Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3133302e302f32342d3234203d3e20323637393537.roa
File:                     34352e3136362e3133302e302f32342d3234203d3e20323637393537.roa (raw, json)
Hash identifier:          UG11pz2t4SfTfK0jiPagKxQMvlb5sc1DyRkt3Wcnxxg=
Subject key identifier:   AB:F4:D3:06:3E:B7:62:1C:5F:3C:AC:09:3B:02:7D:EF:07:5C:09:57
Certificate issuer:       /CN=436AC15E57989C85E66C586C30E7C23263E417D9
Certificate serial:       5F83873687523ACD6BC13C0A22D8B51427C1A65F
Authority key identifier: 43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3133302e302f32342d3234203d3e20323637393537.roa
Signing time:             Fri 02 Jun 2023 19:39:30 +0000
ROA not before:           Fri 02 Jun 2023 19:34:30 +0000
ROA not after:            Fri 31 May 2024 19:39:30 +0000
asID:                     267957
IP address blocks:        45.166.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:83:87:36:87:52:3a:cd:6b:c1:3c:0a:22:d8:b5:14:27:c1:a6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436AC15E57989C85E66C586C30E7C23263E417D9
        Validity
            Not Before: Jun  2 19:34:30 2023 GMT
            Not After : May 31 19:39:30 2024 GMT
        Subject: CN=ABF4D3063EB7621C5F3CAC093B027DEF075C0957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:88:85:e2:e8:f4:dc:e5:28:46:b4:8b:ad:e0:
                    01:66:d8:02:f3:70:34:da:a7:f4:81:40:81:f6:2a:
                    c1:38:c6:c2:cb:6b:af:75:cd:04:c1:aa:2e:ac:9d:
                    cb:da:63:7c:9f:83:f3:2e:59:4c:ca:47:fd:cc:10:
                    ca:67:47:c3:3a:bb:2b:9c:12:d4:dd:85:11:e1:18:
                    89:72:04:2f:f1:ff:2a:67:a8:44:d1:d5:05:1c:2d:
                    ca:1e:77:97:47:82:53:8d:72:da:9c:29:51:08:04:
                    7a:38:e0:73:e0:ee:f7:ac:02:92:c5:56:05:6b:8a:
                    b0:d3:c7:57:99:54:17:2f:d4:bb:1c:6b:e8:fd:87:
                    39:13:18:72:8c:00:74:5c:3f:0b:d3:97:2f:ed:d7:
                    b6:f8:44:82:bc:8d:2d:29:6b:89:4f:c4:4f:4c:ec:
                    f0:b1:a3:1e:02:fe:be:aa:0d:74:e0:22:7d:52:57:
                    fd:c8:8d:19:af:1e:e2:49:43:2a:fe:e5:01:04:bf:
                    4f:48:6a:32:92:8a:c6:d1:98:0c:98:2a:65:c4:e5:
                    e4:eb:81:c0:4b:1b:b9:f5:a8:7c:62:3e:3f:94:89:
                    c8:ec:40:bd:b7:70:ff:c7:80:24:50:b6:11:6b:e2:
                    18:e0:3a:8d:5a:b2:f2:97:de:35:77:d6:6a:09:d9:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F4:D3:06:3E:B7:62:1C:5F:3C:AC:09:3B:02:7D:EF:07:5C:09:57
            X509v3 Authority Key Identifier:
                keyid:43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/436AC15E57989C85E66C586C30E7C23263E417D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/34352e3136362e3133302e302f32342d3234203d3e20323637393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:c4:23:dc:78:65:78:ab:f0:ad:2d:54:0e:05:8b:ab:70:
         4e:81:5d:ce:2f:20:79:b8:b7:95:68:a1:0b:57:09:1e:56:19:
         b8:84:36:85:4c:54:51:6f:5b:2a:d4:40:82:45:13:46:1d:8e:
         08:d1:4b:9a:04:ce:a6:26:53:0b:a6:96:78:24:ae:93:b5:81:
         ef:39:92:f4:a5:0b:c7:1c:96:1a:84:b4:63:08:b7:0c:58:99:
         3e:e0:35:06:49:41:09:fe:f6:25:20:79:2d:4c:ea:3d:b2:65:
         24:48:ef:96:85:8b:db:15:e0:9a:e2:eb:1e:7d:c6:f0:b8:7c:
         2a:4a:01:6c:86:6b:d6:8c:f5:71:27:82:77:dd:db:99:f0:f4:
         9c:53:bc:12:94:1c:14:14:fa:fd:2b:b6:e6:f5:73:98:d3:b3:
         f2:bb:09:09:39:30:4e:95:0f:f0:f9:ac:e2:f2:87:d3:fa:f8:
         b4:0d:65:54:f9:2a:e6:aa:70:3e:54:a2:30:d6:38:8c:1b:18:
         d9:27:b5:d7:40:ed:b1:1c:50:86:9b:86:c9:44:8e:5d:df:cf:
         3d:18:f7:56:44:46:24:4d:c6:23:b9:09:30:e1:2d:cf:24:e3:
         eb:f4:59:2b:44:ab:6a:ea:e1:27:45:be:2a:a3:19:36:77:14:
         1f:df:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:07 2025 by rpki-client