Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32342d3234203d3e20323637393537.roa
File:                     34352e3136362e3132382e302f32342d3234203d3e20323637393537.roa (raw, json)
Hash identifier:          cECvmedwZmcLwzbbjP9JWHESsO1pCxpkwfMkgoWXnzU=
Subject key identifier:   94:08:F9:B4:2A:20:87:B5:87:FC:F5:95:A9:07:21:7B:CE:4E:1D:73
Certificate issuer:       /CN=436AC15E57989C85E66C586C30E7C23263E417D9
Certificate serial:       1423DA8A2787D5F7878244B77A085B5366925CD0
Authority key identifier: 43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32342d3234203d3e20323637393537.roa
Signing time:             Fri 02 Jun 2023 19:37:31 +0000
ROA not before:           Fri 02 Jun 2023 19:32:31 +0000
ROA not after:            Fri 31 May 2024 19:37:31 +0000
asID:                     267957
IP address blocks:        45.166.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:23:da:8a:27:87:d5:f7:87:82:44:b7:7a:08:5b:53:66:92:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436AC15E57989C85E66C586C30E7C23263E417D9
        Validity
            Not Before: Jun  2 19:32:31 2023 GMT
            Not After : May 31 19:37:31 2024 GMT
        Subject: CN=9408F9B42A2087B587FCF595A907217BCE4E1D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:11:3f:96:2a:56:06:85:9e:c5:fd:14:16:
                    e3:35:83:5d:d4:0e:db:3f:0c:d6:13:e3:73:fc:3c:
                    83:6a:92:63:89:c7:ea:2d:fb:89:86:5e:82:77:56:
                    5b:7c:be:6e:d3:0e:9c:1f:06:72:0e:5b:8b:f0:e4:
                    8b:f6:d1:cc:93:89:6c:6b:5f:f2:42:4c:c5:2f:9c:
                    95:b5:d2:eb:26:eb:f6:d1:ad:b4:aa:dd:bf:d1:cd:
                    77:f4:ca:1a:b7:37:59:ce:0a:21:ba:6b:f2:00:99:
                    7e:38:68:32:d6:32:ec:f4:43:eb:21:06:77:73:8c:
                    1f:65:1b:22:f0:93:f2:a8:7e:a2:b2:f8:ef:d6:19:
                    26:7c:86:fa:2a:16:7c:37:fd:da:34:81:43:63:bf:
                    35:bf:bd:d6:52:5f:29:b1:0c:8d:e3:65:4d:fd:6f:
                    a8:cc:bd:1e:ca:4d:25:05:f6:6b:38:e9:fc:3e:b5:
                    de:57:d2:33:8a:e9:77:07:86:fc:c0:2f:34:52:c7:
                    ee:ca:07:ef:4f:41:71:ff:f9:67:a9:cf:01:c3:1e:
                    d6:e1:c1:92:69:f7:de:17:78:ad:5e:1b:af:31:e1:
                    a0:13:2c:fd:96:50:33:b0:43:e9:87:5d:3d:a1:30:
                    84:01:8b:b9:df:f2:2d:17:bc:1e:51:dd:4d:50:db:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:08:F9:B4:2A:20:87:B5:87:FC:F5:95:A9:07:21:7B:CE:4E:1D:73
            X509v3 Authority Key Identifier:
                keyid:43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/436AC15E57989C85E66C586C30E7C23263E417D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132382e302f32342d3234203d3e20323637393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:04:66:01:99:c7:c1:89:d5:2e:67:7a:ff:6c:de:58:35:bb:
         0a:e3:13:93:d4:4f:1c:cd:d0:2c:ba:cb:7b:3f:26:ca:d5:f3:
         9a:70:d3:f0:2d:79:92:05:74:37:bd:98:f7:ae:4b:ec:e4:9f:
         7f:f1:d3:ca:57:a4:4e:9a:89:2a:73:56:b1:42:a2:6c:87:ff:
         36:95:9d:bb:b0:b8:0b:3c:29:7f:b8:78:1d:57:81:b7:bf:63:
         a1:42:b2:07:16:f7:d1:a2:1d:ed:a3:c3:6a:2b:c8:f1:17:f6:
         da:0d:46:a2:48:01:b0:56:7d:87:78:38:81:a6:e7:4c:e0:2e:
         01:e5:12:85:8a:fa:76:0e:05:09:05:41:9c:4c:24:07:51:62:
         aa:8c:95:4b:9a:d3:3d:0a:8a:3d:d9:fa:0f:9c:dd:42:13:dd:
         26:50:0b:18:20:e9:99:44:ef:d0:e0:18:56:d7:2b:db:29:c1:
         d9:a7:a0:b7:4a:75:e6:d0:cb:e5:da:e2:2a:8d:a0:07:19:7b:
         1d:bf:82:83:6b:43:86:2b:bc:52:4f:bb:1b:49:cc:04:07:bc:
         e4:a6:04:41:c7:00:40:c4:ab:bc:7c:fc:18:9b:74:82:67:9c:
         6b:5b:51:c2:0a:52:9f:75:6b:5f:7c:4d:0d:2d:bb:48:d5:d6:
         b5:46:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org