB:F4:79:9C:DE:3C:03:4C:BA:37:B0:75:18:24:EE:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139392e302f32342d3234203d3e20323637393838.roa
Signing time:             Wed 11 Oct 2023 15:07:16 +0000
ROA not before:           Wed 11 Oct 2023 15:02:16 +0000
ROA not after:            Wed 09 Oct 2024 15:07:16 +0000
asID:                     267988
IP address blocks:        45.166.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:15:99:a9:3b:92:3b:bf:24:45:a0:b0:76:f8:39:d3:4e:46:c9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016CB67AEBF4799CDE3C034CBA37B0751824EEF1
        Validity
            Not Before: Oct 11 15:02:16 2023 GMT
            Not After : Oct  9 15:07:16 2024 GMT
        Subject: CN=E73B24933DF5F5655F2438211EEA26893B8CD8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d3:89:bb:cd:e2:5f:58:9f:df:c2:62:30:85:
                    ca:58:37:8a:76:a8:74:28:5d:23:e6:9e:a6:a0:a7:
                    84:e7:21:2d:23:6f:b5:2e:ba:2c:2c:ec:f8:12:9e:
                    f1:e3:0a:4e:74:9f:fc:4f:c1:bc:b0:f7:c6:1d:38:
                    a8:38:f2:7f:31:be:26:91:e4:e4:6e:0f:ab:70:45:
                    89:8a:0d:44:94:27:fe:e4:80:42:6c:98:03:a2:c6:
                    71:a2:2e:20:fd:28:7d:36:f4:42:e8:d8:ee:e4:6a:
                    65:4f:54:ea:10:30:a7:c6:1b:6b:a9:d8:40:ae:aa:
                    4f:f5:46:69:4d:cc:d2:3b:90:87:f1:37:65:15:43:
                    b8:dd:e9:92:66:88:65:89:06:a5:f2:f3:b6:1f:23:
                    7e:7b:73:c8:de:92:4a:24:27:7e:e0:06:97:61:38:
                    11:08:57:f3:ab:1c:c9:55:a5:41:38:5c:11:60:2f:
                    70:d1:05:bd:63:74:9d:ad:0a:79:d1:f8:65:18:77:
                    c7:c1:ca:a5:97:cf:02:bf:62:87:aa:09:dc:00:0d:
                    84:0d:63:20:02:e3:90:02:ff:ec:5c:26:5a:31:2f:
                    16:09:e3:c1:ac:ce:c6:04:12:7d:d0:ab:ed:bf:db:
                    64:5b:1a:cb:02:16:e3:5b:d7:c3:f8:8a:85:b8:70:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3B:24:93:3D:F5:F5:65:5F:24:38:21:1E:EA:26:89:3B:8C:D8:F2
            X509v3 Authority Key Identifier:
                keyid:01:6C:B6:7A:EB:F4:79:9C:DE:3C:03:4C:BA:37:B0:75:18:24:EE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016CB67AEBF4799CDE3C034CBA37B0751824EEF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139392e302f32342d3234203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:87:5c:54:a7:46:9f:ba:65:03:aa:82:c8:98:6d:0f:a5:cf:
         eb:ca:7d:7f:ad:e3:15:27:ad:51:8a:24:27:2e:28:53:62:49:
         12:99:cf:63:a2:50:82:4b:00:ad:35:19:4f:00:da:cb:b6:74:
         ca:16:9f:0e:5b:15:e2:f5:12:1a:13:76:60:9b:a1:a1:87:68:
         35:d2:00:f3:47:a9:01:21:3b:da:d0:65:ff:6f:5a:e5:f9:e6:
         97:b1:fe:d8:31:2d:27:3c:e6:fc:82:bf:2d:56:ce:1a:46:ef:
         25:a8:00:bf:a4:c4:b4:ae:5e:8d:df:1c:15:ec:b4:e3:b6:3b:
         93:4a:7a:70:2c:d5:42:c4:4b:07:cb:1a:47:7d:71:b5:8c:1e:
         5c:ca:95:a3:70:e4:dd:2c:89:40:c4:c9:a4:13:79:c9:95:3c:
         d7:b0:79:f7:00:02:c9:18:49:e6:f7:e1:93:3e:57:f0:e5:d5:
         df:0a:14:30:19:bb:7d:b2:64:db:84:41:a4:bc:3b:b7:71:c8:
         9e:c4:4d:84:bf:5a:44:61:4b:b3:3f:00:a7:e9:56:62:33:13:
         b1:eb:a1:fd:9a:a8:6a:7b:60:7f:f7:01:ba:7e:12:36:45:71:
         73:3d:e2:db:bd:88:93:22:03:d2:34:9c:4c:f9:41:ae:68:bf:
         0a:dc:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org