Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139302e302f32342d3234203d3e20323638363238.roa
File:                     34352e3136342e3139302e302f32342d3234203d3e20323638363238.roa (raw, json)
Hash identifier:          CyF5zp79ZrR4krb/Jb+zYvZRhroYJdjhnVZAR6yhQtQ=
Subject key identifier:   26:A1:FF:DD:9E:09:78:C5:01:DC:03:28:5B:2F:11:BF:07:AF:5C:4C
Certificate issuer:       /CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
Certificate serial:       72C3C0AADD5B855DB2A03AB5CA3D33007D10E618
Authority key identifier: A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139302e302f32342d3234203d3e20323638363238.roa
Signing time:             Tue 14 Nov 2023 09:22:07 +0000
ROA not before:           Tue 14 Nov 2023 09:17:07 +0000
ROA not after:            Tue 12 Nov 2024 09:22:07 +0000
asID:                     268628
IP address blocks:        45.164.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c3:c0:aa:dd:5b:85:5d:b2:a0:3a:b5:ca:3d:33:00:7d:10:e6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
        Validity
            Not Before: Nov 14 09:17:07 2023 GMT
            Not After : Nov 12 09:22:07 2024 GMT
        Subject: CN=26A1FFDD9E0978C501DC03285B2F11BF07AF5C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:49:6f:1b:74:a4:c5:47:36:1b:cb:78:a4:
                    59:88:e8:82:e6:f5:60:db:3d:64:77:19:4f:51:d4:
                    4e:f5:15:69:63:49:ca:c2:cc:4a:af:40:46:0b:99:
                    6c:6a:29:ae:71:b7:7f:4c:41:3b:cb:d2:1f:33:47:
                    5d:fe:ba:6f:a0:22:e1:a6:64:13:b7:1c:9e:ac:dc:
                    5c:3c:1a:39:36:bf:73:d9:f9:d2:83:0d:66:62:ba:
                    6a:3b:10:03:3a:08:60:db:73:bc:96:6e:eb:cb:07:
                    b6:9a:70:72:3f:f9:37:19:e4:db:1f:ce:e7:16:a0:
                    d0:85:f5:9a:a0:08:e6:e0:2b:5c:e8:20:84:02:c9:
                    1f:5f:b3:98:b5:77:53:26:32:44:29:09:75:42:d9:
                    b0:e4:bb:4d:3f:aa:95:c0:1c:93:f6:84:3a:24:65:
                    3d:3a:6c:1b:52:31:b2:27:0b:22:bb:3e:21:f1:11:
                    42:6a:20:cf:08:20:a5:76:36:9e:00:32:0f:db:44:
                    c3:ea:88:ee:73:20:aa:0f:81:e9:e7:6c:d1:43:9d:
                    14:6d:43:fc:9b:79:b2:97:fd:7a:b2:9e:8b:37:3f:
                    62:a3:bf:63:70:17:01:70:62:49:e6:a9:63:cf:ff:
                    47:f0:bf:72:4f:dc:11:87:23:35:06:06:ee:12:55:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A1:FF:DD:9E:09:78:C5:01:DC:03:28:5B:2F:11:BF:07:AF:5C:4C
            X509v3 Authority Key Identifier:
                keyid:A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139302e302f32342d3234203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ce:41:1b:ad:60:e0:72:74:b8:e6:16:0a:0a:18:0d:20:8b:
         a6:dd:14:57:ca:6c:2e:a1:90:2c:5d:7f:07:a5:d2:2c:90:ae:
         7b:4c:83:cf:c6:f5:bb:3c:42:4f:4e:62:fa:10:39:57:44:35:
         0b:89:4f:d9:6e:f7:4a:fc:79:dd:95:59:53:25:f7:01:ad:01:
         9a:60:d3:e8:ff:44:99:75:db:0a:a9:74:66:19:00:e0:69:72:
         d5:d8:52:52:39:1b:2b:a1:1e:e0:da:68:b1:38:a3:7a:9c:96:
         9e:d9:5e:c7:2d:fa:b0:3c:e2:06:ea:e2:f1:1f:ef:28:f1:79:
         05:34:a8:34:44:a1:37:3f:9d:87:be:35:db:1c:af:27:ac:cc:
         15:77:21:a1:b5:8c:2e:0e:7a:02:01:d9:b7:a1:b1:21:7d:c1:
         ed:73:27:b0:53:7a:73:b3:bf:69:0c:04:65:10:a9:6c:05:5c:
         79:50:c7:d5:a9:f7:12:9a:d1:9c:a7:81:cf:7e:71:6a:10:19:
         c2:f3:f7:07:47:20:2e:eb:22:8d:9e:71:88:69:8e:14:69:4a:
         28:0e:d7:f1:45:d7:c1:00:d6:8c:9e:b9:06:cb:e7:b8:8f:db:
         6b:71:3b:c3:50:3d:fc:0f:c5:70:fd:79:24:c2:75:94:5c:f6:
         e6:68:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org