Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139312e302f32342d3234203d3e20323638363238.roa
File:                     34352e3136342e3139312e302f32342d3234203d3e20323638363238.roa (raw, json)
Hash identifier:          qxM2oGrdsfRyoiX5myjeXC9gjqsRBwSAewWFSTAMMcg=
Subject key identifier:   7A:09:0E:E0:D7:89:37:CB:6E:EE:BB:7F:2F:E6:43:C1:38:50:CC:3E
Certificate issuer:       /CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
Certificate serial:       7F6898DBF27330DFCB0525D000E210922688A278
Authority key identifier: A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139312e302f32342d3234203d3e20323638363238.roa
Signing time:             Tue 14 Nov 2023 09:22:07 +0000
ROA not before:           Tue 14 Nov 2023 09:17:07 +0000
ROA not after:            Tue 12 Nov 2024 09:22:07 +0000
asID:                     268628
IP address blocks:        45.164.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:68:98:db:f2:73:30:df:cb:05:25:d0:00:e2:10:92:26:88:a2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
        Validity
            Not Before: Nov 14 09:17:07 2023 GMT
            Not After : Nov 12 09:22:07 2024 GMT
        Subject: CN=7A090EE0D78937CB6EEEBB7F2FE643C13850CC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:c9:bc:36:f3:63:0b:a8:06:7d:8b:03:45:
                    2f:a0:b7:35:f5:d6:17:a5:33:a5:b4:d3:7f:66:d3:
                    b8:73:7f:3c:70:14:e7:10:52:0b:83:c7:82:61:17:
                    ac:9e:9f:15:82:bb:fe:fd:31:a7:71:90:9d:7c:86:
                    4d:d0:0f:01:e5:22:b9:d7:c4:9b:03:f4:f4:10:a9:
                    9a:cd:82:4b:04:4c:86:b1:5f:e8:54:5a:77:a2:14:
                    95:d1:45:78:dc:21:ef:39:b4:1f:9a:31:76:ed:0c:
                    d6:a4:e5:27:15:08:65:77:36:8b:c1:c6:f9:eb:3f:
                    41:af:13:16:b2:76:10:f3:38:43:35:6e:fb:42:51:
                    e9:09:19:31:14:c9:e5:a3:b0:6a:99:72:73:af:42:
                    c3:c8:30:5d:37:b4:02:08:d1:3d:ca:77:71:a1:30:
                    19:7e:7e:5a:5b:02:59:f8:9e:d7:95:21:07:87:6d:
                    8d:51:d2:82:74:8a:e7:9b:d3:8b:ff:5e:df:d0:4c:
                    50:21:f5:57:92:85:92:6e:32:cc:4e:91:e2:90:65:
                    86:75:59:bb:0e:70:48:fe:a3:20:e3:2a:9f:44:13:
                    5c:c3:38:44:83:b6:bd:c7:90:16:b1:64:c4:51:23:
                    f7:5e:fe:25:3a:63:5a:f7:d0:6b:6b:37:0a:65:19:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:0E:E0:D7:89:37:CB:6E:EE:BB:7F:2F:E6:43:C1:38:50:CC:3E
            X509v3 Authority Key Identifier:
                keyid:A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/34352e3136342e3139312e302f32342d3234203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:b8:d8:3d:03:96:96:60:e5:22:1b:30:a1:ee:cb:57:db:
         84:90:5c:99:4b:ae:40:51:67:3a:fc:32:9e:89:a3:95:90:a7:
         91:f1:86:f2:f2:19:39:2d:50:64:50:f6:01:ec:c7:dd:00:b1:
         df:d7:26:74:65:c5:7c:24:aa:4c:84:db:02:5c:cc:02:fe:fe:
         6c:de:70:94:0c:ca:ae:fd:cf:c7:af:44:f7:98:74:5e:08:97:
         23:02:42:97:0f:d9:e5:35:fc:67:48:f9:c7:4e:f2:58:5a:91:
         90:cd:d8:eb:2d:3e:d9:44:39:d2:63:98:a6:b5:bf:b3:ec:da:
         74:4f:61:79:68:b4:41:c2:f3:a9:bb:8d:80:8f:a5:c8:58:98:
         bc:d0:fd:2f:39:60:8d:f6:24:f8:b8:26:a4:b3:20:08:62:5a:
         45:4b:be:02:ec:ed:25:f4:3a:ed:77:8a:09:fe:65:17:8e:33:
         88:f4:2a:3f:e3:9c:ba:d7:c4:f4:18:7e:03:3c:ab:5f:df:97:
         eb:10:be:c0:15:79:c0:4f:ca:c6:b6:a2:45:78:cf:4c:ea:8c:
         6f:10:1a:51:55:9d:42:61:b9:ad:1c:58:30:6c:5e:4f:61:9c:
         1e:e8:a6:00:c6:dc:c8:bb:c4:5e:36:d0:72:d4:01:ad:17:2e:
         50:a4:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org