Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32332d3233203d3e20323636393834.roa
File:                     34352e3232362e37362e302f32332d3233203d3e20323636393834.roa (raw, json)
Hash identifier:          U5/NM45McHBExW4LcWRRUZdbV020JbqnKETRwcvX5E4=
Subject key identifier:   41:AF:B8:5E:FF:8A:17:1B:07:BD:51:68:CA:F8:EA:1A:36:99:91:8A
Certificate issuer:       /CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
Certificate serial:       41166170DDC0B58E12AF7A462B2A15DA5D33B6F3
Authority key identifier: A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32332d3233203d3e20323636393834.roa
Signing time:             Mon 19 Dec 2022 17:52:32 +0000
ROA not before:           Mon 19 Dec 2022 17:47:32 +0000
ROA not after:            Mon 18 Dec 2023 17:52:32 +0000
asID:                     266984
IP address blocks:        45.226.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:16:61:70:dd:c0:b5:8e:12:af:7a:46:2b:2a:15:da:5d:33:b6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
        Validity
            Not Before: Dec 19 17:47:32 2022 GMT
            Not After : Dec 18 17:52:32 2023 GMT
        Subject: CN=41AFB85EFF8A171B07BD5168CAF8EA1A3699918A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:85:c7:5a:36:46:8e:1f:eb:75:8f:5b:55:
                    3f:e7:c0:86:b1:30:54:dd:be:20:c0:4c:60:18:0c:
                    78:d1:bf:b6:da:3e:fa:6b:a1:00:a2:6c:0b:1f:5b:
                    ed:eb:bc:2e:19:f2:ad:c4:3f:33:83:7e:5b:21:3d:
                    d4:5f:d1:58:6a:56:8d:ca:1a:08:bf:bb:3d:f6:f2:
                    f6:87:e7:d7:b1:5d:83:08:c5:bf:52:8e:bb:69:94:
                    a6:97:18:ac:a5:4a:f0:23:0d:b3:bd:1d:91:6d:02:
                    a9:96:a2:2a:e8:91:e1:39:8d:94:f9:47:f4:14:f5:
                    0d:ab:eb:85:f9:f2:14:61:25:60:86:ad:b4:0f:43:
                    94:8e:aa:fb:06:b4:b6:f4:d3:ba:8c:ff:5c:16:e3:
                    b8:18:49:67:75:7c:5e:14:cb:7f:90:7c:cd:d9:6b:
                    60:4e:a4:26:7c:f4:c9:bc:41:1d:bf:3a:e4:b4:4b:
                    7c:0f:b2:70:89:07:5e:0d:6f:7e:16:d9:0f:48:29:
                    f6:e9:2f:fa:7f:78:32:b9:07:e7:6d:40:eb:4e:b0:
                    cb:92:e2:21:b9:dd:ce:0f:45:e8:a8:0e:57:3b:37:
                    cf:50:75:5f:b9:90:e3:b6:25:c6:b9:a6:70:1e:c7:
                    fd:e1:5e:6d:89:76:41:aa:38:61:a7:5b:95:bb:ea:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AF:B8:5E:FF:8A:17:1B:07:BD:51:68:CA:F8:EA:1A:36:99:91:8A
            X509v3 Authority Key Identifier:
                keyid:A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37362e302f32332d3233203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:71:96:51:f3:63:12:15:32:c8:66:40:90:b7:1d:15:95:
         57:b0:b2:6e:1a:9a:45:0d:ff:e2:0f:38:b6:33:e2:15:ac:66:
         a3:be:24:3a:1e:df:a2:9d:71:e4:9d:6d:2d:0c:44:ac:a3:b1:
         9d:b4:2c:6c:52:94:d7:91:c9:82:ba:32:e9:2f:28:e9:b9:cb:
         12:dd:7f:6f:9b:e3:5a:8a:a7:4e:ba:4c:e2:b9:ea:8c:35:94:
         38:08:ce:de:21:16:2e:01:9e:f0:96:b7:5c:b3:47:a7:c6:da:
         be:eb:68:9a:c3:8a:e2:81:bc:1e:07:ad:7b:63:4c:18:54:1e:
         43:1d:23:2a:77:52:62:cb:b4:74:1c:92:0e:88:28:65:97:e5:
         2e:28:b3:03:b1:e6:4b:fa:6e:27:c2:06:3f:84:34:61:af:b6:
         76:96:78:4b:2a:44:c0:72:a8:42:ad:6f:7c:6e:43:93:ce:54:
         59:f9:05:db:f5:0c:88:58:bd:69:a3:b0:be:b7:26:8b:ee:3e:
         8d:a6:72:b9:43:51:f4:5d:93:68:44:a3:82:b8:8d:e1:cd:24:
         f6:85:e7:c6:7f:ed:d9:ec:12:16:12:01:6a:88:cb:f7:a6:9c:
         86:3c:5c:97:f9:98:d2:67:bf:6b:1d:3d:da:d3:1d:9c:18:75:
         12:2b:d5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org