Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12BmCufNcKH4uRUH9CeSn1ed6pmBoizQa9tpCzgdVPR6/0/34352e3136302e38342e302f32322d3234203d3e20323638343034.roa
File:                     34352e3136302e38342e302f32322d3234203d3e20323638343034.roa (raw, json)
Hash identifier:          Sf/4O6e/6pgrM4Whj5O78Z92b19KP1puERx1X7paO4I=
Subject key identifier:   12:6E:14:5B:5D:83:C8:B2:26:48:6F:EF:1D:6C:17:88:91:0D:3F:FA
Certificate issuer:       /CN=FFF8DD08B3EB55667363E91A9D201548D74DBC5B
Certificate serial:       69DFE299A3AC848E0A0739E8EB9361DCAB3EC003
Authority key identifier: FF:F8:DD:08:B3:EB:55:66:73:63:E9:1A:9D:20:15:48:D7:4D:BC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF8DD08B3EB55667363E91A9D201548D74DBC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12BmCufNcKH4uRUH9CeSn1ed6pmBoizQa9tpCzgdVPR6/0/34352e3136302e38342e302f32322d3234203d3e20323638343034.roa
Signing time:             Mon 19 Dec 2022 20:39:19 +0000
ROA not before:           Mon 19 Dec 2022 20:34:19 +0000
ROA not after:            Mon 18 Dec 2023 20:39:19 +0000
asID:                     268404
IP address blocks:        45.160.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:df:e2:99:a3:ac:84:8e:0a:07:39:e8:eb:93:61:dc:ab:3e:c0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF8DD08B3EB55667363E91A9D201548D74DBC5B
        Validity
            Not Before: Dec 19 20:34:19 2022 GMT
            Not After : Dec 18 20:39:19 2023 GMT
        Subject: CN=126E145B5D83C8B226486FEF1D6C1788910D3FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:15:53:de:4a:e7:e4:b9:b9:48:1c:1e:97:
                    d0:5b:cc:39:cf:5e:f6:aa:8d:54:fe:fc:65:35:a6:
                    39:ab:27:16:55:63:4c:41:2a:66:a0:5b:e6:d8:4c:
                    ec:ad:26:63:20:ae:f5:e2:c2:46:83:d5:db:4e:0c:
                    43:a0:17:e4:2d:47:a5:3e:c3:46:9f:90:55:59:25:
                    6b:c2:79:de:c5:28:5d:f2:46:0c:eb:c1:09:29:ee:
                    d3:55:e8:c7:b2:65:d5:5e:52:44:ac:cf:38:d1:f1:
                    60:4d:5d:b6:b1:c9:5e:08:97:a1:19:b4:2e:7c:8d:
                    b1:71:56:47:26:b2:16:38:fa:e9:d6:4b:55:6e:cf:
                    a7:b7:be:41:84:82:3a:ad:99:96:f1:7f:a9:18:e9:
                    76:61:0c:b5:f7:6a:c6:3a:9c:2d:de:bf:59:67:c2:
                    88:2e:a6:63:53:8a:e2:47:34:8e:06:3e:71:b0:46:
                    91:d0:39:74:c8:a9:97:ed:89:08:54:ae:d9:4f:47:
                    ca:4f:0c:c5:58:ae:24:9e:dc:1f:1a:3a:4c:57:b0:
                    0f:c1:b5:21:c7:11:90:4c:47:d9:e6:0a:a5:55:48:
                    ca:64:dd:32:43:d6:a4:63:0e:75:dd:bd:53:e3:d6:
                    86:ed:01:f9:e4:44:92:2c:bc:e4:fa:e2:ff:df:b6:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6E:14:5B:5D:83:C8:B2:26:48:6F:EF:1D:6C:17:88:91:0D:3F:FA
            X509v3 Authority Key Identifier:
                keyid:FF:F8:DD:08:B3:EB:55:66:73:63:E9:1A:9D:20:15:48:D7:4D:BC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12BmCufNcKH4uRUH9CeSn1ed6pmBoizQa9tpCzgdVPR6/0/FFF8DD08B3EB55667363E91A9D201548D74DBC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF8DD08B3EB55667363E91A9D201548D74DBC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12BmCufNcKH4uRUH9CeSn1ed6pmBoizQa9tpCzgdVPR6/0/34352e3136302e38342e302f32322d3234203d3e20323638343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:3d:60:17:bf:4a:a5:e1:35:c2:8e:9d:69:94:8c:91:8f:
         a8:42:53:c5:17:20:a3:14:4d:53:7f:ce:81:aa:f9:1d:74:1c:
         a6:bc:c4:ba:37:1f:11:0f:f4:3e:7a:46:5c:e7:0e:65:81:f9:
         2d:96:7d:80:74:60:55:02:bd:a2:03:cb:25:5d:34:9d:b3:ab:
         1b:c6:9a:76:56:1a:67:fe:fc:19:62:23:34:47:60:1d:49:d5:
         87:ce:de:28:e5:6b:42:3e:90:b9:a3:09:0d:d4:05:98:fe:3c:
         8d:f6:fb:9d:03:be:dc:6d:e2:fe:68:3e:fc:94:7d:d1:69:c3:
         69:3d:10:93:5e:56:b2:2b:a1:8e:bd:b3:ed:4f:14:cd:76:77:
         0b:8f:f8:5f:6b:be:cc:08:82:fe:2c:f9:bb:c6:b1:fd:29:9b:
         ef:8e:79:ff:7d:93:7f:f8:d7:05:bd:12:a9:86:ed:cc:22:0e:
         a2:a1:af:ae:24:ce:86:62:ad:31:71:b8:c4:f9:b7:fd:1f:2a:
         3c:d4:75:30:95:95:99:f4:39:d8:14:01:1f:48:9c:02:8b:ea:
         d2:eb:22:03:ca:a1:dc:6e:aa:5c:44:08:bf:4d:59:54:bf:5d:
         1f:cb:29:8e:24:de:e8:5c:7e:d6:69:ac:2b:4c:bd:ae:9e:21:
         f7:38:aa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org