Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32332d3233203d3e20323638363238.roa
File:                     34352e3136342e3138382e302f32332d3233203d3e20323638363238.roa (raw, json)
Hash identifier:          mMATIafwX5IEVIxCPHP+rWaC5aqlC/mP02VPOw360Qg=
Subject key identifier:   B3:C2:11:72:27:8A:0A:20:8B:26:40:C0:5A:5A:7D:1B:8F:B0:65:8A
Certificate issuer:       /CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
Certificate serial:       0A52AD49FF385599053F4F3451D42CD683A37D11
Authority key identifier: A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32332d3233203d3e20323638363238.roa
Signing time:             Tue 14 Nov 2023 09:22:08 +0000
ROA not before:           Tue 14 Nov 2023 09:17:08 +0000
ROA not after:            Tue 12 Nov 2024 09:22:08 +0000
asID:                     268628
IP address blocks:        45.164.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:52:ad:49:ff:38:55:99:05:3f:4f:34:51:d4:2c:d6:83:a3:7d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
        Validity
            Not Before: Nov 14 09:17:08 2023 GMT
            Not After : Nov 12 09:22:08 2024 GMT
        Subject: CN=B3C21172278A0A208B2640C05A5A7D1B8FB0658A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:b1:d0:a1:72:bb:42:04:c3:d2:ff:8c:58:
                    19:34:c0:0f:60:e3:e9:96:7e:06:2f:5f:63:6e:cc:
                    26:4f:18:50:3b:43:b7:77:99:87:78:e1:f4:4f:80:
                    43:10:30:ed:76:11:51:50:b5:f0:15:d8:d6:d5:40:
                    46:31:e3:8f:c1:44:e1:a0:c3:48:fa:37:38:e2:b9:
                    62:97:11:86:94:c8:df:5b:b8:82:d1:f4:6a:7a:6f:
                    cf:ee:63:f6:2c:ce:2f:dd:c5:b9:29:4a:45:5f:1c:
                    f4:8a:a6:1b:4f:b8:03:32:6c:33:2e:cd:dc:b0:65:
                    6a:f3:aa:21:8c:93:c2:ce:0d:a4:34:30:c0:6a:e3:
                    df:d3:11:d1:68:a8:99:6c:60:b4:dd:80:c6:c0:e9:
                    bf:29:a5:41:cf:d6:90:30:7b:6d:ab:2c:68:fa:62:
                    03:e6:3f:89:c9:91:f3:a1:43:40:bc:16:fd:50:81:
                    15:f9:b9:3a:24:e3:8e:09:23:63:ef:5d:6c:3e:59:
                    ab:50:69:90:13:e1:92:39:49:7e:10:99:d7:24:fc:
                    be:1c:18:b1:c0:97:3f:61:d3:2c:c2:fd:0d:b2:6b:
                    52:c3:53:90:32:9e:42:82:71:17:ba:31:55:92:40:
                    d1:df:fb:ff:a5:c8:6a:8e:0f:e3:a1:43:b5:67:c4:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:11:72:27:8A:0A:20:8B:26:40:C0:5A:5A:7D:1B:8F:B0:65:8A
            X509v3 Authority Key Identifier:
                keyid:A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32332d3233203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:c1:d7:a7:e6:33:05:55:0a:17:9f:1a:10:fd:6a:f8:58:
         6c:3c:87:2b:11:34:3d:2b:d3:a7:6a:3e:a5:36:84:40:2e:ef:
         28:93:dd:65:cc:77:30:7b:5f:1c:94:8c:94:76:a1:65:27:53:
         ad:a9:31:fc:67:d8:b7:5f:fd:a7:da:2a:cf:7f:c0:17:ae:32:
         cd:f9:30:86:65:70:69:a2:15:d0:41:90:9e:fe:8c:c6:90:6e:
         0a:27:d5:e3:b1:92:59:97:57:be:e1:7c:2f:d6:22:6f:78:47:
         57:82:7b:c2:5f:46:6b:32:e7:46:f7:89:84:4f:a8:32:61:47:
         7a:e8:3a:8b:35:e7:4e:b3:4d:c2:cc:f1:93:ee:ce:f6:7e:5c:
         50:38:80:11:f3:cc:03:ad:47:4c:11:15:05:4a:1f:e7:dc:44:
         b3:de:55:65:ed:e6:c6:de:e3:61:73:39:12:61:1c:41:f0:6b:
         0d:e1:d1:92:bd:83:f4:01:cb:0c:d9:2c:53:91:4d:a8:2b:76:
         72:32:4a:54:23:62:d4:22:22:8b:21:3e:7b:98:b7:cd:63:2a:
         20:75:54:43:b4:c0:4f:f8:0f:6f:57:d6:44:d5:f9:30:89:da:
         fb:c1:28:27:7b:8b:c3:68:3e:95:a1:e7:9e:9a:aa:4f:a8:53:
         06:aa:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org