Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3234203d3e20323637393537.roa
File:                     34352e3136362e3132382e302f32322d3234203d3e20323637393537.roa (raw, json)
Hash identifier:          SnNzv5Aj66zeJfuBAPqohsW9uwwJuQf3xBWFzumIIgA=
Subject key identifier:   D3:9A:C3:D7:71:2F:39:15:55:A4:F1:0F:05:1F:1F:39:7B:26:92:09
Certificate issuer:       /CN=CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E
Certificate serial:       1D059FFA0B198495D6C768EAF55641ECCABFDAD1
Authority key identifier: CA:C3:ED:DC:9F:E5:F7:37:C6:74:E0:C5:1B:29:6F:B3:3C:1D:3D:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3234203d3e20323637393537.roa
Signing time:             Mon 03 Jul 2023 02:35:42 +0000
ROA not before:           Mon 03 Jul 2023 02:30:42 +0000
ROA not after:            Mon 01 Jul 2024 02:35:42 +0000
asID:                     267957
IP address blocks:        45.166.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:05:9f:fa:0b:19:84:95:d6:c7:68:ea:f5:56:41:ec:ca:bf:da:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E
        Validity
            Not Before: Jul  3 02:30:42 2023 GMT
            Not After : Jul  1 02:35:42 2024 GMT
        Subject: CN=D39AC3D7712F391555A4F10F051F1F397B269209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:29:6f:d8:c6:cc:29:47:b1:cc:88:8c:1a:
                    1c:12:a0:65:5a:28:65:44:9b:c3:22:1c:da:10:4b:
                    d7:c6:30:2a:f7:d1:d2:33:85:73:eb:1b:d3:81:67:
                    f4:20:80:01:90:14:e8:c2:84:00:5b:1e:6a:46:67:
                    29:42:60:7e:48:fe:67:94:e8:d7:6b:c5:68:18:98:
                    dd:28:6e:4d:0c:86:c9:1c:1f:25:85:6a:ca:10:5f:
                    c2:9a:63:35:d9:07:e1:5f:ca:dd:e2:63:a5:b3:68:
                    15:17:a9:6f:1f:0f:86:a7:5b:35:e9:9f:8d:b4:7e:
                    ab:60:f0:ad:1f:30:dc:21:da:59:f8:18:b1:5c:1a:
                    a6:75:ea:e3:ac:58:05:34:d0:ca:a8:7c:ab:0d:a4:
                    3d:f8:bc:79:08:2d:e2:90:d7:ce:e6:63:f1:93:b6:
                    5f:34:86:22:2d:f5:91:51:d8:b7:46:db:83:e9:4e:
                    5e:0c:2d:61:21:4f:07:f3:f6:47:af:b1:86:27:21:
                    3a:d7:a6:c5:1a:4d:03:13:fe:f3:ee:db:ec:52:60:
                    09:d6:00:83:d0:42:9d:f9:03:53:0f:66:bd:af:64:
                    02:1e:cb:af:2a:e9:7f:30:f4:ed:ba:0e:93:69:f8:
                    43:45:ac:c8:e8:44:53:a9:5c:1b:8d:89:95:05:f4:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9A:C3:D7:71:2F:39:15:55:A4:F1:0F:05:1F:1F:39:7B:26:92:09
            X509v3 Authority Key Identifier:
                keyid:CA:C3:ED:DC:9F:E5:F7:37:C6:74:E0:C5:1B:29:6F:B3:3C:1D:3D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32322d3234203d3e20323637393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:2b:1b:b6:fb:a7:17:3d:2a:f2:b0:d9:8f:a1:21:58:24:ef:
         71:40:db:a3:f1:d3:08:bf:2e:0c:cd:c2:3e:23:d4:f9:ba:35:
         dc:8c:3b:39:de:97:12:8a:72:8b:46:96:01:b7:70:b9:3a:6d:
         fe:1b:c4:61:f8:51:5f:f2:ef:16:4f:76:6a:94:7a:41:59:f8:
         b5:26:9c:5f:7c:5e:69:bd:17:d3:bf:2d:af:65:b2:41:ee:12:
         8a:b2:24:68:c0:7a:89:4f:97:b2:05:fa:a0:72:4c:17:7e:98:
         ce:48:6f:ce:6e:25:8c:f3:98:e1:fc:69:44:e0:0a:40:b1:6f:
         0d:ff:43:f6:9d:06:18:50:29:0f:4f:6b:39:75:b6:bd:68:07:
         7a:10:c9:92:be:84:17:37:2f:87:ac:04:fd:2c:e4:63:a5:5d:
         6d:71:f5:8b:25:5f:9e:a5:91:8b:00:47:1f:0a:90:d4:80:3c:
         9b:56:46:18:cb:4b:c8:6e:af:d9:c3:bf:45:0c:9a:be:7e:11:
         5b:4a:d9:c1:a9:4d:82:77:37:53:98:0e:e9:f4:b1:41:57:1c:
         4e:76:63:22:b9:72:46:f4:c7:fe:33:f4:ce:19:60:2b:3a:25:
         96:71:5a:49:7e:51:55:e0:49:14:fa:e6:31:4d:56:4e:36:cb:
         3e:d6:54:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org