Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234302e302f32342d3234203d3e20323638363437.roa
File:                     34352e3136342e3234302e302f32342d3234203d3e20323638363437.roa (raw, json)
Hash identifier:          h6145hnGGijRLavikO2d6JVyJ73qTZZQM5JoevwxpUY=
Subject key identifier:   D5:15:55:74:BB:EC:6B:C6:83:81:CA:F4:A3:45:CF:37:F5:FD:42:39
Certificate issuer:       /CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
Certificate serial:       1C9025F2938C2761075DC51CDCBFAE2871FB7576
Authority key identifier: AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234302e302f32342d3234203d3e20323638363437.roa
Signing time:             Sat 14 Aug 2021 21:00:02 +0000
ROA not before:           Sat 14 Aug 2021 20:55:02 +0000
ROA not after:            Sun 14 Aug 2022 21:00:02 +0000
asID:                     268647
IP address blocks:        45.164.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:90:25:f2:93:8c:27:61:07:5d:c5:1c:dc:bf:ae:28:71:fb:75:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
        Validity
            Not Before: Aug 14 20:55:02 2021 GMT
            Not After : Aug 14 21:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:0d:e6:50:bb:30:0d:83:4d:8c:3f:d3:aa:
                    fb:1d:27:ad:75:1f:aa:ea:24:e2:bc:5d:53:ab:61:
                    33:cd:09:c5:23:71:a9:76:4d:f6:41:30:45:af:d8:
                    9b:b4:38:de:87:cb:9f:5f:6a:67:18:a5:d1:1c:f5:
                    16:a2:1e:13:89:cf:8f:5e:8f:09:51:27:33:e2:69:
                    df:99:0f:92:fd:9d:4d:01:d5:b4:a5:3c:f3:a0:56:
                    a9:08:54:53:63:6e:a1:c8:d7:8b:bb:6e:fb:4b:91:
                    98:04:0b:3a:76:0d:46:ac:84:76:d5:63:b9:0a:0d:
                    a4:c8:bc:2f:5f:8b:27:34:fa:05:a7:d8:65:16:12:
                    24:ac:6b:4e:71:e5:c2:1b:32:5a:46:e6:d9:83:0a:
                    56:c2:76:8c:43:06:0f:44:d2:c4:71:37:e9:5b:28:
                    b9:42:e5:1e:87:0d:51:3f:b8:2d:6d:d7:09:c5:97:
                    25:93:18:48:fd:be:24:b1:28:6b:32:9d:3b:3b:c0:
                    3a:71:14:59:16:08:33:e1:9f:09:47:8f:d9:d1:ab:
                    f3:f9:36:c9:cb:e9:9b:47:d6:9c:2d:50:74:68:4d:
                    7e:ac:7b:93:71:c6:b4:ce:94:31:2a:60:92:4a:86:
                    c1:71:4d:9a:ee:74:66:57:a4:3d:cc:10:f5:bf:3f:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:55:74:BB:EC:6B:C6:83:81:CA:F4:A3:45:CF:37:F5:FD:42:39
            X509v3 Authority Key Identifier:
                keyid:AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234302e302f32342d3234203d3e20323638363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:d0:9d:4e:42:f7:45:76:8a:60:a6:f6:13:0c:3f:83:a9:78:
         12:33:23:87:0d:e8:9c:18:f0:65:43:42:87:83:d7:33:a5:e4:
         d9:bf:ad:bf:c0:54:12:d3:24:d8:88:7c:39:35:3b:cc:34:0c:
         91:4f:99:37:80:d4:1f:a2:88:b8:7f:0b:a5:d5:32:a0:b6:27:
         3e:51:a2:8e:f0:da:90:69:ca:cc:5f:eb:a4:27:63:df:2f:73:
         b6:43:2e:7f:a1:40:78:9d:28:88:56:61:6c:a9:2a:bf:67:68:
         83:50:e3:1b:e6:83:c4:a8:b5:93:e0:bd:e3:ce:e9:77:b5:48:
         be:31:39:ac:ab:d2:5a:a3:9b:7e:f2:78:65:ca:33:78:7e:e2:
         d4:be:0d:a6:52:6c:58:38:45:52:d9:fa:5c:95:0a:27:10:42:
         59:3e:f6:da:f3:84:4e:78:7f:d3:f6:76:9b:15:40:30:12:54:
         d1:1b:64:1e:ef:58:b7:96:e4:ce:53:99:0d:61:d5:58:59:a4:
         06:23:4e:ad:32:35:c7:78:f6:ad:21:42:6f:9d:5b:a2:59:58:
         24:79:39:f9:0b:0e:f7:5d:cb:e9:29:d6:79:6e:c2:6b:bf:7f:
         89:89:80:79:8b:9f:0e:08:96:41:99:0d:0d:1b:99:c3:4b:ea:
         ff:9c:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org