Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
File:                     34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (raw, json)
Hash identifier:          CLMvI/uJ+NWhYXAEyRIj4NuxxPv8/ydQCxwvdT4oZcI=
Subject key identifier:   A3:CC:DC:D8:EA:0F:5E:B9:EA:68:2D:C1:46:28:B0:89:3A:FE:72:68
Certificate issuer:       /CN=320B17743411E964D3D2736A49519C36D4C37931
Certificate serial:       0DC46453A9919CCF9543220BADC45A8FC7E61ED5
Authority key identifier: 32:0B:17:74:34:11:E9:64:D3:D2:73:6A:49:51:9C:36:D4:C3:79:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320B17743411E964D3D2736A49519C36D4C37931.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
Signing time:             Wed 24 Jan 2024 15:01:01 +0000
ROA not before:           Wed 24 Jan 2024 14:56:01 +0000
ROA not after:            Wed 22 Jan 2025 15:01:01 +0000
asID:                     268628
IP address blocks:        45.164.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c4:64:53:a9:91:9c:cf:95:43:22:0b:ad:c4:5a:8f:c7:e6:1e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320B17743411E964D3D2736A49519C36D4C37931
        Validity
            Not Before: Jan 24 14:56:01 2024 GMT
            Not After : Jan 22 15:01:01 2025 GMT
        Subject: CN=A3CCDCD8EA0F5EB9EA682DC14628B0893AFE7268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:79:18:17:dd:ce:f5:7a:ee:b8:73:42:13:
                    23:c1:9c:fd:43:e4:72:4f:63:53:cb:16:ce:ea:e4:
                    2c:6c:9a:5a:df:1a:ab:a6:2f:35:81:e9:a6:0f:ff:
                    d6:ee:bb:e2:90:53:d1:bf:f0:af:62:1e:bd:c3:ad:
                    d8:2b:58:9d:8f:22:e4:73:5d:d9:e0:2c:12:cc:63:
                    59:d3:7b:8a:a5:ac:1e:cf:c8:f0:0d:7e:7d:56:a9:
                    6b:e3:13:a8:c7:a0:ec:77:51:ea:e1:34:a5:68:47:
                    c0:e6:2b:08:11:25:21:0c:30:f2:1b:e2:21:dc:bb:
                    cf:e9:c5:47:6d:04:df:5d:48:74:0d:37:0d:8d:24:
                    59:82:f6:28:82:1f:6c:16:b3:36:16:81:22:ea:d2:
                    97:b7:6d:09:3c:1c:5f:47:63:39:d2:31:63:81:4e:
                    5d:b2:b9:d3:2c:57:0c:0b:28:60:d0:d5:f5:60:13:
                    dc:f9:8d:c2:68:fe:fb:72:e7:6e:c6:ab:7f:81:73:
                    bb:a4:ef:3b:23:33:72:5a:a7:49:a2:a5:76:88:ef:
                    c3:9a:ea:75:49:40:3a:ea:cc:92:d4:27:2d:d4:01:
                    30:39:3b:35:5d:dc:6e:d2:b6:b4:ea:df:04:68:55:
                    6f:0a:04:db:07:31:3c:5c:ba:47:9e:60:a6:79:d2:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CC:DC:D8:EA:0F:5E:B9:EA:68:2D:C1:46:28:B0:89:3A:FE:72:68
            X509v3 Authority Key Identifier:
                keyid:32:0B:17:74:34:11:E9:64:D3:D2:73:6A:49:51:9C:36:D4:C3:79:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/320B17743411E964D3D2736A49519C36D4C37931.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320B17743411E964D3D2736A49519C36D4C37931.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:13:8c:88:da:42:19:ac:ce:9a:65:b0:8d:cf:ec:fc:ed:
         e7:97:97:6f:7e:3c:b4:94:b4:86:21:66:f4:1a:0a:bb:ab:0c:
         f6:0c:25:0c:ac:f3:eb:c3:57:4f:29:b3:5c:6e:c2:bb:c3:68:
         a8:f6:6c:c2:c2:db:b5:1a:cc:06:26:7a:21:c6:d0:5d:81:f7:
         12:09:9b:bd:11:45:4c:62:b8:81:2e:bd:ba:5e:6e:82:a5:fb:
         64:d3:09:82:cc:08:c0:80:89:24:b8:c8:cf:af:f1:f8:00:87:
         fd:03:8b:f4:5d:fd:3d:69:75:9e:1c:b3:0f:ff:90:d6:d7:4e:
         fa:e6:80:52:09:43:a6:eb:17:4f:cd:32:c5:ef:e5:82:a2:22:
         60:d8:8c:70:fb:77:67:83:55:d3:0d:bc:c8:37:4c:ae:e2:a9:
         98:91:c8:bf:2a:1c:2e:b0:26:eb:8f:9d:4f:95:63:6c:59:87:
         5a:c9:16:9f:0e:00:8d:32:ee:bf:72:41:94:a9:ee:c2:16:15:
         e0:2c:87:fd:53:cd:31:fc:22:9e:4f:59:2f:76:2f:47:1f:62:
         34:7b:98:5c:07:26:11:c1:73:11:e9:c6:d6:e5:c8:5c:d7:a9:
         4e:a1:54:bc:72:f9:c2:19:e2:60:b2:b9:9a:3a:53:74:69:30:
         1a:14:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org