Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132392e302f32342d3234203d3e20323637393537.roa
File:                     34352e3136362e3132392e302f32342d3234203d3e20323637393537.roa (raw, json)
Hash identifier:          UYhioZM6XdZ+g8vCt4xKKqOSX8nY4G6DR1X9YPiqW4Q=
Subject key identifier:   A0:E3:AB:CD:A0:C4:A9:AA:6E:07:5D:90:78:9A:DA:06:BF:2E:45:6F
Certificate issuer:       /CN=436AC15E57989C85E66C586C30E7C23263E417D9
Certificate serial:       3A5CEAF29397C1AD8122AE64B0849C523A19F1FA
Authority key identifier: 43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132392e302f32342d3234203d3e20323637393537.roa
Signing time:             Fri 02 Jun 2023 19:39:26 +0000
ROA not before:           Fri 02 Jun 2023 19:34:26 +0000
ROA not after:            Fri 31 May 2024 19:39:26 +0000
asID:                     267957
IP address blocks:        45.166.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5c:ea:f2:93:97:c1:ad:81:22:ae:64:b0:84:9c:52:3a:19:f1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436AC15E57989C85E66C586C30E7C23263E417D9
        Validity
            Not Before: Jun  2 19:34:26 2023 GMT
            Not After : May 31 19:39:26 2024 GMT
        Subject: CN=A0E3ABCDA0C4A9AA6E075D90789ADA06BF2E456F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:cb:ff:73:9d:9c:74:df:e6:43:19:5b:ee:
                    45:ae:b5:ee:b9:e3:c2:65:c3:9d:7b:08:ed:9d:85:
                    e9:4d:7a:0f:3f:3a:26:1d:ad:06:9e:f7:33:26:2e:
                    4b:59:a5:2c:a1:b3:fe:d1:e9:d5:13:ff:a6:91:03:
                    d4:d1:81:cd:86:55:b0:4f:73:8d:bc:88:e0:0f:71:
                    f9:da:df:49:75:5b:c4:e2:9f:1d:32:01:a0:98:c2:
                    1f:3d:c7:67:9f:84:fe:fc:59:38:6c:d8:09:e5:04:
                    4e:cb:4c:01:48:83:c2:8f:f8:75:fb:f8:cb:f3:6b:
                    d4:c3:6b:bb:85:78:d7:bf:89:78:3c:fb:91:10:2a:
                    00:24:48:73:fa:4f:29:3a:6d:20:00:a8:bd:03:96:
                    f0:44:d1:7b:a3:18:36:fc:4a:b9:41:7a:13:af:db:
                    d9:d0:39:aa:48:19:55:7b:46:58:dd:01:e6:66:e6:
                    02:d5:5d:72:db:24:5e:42:23:dd:d4:ab:ae:df:ca:
                    b7:fc:59:84:ba:49:a3:b6:81:89:ee:5c:90:0a:87:
                    33:69:1a:9e:34:8c:22:04:90:90:61:69:35:6d:16:
                    31:25:c3:d4:6b:1f:d1:c4:53:1b:b3:a7:5a:f0:d1:
                    00:a9:d3:4f:b0:4b:f0:2b:f7:48:4f:c3:9d:a3:58:
                    69:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E3:AB:CD:A0:C4:A9:AA:6E:07:5D:90:78:9A:DA:06:BF:2E:45:6F
            X509v3 Authority Key Identifier:
                keyid:43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/436AC15E57989C85E66C586C30E7C23263E417D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3132392e302f32342d3234203d3e20323637393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:2c:7b:27:19:e5:a9:60:92:da:d3:0f:6b:e1:cd:69:50:e1:
         a5:f0:d3:b6:f8:a5:24:11:16:71:a9:50:80:43:64:62:ca:4e:
         da:27:50:e4:50:e2:4f:f5:90:62:14:78:0a:20:8e:3d:14:d3:
         ca:c2:1e:e1:4d:8d:2f:80:66:40:01:1a:04:45:3b:3e:b6:f6:
         52:d4:ab:72:c6:98:a7:e4:67:bd:ea:52:86:ab:e9:15:54:90:
         05:2d:50:2e:0d:d8:71:0e:14:3f:62:b4:08:43:54:8a:25:a1:
         8b:9d:8b:d0:9b:2c:0a:12:c4:28:1b:23:e3:07:93:0a:0d:6e:
         0e:4c:90:08:71:7f:92:3c:a1:db:36:d4:7b:3d:26:f2:6b:85:
         8e:89:a4:b5:61:3e:b5:31:e3:24:b2:ad:4d:86:48:37:c6:72:
         6d:8d:2d:d6:14:6a:c3:d4:72:8d:c0:da:a7:a9:79:00:e4:63:
         a5:d7:fa:ac:6a:04:73:b5:d2:ea:0d:9a:c9:c2:f2:37:5a:4c:
         37:58:a5:a9:51:04:77:9c:ee:31:e5:a9:23:47:ed:f6:8e:6a:
         64:ad:05:cc:9b:ce:4d:3e:21:e5:87:a9:13:74:20:61:a1:cf:
         f9:89:1f:e7:dd:6b:3a:cd:4d:fd:3c:c1:7e:67:26:fb:81:c1:
         38:e7:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org