Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3232203d3e20323637393537.roa
File:                     34352e3136362e3132382e302f32322d3232203d3e20323637393537.roa (raw, json)
Hash identifier:          7p6UUFnQ1w596ie7giyLQrFqbWn8bKhGpcry183ksPU=
Subject key identifier:   FF:40:D4:3F:09:B1:4E:1A:D7:A3:FB:79:80:00:DC:C8:C0:03:7E:F9
Certificate issuer:       /CN=436AC15E57989C85E66C586C30E7C23263E417D9
Certificate serial:       67DA149F09B93AB922B8CD01B44A02236386C746
Authority key identifier: 43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3232203d3e20323637393537.roa
Signing time:             Fri 02 Jun 2023 19:36:28 +0000
ROA not before:           Fri 02 Jun 2023 19:31:28 +0000
ROA not after:            Fri 31 May 2024 19:36:28 +0000
asID:                     267957
IP address blocks:        45.166.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:da:14:9f:09:b9:3a:b9:22:b8:cd:01:b4:4a:02:23:63:86:c7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436AC15E57989C85E66C586C30E7C23263E417D9
        Validity
            Not Before: Jun  2 19:31:28 2023 GMT
            Not After : May 31 19:36:28 2024 GMT
        Subject: CN=FF40D43F09B14E1AD7A3FB798000DCC8C0037EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:23:af:23:48:03:f6:6d:19:ab:e7:07:77:
                    24:03:21:19:8c:e8:3a:2f:0e:c1:67:14:8e:4c:c9:
                    6a:bc:95:40:a3:b4:2b:69:69:12:1f:3b:42:71:ba:
                    ec:05:c7:13:11:d7:af:23:7c:bb:f6:f3:20:c5:20:
                    19:55:61:00:b2:56:a5:c8:7f:9b:79:3f:d2:e8:69:
                    1b:40:cf:20:19:68:46:52:64:62:00:70:e3:a4:ae:
                    fd:c6:b4:2b:a2:f1:87:c2:89:84:51:4f:d6:c3:3f:
                    a8:12:39:0c:ba:dd:2a:3c:30:4c:f9:4d:50:a6:4e:
                    22:44:93:6c:db:40:00:a8:68:90:68:a1:41:86:5e:
                    68:b1:d2:dc:49:8b:95:f1:48:5a:ea:a9:a9:b4:76:
                    50:41:98:62:ce:3d:f6:11:8e:e9:51:f7:53:b3:6a:
                    90:0f:76:04:31:b2:3b:4f:b5:d9:20:8a:b6:1c:99:
                    25:af:b6:de:0d:21:3a:7a:9e:28:e6:b7:82:f0:72:
                    4b:01:d7:a3:b3:08:6e:fb:92:2f:e8:76:da:83:5b:
                    ff:b7:ac:26:7d:8e:04:1e:87:7a:76:d0:5f:5f:55:
                    3c:27:d8:df:94:25:72:e2:c7:49:0e:c0:32:bc:3d:
                    ef:82:1d:ec:49:16:92:16:c8:70:43:56:8e:55:0a:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:40:D4:3F:09:B1:4E:1A:D7:A3:FB:79:80:00:DC:C8:C0:03:7E:F9
            X509v3 Authority Key Identifier:
                keyid:43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/436AC15E57989C85E66C586C30E7C23263E417D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3232203d3e20323637393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:68:b4:83:0b:e6:5b:b7:9b:cd:c8:8f:f6:21:91:86:05:
         02:cc:b0:50:2e:a0:8e:46:d0:1f:62:91:fd:db:42:7a:d9:4b:
         53:70:fe:7f:c6:16:3a:61:3b:f3:24:b6:2c:67:80:4d:5d:23:
         c0:c9:91:66:65:7c:fc:bf:b0:23:7e:4e:28:9a:b6:94:0c:c3:
         40:0c:06:86:b2:76:00:d5:bc:f0:f6:36:c3:0b:a9:40:ff:f1:
         9c:d3:b9:70:06:5a:54:81:0f:6e:94:1d:cb:3f:30:e0:72:1b:
         e8:08:9f:db:77:b3:d0:7f:54:e9:df:d1:43:1d:1b:29:69:5c:
         a5:be:1f:c5:8f:98:df:38:1c:f9:67:03:a5:32:99:e5:34:e7:
         48:65:14:b4:da:bb:93:f5:db:6f:b7:e0:26:af:49:c5:07:b7:
         35:a5:f5:b8:a1:00:61:68:ac:d5:3b:e8:49:48:5a:16:ff:5d:
         8f:4e:49:67:fb:8e:07:1f:6e:f6:38:0e:52:2b:80:f6:e0:c3:
         22:b8:e2:33:a4:bb:2b:c5:65:df:7c:79:d8:e1:fa:64:be:91:
         bb:68:fc:e8:1b:9f:ad:88:88:bf:8d:b2:40:bd:f0:f6:9d:9c:
         e3:21:d8:97:75:79:d3:58:01:2c:2c:bf:0b:47:1a:79:4d:4a:
         92:f4:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org