Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32342d3234203d3e20323638363238.roa
File:                     34352e3136342e3138382e302f32342d3234203d3e20323638363238.roa (raw, json)
Hash identifier:          aDMbPoeYJi7J5pAnrwxpmfpf9+4Y50KIPm2aQ+hZmAw=
Subject key identifier:   3C:5B:2B:3E:8F:BE:E9:3B:10:0E:74:E8:8C:6D:14:AC:CB:16:B0:D6
Certificate issuer:       /CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
Certificate serial:       5DAC08C6C6ADC8B32BAF730B2EF93F29B7B51013
Authority key identifier: A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32342d3234203d3e20323638363238.roa
Signing time:             Tue 14 Nov 2023 09:22:08 +0000
ROA not before:           Tue 14 Nov 2023 09:17:08 +0000
ROA not after:            Tue 12 Nov 2024 09:22:08 +0000
asID:                     268628
IP address blocks:        45.164.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ac:08:c6:c6:ad:c8:b3:2b:af:73:0b:2e:f9:3f:29:b7:b5:10:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
        Validity
            Not Before: Nov 14 09:17:08 2023 GMT
            Not After : Nov 12 09:22:08 2024 GMT
        Subject: CN=3C5B2B3E8FBEE93B100E74E88C6D14ACCB16B0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:3f:3a:84:ac:43:cd:de:40:0f:5c:d4:bf:
                    16:9f:46:cd:01:50:e0:18:58:e2:cd:89:a7:d3:3b:
                    60:7d:20:6d:6d:ae:5b:98:cd:1e:3d:a9:e4:0b:a5:
                    ff:4a:eb:f0:44:99:b2:cb:4d:50:e9:21:da:b1:33:
                    9f:c8:11:73:ab:e9:08:24:c2:cd:bf:25:57:a9:9c:
                    01:20:e5:51:70:2e:b2:7e:62:da:2b:b8:ee:cd:8b:
                    ea:d2:19:70:00:84:0e:de:63:a0:e0:0e:5b:12:46:
                    6e:f1:d8:4c:b8:02:d2:bc:3a:d8:f8:01:8f:43:72:
                    6c:07:7e:3d:c9:3b:d2:90:93:a5:3d:92:37:01:5d:
                    3d:fc:3a:58:54:2d:c5:46:bc:5c:1f:f0:12:83:08:
                    69:9d:ff:ab:cb:12:65:80:4d:27:f1:92:80:11:3a:
                    56:a7:5d:79:5a:5d:f3:a1:bf:cd:8e:1a:12:6b:e2:
                    f0:70:d9:4b:8e:b6:d1:11:1d:6e:6d:02:93:d9:85:
                    bd:2e:2c:d0:72:9c:87:c3:54:bf:80:69:c7:c5:1f:
                    f9:27:ac:83:77:bd:49:a4:c4:bf:2e:16:73:70:44:
                    20:ab:bc:21:a5:ee:a9:6e:ea:f4:aa:61:1b:9a:40:
                    43:5a:50:22:89:42:11:66:cd:15:ab:35:fb:f1:a8:
                    4b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5B:2B:3E:8F:BE:E9:3B:10:0E:74:E8:8C:6D:14:AC:CB:16:B0:D6
            X509v3 Authority Key Identifier:
                keyid:A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3138382e302f32342d3234203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:cd:69:57:8a:5b:a2:2b:34:41:2c:92:79:bf:d8:4f:a2:
         e9:46:2d:4f:8e:29:ad:1b:4e:4f:26:f2:13:3d:7b:fd:62:73:
         5e:cf:78:41:e8:b4:8c:40:54:f0:a9:41:e1:70:14:98:e6:8d:
         52:55:9c:04:b9:5e:dd:e5:e2:50:48:4f:80:5c:1e:b7:19:c1:
         f2:ef:85:d0:a4:e3:bf:50:89:da:60:f8:06:1b:25:ca:c7:46:
         69:d8:a1:6c:1f:60:be:76:5c:8b:d8:43:5f:eb:9b:bf:e4:f6:
         e9:ec:32:47:bd:90:01:ba:48:42:95:61:cc:4f:e9:bd:22:4e:
         fe:d2:53:46:b7:f3:e4:89:20:79:c3:62:be:3e:b6:71:55:c0:
         90:dc:20:f9:4b:c1:7e:5d:db:de:7a:56:45:82:71:56:97:cf:
         f7:d2:5c:fb:73:d9:9a:a4:cf:cb:17:ef:f7:7f:a9:be:ae:45:
         01:c7:c5:dd:29:25:8a:d8:a7:c2:8b:71:75:d8:0b:49:23:a8:
         a1:3a:66:c2:1d:d7:27:db:ef:b1:d2:b8:3d:da:c9:ea:e1:99:
         b2:82:6d:d5:ae:62:5b:87:4d:00:69:89:81:da:d3:96:c0:9c:
         5a:e1:0b:99:92:47:a3:39:b2:40:b5:03:27:b5:cd:d9:4e:43:
         3a:1a:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org