Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa
File:                     36372e3135392e3232342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          HzlQhzWIUnftTum0wrzfMOcjeCTaGz57tizOdua5qSE=
Subject key identifier:   87:8F:52:6E:A3:66:DA:2A:49:69:41:16:3C:82:DA:F6:AA:0D:A9:2B
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       223DA4879ED75B0ABF8ADBAACD600F5D0AF9CB52
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa
Signing time:             Wed 18 Oct 2023 22:01:50 +0000
ROA not before:           Wed 18 Oct 2023 21:56:50 +0000
ROA not after:            Wed 16 Oct 2024 22:01:50 +0000
asID:                     17222
IP address blocks:        67.159.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3d:a4:87:9e:d7:5b:0a:bf:8a:db:aa:cd:60:0f:5d:0a:f9:cb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Oct 18 21:56:50 2023 GMT
            Not After : Oct 16 22:01:50 2024 GMT
        Subject: CN=878F526EA366DA2A496941163C82DAF6AA0DA92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:22:f0:1f:c9:bd:73:ae:7e:10:c3:4c:f3:
                    2c:6a:ee:6a:51:33:22:eb:4c:ec:bb:51:2e:50:83:
                    66:8f:07:08:26:41:f4:8e:95:0f:69:ad:9c:23:e9:
                    f1:a4:dc:2f:df:7b:75:b0:25:1b:38:b2:d3:0f:35:
                    cc:34:94:30:d4:d4:f2:04:2c:3b:12:f3:0e:9d:74:
                    2e:a3:b4:f8:d1:35:43:17:ed:2f:5a:6d:cb:b5:96:
                    9e:34:12:65:78:5c:eb:83:24:69:a5:16:34:37:ed:
                    83:06:d3:89:b1:b5:0a:82:17:24:07:90:1b:1d:7d:
                    89:78:a8:d7:e1:74:0c:cf:8b:2b:c1:9f:e3:59:fc:
                    8c:f1:6d:2c:db:47:bb:bf:3c:2c:09:04:c7:67:60:
                    49:df:fe:e4:a4:a9:56:62:d4:f6:be:bf:68:86:83:
                    0a:b9:da:0d:93:77:32:79:2c:d6:05:b2:27:d6:32:
                    5e:98:bb:6b:a2:b9:99:43:4d:91:49:a0:6e:e0:a6:
                    01:45:ba:e2:51:fd:61:1f:e1:91:5c:0f:78:10:bf:
                    d1:b4:b1:04:b4:6c:51:2e:3a:dc:64:12:4a:35:8e:
                    39:cb:bc:80:25:e5:28:59:f0:44:fa:d3:bb:67:e7:
                    5d:1a:1b:d5:0e:51:cb:d8:85:be:c9:2f:06:cc:c8:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8F:52:6E:A3:66:DA:2A:49:69:41:16:3C:82:DA:F6:AA:0D:A9:2B
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b1:8d:b8:e9:fb:28:39:d6:bc:d6:74:ba:05:a5:f7:48:51:0f:
         2c:06:94:2e:b5:90:3c:b3:7d:35:cb:6a:a1:d5:7c:72:e2:7d:
         aa:55:54:23:6a:67:a0:93:8b:6c:74:ca:82:f7:ee:c4:03:26:
         b8:30:06:8a:32:22:b5:3a:92:5a:d5:dc:1c:8f:0e:10:cf:82:
         d6:a7:47:41:8b:ed:38:38:6b:ed:0d:61:30:cc:d5:5e:ed:9a:
         4b:85:4d:21:35:44:e3:37:6e:a2:a8:15:cb:23:6b:36:bc:47:
         e0:df:4c:be:04:33:ab:58:d1:ae:cc:36:06:5c:76:82:69:b6:
         da:04:12:a6:66:fd:ae:4c:41:4a:9e:81:4f:83:fd:c6:e7:f4:
         62:d7:c3:63:62:3d:b1:75:06:2f:63:5a:b8:3a:c1:ad:02:08:
         47:b4:57:da:48:57:1a:a9:1f:07:b3:d5:6c:6d:a5:5c:11:cb:
         c4:20:f6:ad:c2:43:ce:48:e1:af:b8:0f:28:aa:9c:42:1b:2e:
         5a:7f:1e:0b:05:ee:07:10:28:dd:1b:35:9a:f5:c2:b8:3d:03:
         3a:75:e6:5d:39:a6:4a:fe:21:48:73:7a:60:6d:ed:3a:1a:b8:
         42:57:60:cb:e2:28:c0:3e:e0:14:f2:f4:bf:d7:e9:af:33:75:
         e8:9d:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org