Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa
File:                     34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa (raw, json)
Hash identifier:          gYrl3JYp9C/fpeRg/CJjjmoP7Cc48i2vCgvqkAO2fso=
Subject key identifier:   6D:17:F0:B6:3D:FE:83:2A:7A:7E:D4:FF:A7:1B:4B:96:C3:FF:2E:21
Certificate issuer:       /CN=EAA395B0A2B483C6C50BC176392A71A900364987
Certificate serial:       6F97354D8609AE16B2AAFC4A5407EE717ED276C1
Authority key identifier: EA:A3:95:B0:A2:B4:83:C6:C5:0B:C1:76:39:2A:71:A9:00:36:49:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAA395B0A2B483C6C50BC176392A71A900364987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa
Signing time:             Wed 21 Feb 2024 19:06:00 +0000
ROA not before:           Wed 21 Feb 2024 19:01:00 +0000
ROA not after:            Wed 19 Feb 2025 19:06:00 +0000
asID:                     268673
IP address blocks:        45.165.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:97:35:4d:86:09:ae:16:b2:aa:fc:4a:54:07:ee:71:7e:d2:76:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAA395B0A2B483C6C50BC176392A71A900364987
        Validity
            Not Before: Feb 21 19:01:00 2024 GMT
            Not After : Feb 19 19:06:00 2025 GMT
        Subject: CN=6D17F0B63DFE832A7A7ED4FFA71B4B96C3FF2E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c3:e9:35:66:0f:37:c3:b4:6d:bf:d3:9d:2b:
                    06:6a:80:29:5f:71:25:de:40:42:29:4d:a4:d7:61:
                    cd:9a:3f:5b:ec:e9:e1:00:22:a7:fa:3b:4c:4c:90:
                    c5:85:19:88:55:d7:66:ad:be:48:c1:db:ce:44:e6:
                    5b:71:e6:de:cf:0d:1d:66:9b:fa:4d:3b:b0:86:18:
                    4c:9e:88:8e:e3:98:55:9c:e2:ac:73:d0:bf:f3:b4:
                    1f:32:49:59:39:46:d2:8a:a9:a9:b0:a8:b5:b1:02:
                    61:c1:ba:f9:ec:3c:65:14:d4:1a:9a:83:11:a8:97:
                    d7:cc:a7:c6:10:a9:e0:97:05:8c:72:3a:6b:44:2c:
                    a8:91:84:73:14:98:14:b5:4b:4f:ef:ee:19:5c:ae:
                    5f:80:e2:b7:3d:c1:f5:25:0e:c3:f1:a9:28:8d:64:
                    3b:cf:e7:fa:cf:0e:d7:76:f2:f3:77:9a:b8:ed:15:
                    3c:df:8d:fa:66:8a:65:86:e5:91:62:5d:a1:75:70:
                    8e:a7:f4:c4:db:4d:64:44:59:27:a1:28:db:5d:27:
                    eb:8b:5b:7a:42:ee:4e:5f:ef:9f:ed:95:3a:2c:2a:
                    cd:15:26:d9:1f:d5:38:58:e8:12:d5:d1:e5:16:9b:
                    7f:6d:ad:1c:75:6d:63:bb:df:cb:da:d0:a4:c0:4d:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:17:F0:B6:3D:FE:83:2A:7A:7E:D4:FF:A7:1B:4B:96:C3:FF:2E:21
            X509v3 Authority Key Identifier:
                keyid:EA:A3:95:B0:A2:B4:83:C6:C5:0B:C1:76:39:2A:71:A9:00:36:49:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/EAA395B0A2B483C6C50BC176392A71A900364987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAA395B0A2B483C6C50BC176392A71A900364987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:7f:46:d9:7b:ad:8a:b4:07:21:7a:cd:be:f3:d2:11:41:
         dc:da:2f:a4:42:12:06:34:35:ce:ea:c2:f1:04:6c:59:7b:18:
         c1:a5:48:c2:ae:90:6e:43:3a:58:b1:67:05:61:8c:6d:0f:3a:
         a3:f5:d0:36:4a:9b:da:db:03:60:41:27:f1:b3:0d:48:3a:3a:
         da:fc:5a:05:b9:42:63:6c:4e:dc:73:3f:a2:c1:7b:e7:38:34:
         73:f2:95:fe:a6:fb:d8:65:21:aa:43:98:b8:ea:21:e9:7f:dc:
         e3:7c:ac:3a:49:f2:93:38:23:98:7b:75:ea:77:ad:31:5b:bd:
         f9:31:d7:15:81:f4:c9:40:8d:12:65:b3:22:35:ca:41:73:9e:
         a2:30:05:f0:4c:99:f1:cc:28:65:e7:a9:c6:b5:d7:37:91:18:
         ff:5d:7a:28:f3:07:44:6f:c4:28:e0:d6:c1:68:04:b5:b4:dc:
         f2:75:f4:bd:ed:28:64:b0:16:43:84:f2:c5:56:26:f8:5b:97:
         e5:4c:59:51:d4:be:59:5a:df:60:2d:02:a5:14:20:1f:3f:e3:
         d3:70:77:b4:31:a4:56:46:b5:97:64:f0:76:78:12:a2:37:ba:
         d3:07:c6:57:70:5c:d0:9d:29:26:de:83:7a:0e:ac:25:a0:23:
         47:67:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org