Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139302e302f32332d3233203d3e20323638363238.roa
File:                     34352e3136342e3139302e302f32332d3233203d3e20323638363238.roa (raw, json)
Hash identifier:          nBHEO5fQeXjQ4QxABHaRN+YAuDjS9+SBTjcsGInbdUU=
Subject key identifier:   C3:EA:E1:F0:8D:2A:58:C9:CE:0A:8B:83:84:2C:89:51:75:21:23:9E
Certificate issuer:       /CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
Certificate serial:       479CA4964E1565843EFE3E7467C8FE8880164BC8
Authority key identifier: A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139302e302f32332d3233203d3e20323638363238.roa
Signing time:             Tue 14 Nov 2023 09:22:07 +0000
ROA not before:           Tue 14 Nov 2023 09:17:07 +0000
ROA not after:            Tue 12 Nov 2024 09:22:07 +0000
asID:                     268628
IP address blocks:        45.164.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9c:a4:96:4e:15:65:84:3e:fe:3e:74:67:c8:fe:88:80:16:4b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
        Validity
            Not Before: Nov 14 09:17:07 2023 GMT
            Not After : Nov 12 09:22:07 2024 GMT
        Subject: CN=C3EAE1F08D2A58C9CE0A8B83842C89517521239E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:80:47:cd:b5:c0:ba:fb:26:7e:7e:80:09:
                    49:e1:0f:38:5e:a5:23:2b:5c:ac:d6:78:74:02:8b:
                    8e:2d:0a:0e:77:0b:39:db:c2:d5:af:f9:47:8f:1e:
                    8c:b0:e3:c6:2e:9f:c6:c6:57:8f:24:2a:61:5a:12:
                    1c:65:cf:a9:05:c1:dd:97:d2:80:17:44:f9:2b:c4:
                    a6:d9:ee:f6:43:b1:06:0a:bd:bb:5e:12:ee:5f:18:
                    61:bf:5a:fe:11:17:62:e3:ee:aa:95:90:f6:45:a7:
                    24:e9:0a:f1:e6:85:cb:ab:23:ab:40:20:10:47:e9:
                    81:c2:7a:f5:19:cf:5c:92:2e:49:b3:0f:2d:00:a6:
                    be:9d:a7:33:8d:2e:d9:28:de:64:b4:97:d9:05:5d:
                    ca:df:21:c5:ef:64:4e:88:e0:4e:e3:0b:82:f9:8d:
                    40:fd:36:f9:2a:d8:41:b3:1b:3e:e3:68:4d:1b:11:
                    3a:a3:11:df:0e:36:f0:1f:38:75:44:b5:66:ba:2a:
                    e7:b6:77:ad:f0:6a:69:68:c4:df:74:f6:89:9d:cf:
                    d6:08:cc:3f:5e:e6:89:1d:25:4e:6f:67:c8:b7:d6:
                    06:d9:d4:b5:94:78:4c:f9:70:b9:82:59:d0:39:99:
                    21:17:1a:d7:db:ea:e4:e8:86:6d:52:96:89:00:4e:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:E1:F0:8D:2A:58:C9:CE:0A:8B:83:84:2C:89:51:75:21:23:9E
            X509v3 Authority Key Identifier:
                keyid:A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139302e302f32332d3233203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:63:2c:4e:f3:24:d4:f9:c7:fc:56:39:d0:7c:99:1f:69:e0:
         6d:ed:d2:db:9a:11:4e:e6:79:dc:42:0b:2c:26:a7:3f:de:c4:
         8b:42:b4:a1:5d:91:77:12:4c:ba:6d:07:b0:d2:9c:0c:f9:27:
         13:dc:5a:4c:ba:f7:74:4b:40:83:85:64:e6:4b:f4:4b:68:c4:
         f4:df:14:28:7c:58:c5:1a:d9:ee:d2:d8:8e:96:d3:9f:36:f3:
         15:f7:a9:6f:10:ce:12:47:f1:49:ca:ac:e9:d0:ca:d3:42:f3:
         09:0e:78:21:e7:86:71:79:19:b7:9b:22:78:a0:65:fa:b6:8d:
         7c:19:55:bb:80:ef:7a:fb:c0:d4:68:3f:9c:24:e2:a5:d6:ac:
         05:ae:14:0e:fc:2c:52:1e:11:c5:02:ed:46:9b:ce:e1:51:0a:
         aa:a4:ce:4c:09:85:3d:aa:53:d0:ab:de:3b:29:57:08:2b:ee:
         e1:8b:4e:91:a2:c0:29:1e:43:89:f5:1f:fa:cc:75:90:90:a8:
         4c:4f:72:a2:34:a2:0b:3b:e2:9b:b5:65:92:d1:d4:74:1b:61:
         4f:63:ae:86:1a:69:e8:94:0d:f7:5a:17:36:cd:0c:fc:34:60:
         53:5a:c8:16:9a:0a:8b:ed:ac:9f:0e:9c:ff:f7:62:77:29:10:
         00:30:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org