Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234302e302f32332d3233203d3e20323638363437.roa
File:                     34352e3136342e3234302e302f32332d3233203d3e20323638363437.roa (raw, json)
Hash identifier:          GGTq+10C7KG2NthdF2DW2Q9mxU1uFyjFN01joLH2nw4=
Subject key identifier:   81:75:81:E4:45:4E:28:63:36:24:4F:80:B8:C7:49:25:A0:E7:C1:CB
Certificate issuer:       /CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
Certificate serial:       3502AE84CD4EEA2DA8B3320290FE6EF49ED519E3
Authority key identifier: AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234302e302f32332d3233203d3e20323638363437.roa
Signing time:             Sat 14 Aug 2021 21:00:01 +0000
ROA not before:           Sat 14 Aug 2021 20:55:01 +0000
ROA not after:            Sun 14 Aug 2022 21:00:01 +0000
asID:                     268647
IP address blocks:        45.164.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:02:ae:84:cd:4e:ea:2d:a8:b3:32:02:90:fe:6e:f4:9e:d5:19:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
        Validity
            Not Before: Aug 14 20:55:01 2021 GMT
            Not After : Aug 14 21:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:1d:91:43:ee:b8:b5:c2:ff:e3:57:5b:fd:
                    7d:1c:0e:5c:31:9b:b3:c8:f3:b5:72:2b:51:9f:d4:
                    59:55:33:19:99:31:f3:b3:47:2a:34:22:01:67:57:
                    42:aa:97:be:60:c8:a3:99:59:2e:90:25:5f:34:1b:
                    02:0d:51:3f:b8:42:76:8d:29:90:f3:c0:fd:a5:93:
                    ac:ba:91:13:fd:17:3e:8e:cc:f7:38:a8:12:8b:84:
                    75:8a:72:10:85:0f:07:74:f8:73:98:51:b8:c0:70:
                    ee:e0:1f:dc:8d:4e:3e:b0:26:de:db:6d:8a:a7:b1:
                    fb:5b:0a:af:d5:00:e2:45:ff:81:a4:e6:4d:53:6f:
                    04:bc:b7:2e:09:14:dc:b4:e6:04:7f:18:19:34:9a:
                    b3:c4:41:87:df:c7:12:19:81:8f:70:cc:b7:23:82:
                    3e:d2:1f:50:5b:f1:9a:ac:6a:7b:b7:19:c7:b0:0e:
                    6a:88:83:b6:c7:c8:64:ee:f8:de:a2:6b:9d:89:93:
                    39:1c:a8:03:20:d8:30:72:e1:fd:7d:e8:2c:8a:7a:
                    47:3c:35:e2:fc:6f:06:06:f3:48:3d:75:bd:a3:da:
                    d2:73:a7:94:87:2a:9f:4e:cb:f7:7a:80:24:f9:78:
                    18:4f:2d:8c:52:9b:a8:d1:86:9d:1d:46:7c:9d:30:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:75:81:E4:45:4E:28:63:36:24:4F:80:B8:C7:49:25:A0:E7:C1:CB
            X509v3 Authority Key Identifier:
                keyid:AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234302e302f32332d3233203d3e20323638363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:25:3e:14:ea:7e:94:78:80:ff:ce:88:b4:8d:40:28:c5:99:
         e9:99:71:33:08:0c:bf:72:ad:0c:99:2d:06:ae:e8:d5:91:d0:
         77:c2:3b:36:6d:01:7d:5d:5a:5a:f8:31:7e:cd:93:f8:70:7a:
         fc:16:d5:b7:6e:c6:d3:71:9f:74:43:69:7e:4e:63:4c:84:e0:
         86:68:9f:f6:7f:85:54:06:a1:24:d9:2d:32:5e:3f:cb:84:5a:
         9e:45:7b:55:28:23:49:fe:ee:64:ee:55:53:e0:66:fd:38:28:
         07:95:b7:8e:b1:ad:61:42:dc:a9:6e:2e:d9:29:8f:7e:08:57:
         20:11:fa:69:ae:95:98:c2:0d:50:1a:80:b9:3f:86:d5:13:12:
         be:fe:8a:16:8d:33:1d:0d:58:5d:02:df:fa:c6:05:44:ea:be:
         55:96:0c:86:af:fa:1b:bb:6e:a0:e1:9f:7d:7c:e0:be:bf:65:
         c7:92:c9:b3:75:a6:aa:1e:20:99:bc:50:65:ba:c9:29:3a:3c:
         5a:c9:4f:86:76:10:fe:10:e5:63:36:31:b0:4a:df:76:49:db:
         40:9c:33:e3:8e:22:4f:bb:bf:d9:ed:cb:03:23:72:48:fb:3f:
         90:48:a5:1e:69:4b:64:14:fb:f4:9f:55:9b:f1:fe:55:a1:cd:
         a7:cc:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org