Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234312e302f32342d3234203d3e20323638363437.roa
File:                     34352e3136342e3234312e302f32342d3234203d3e20323638363437.roa (raw, json)
Hash identifier:          j/LDrAYoKiICwHLQRfU0CMMrx0KKTqpRBcBvM0wYqzM=
Subject key identifier:   A4:09:72:9B:5E:78:F6:C5:A6:E3:A4:1E:0A:4E:1B:51:B2:A5:B1:FB
Certificate issuer:       /CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
Certificate serial:       2ACB0359EE76ECBEE3B9888A86B81B1D4DC487D8
Authority key identifier: AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234312e302f32342d3234203d3e20323638363437.roa
Signing time:             Sat 14 Aug 2021 21:00:01 +0000
ROA not before:           Sat 14 Aug 2021 20:55:01 +0000
ROA not after:            Sun 14 Aug 2022 21:00:01 +0000
asID:                     268647
IP address blocks:        45.164.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cb:03:59:ee:76:ec:be:e3:b9:88:8a:86:b8:1b:1d:4d:c4:87:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
        Validity
            Not Before: Aug 14 20:55:01 2021 GMT
            Not After : Aug 14 21:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:4f:d6:27:c2:4d:79:f5:5f:30:75:63:91:
                    10:80:97:1f:9b:cf:2b:04:18:8b:36:0b:85:96:6b:
                    d5:0a:f2:56:b2:85:ef:71:10:51:af:30:c4:b1:a2:
                    e4:3e:44:44:62:64:d2:c6:ed:68:de:21:a9:50:15:
                    3b:3f:b9:8e:17:87:6f:37:8d:60:34:7c:b8:70:9d:
                    4d:e9:73:64:81:1d:c2:38:ce:6e:45:5f:8d:6f:83:
                    6d:dc:f4:6b:f8:63:fb:20:54:d1:e1:80:7a:bc:13:
                    39:40:b6:54:9a:f3:41:7b:49:33:c1:b5:50:09:36:
                    9f:a8:ac:ed:40:c2:42:ac:be:44:b4:a1:56:a3:09:
                    4c:b6:82:f7:4a:2d:5e:63:5c:b1:05:a8:7a:65:b2:
                    92:de:a8:fa:0f:d1:3c:b9:b1:23:65:f3:9b:cb:68:
                    46:55:26:30:f6:e6:0e:dd:5a:4c:d0:fa:eb:f0:4c:
                    4e:52:67:78:b5:bb:90:03:bb:53:8b:e4:70:99:92:
                    fc:bd:e7:f3:00:54:7e:07:35:bd:f4:3f:3f:51:b0:
                    54:f1:36:d3:f2:66:d7:5e:8a:30:d0:9d:b8:f6:c3:
                    39:b5:33:42:06:65:9a:0f:f2:bd:2d:6a:07:3c:7f:
                    58:f6:e9:f9:02:c0:0a:1f:2d:f7:d8:56:90:4b:b9:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:09:72:9B:5E:78:F6:C5:A6:E3:A4:1E:0A:4E:1B:51:B2:A5:B1:FB
            X509v3 Authority Key Identifier:
                keyid:AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234312e302f32342d3234203d3e20323638363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:70:f2:b2:f4:c4:d1:1e:9e:83:52:12:72:92:3e:73:46:c5:
         90:6c:8e:76:d9:47:4b:9f:c9:77:2c:f5:58:17:d6:a4:5b:57:
         4f:7e:65:ac:ca:6d:3b:ce:8b:73:21:2d:74:30:72:85:ea:e4:
         fd:25:92:e2:f8:2a:4a:35:6c:3c:0b:c3:c9:f3:a1:30:55:c3:
         81:00:6e:02:bd:66:55:3a:42:87:d3:4d:ee:d4:21:55:65:25:
         9f:8e:30:99:34:5b:3d:f7:5a:3f:53:c4:90:5b:4e:b4:4b:89:
         ee:74:28:c4:e8:05:6d:09:f6:2c:dc:ff:43:09:b1:87:ac:ae:
         dd:53:e2:38:1d:0c:fb:e0:11:49:fa:c2:d5:91:d1:1f:fa:26:
         6e:c3:1f:5b:e1:80:f1:aa:03:c1:f0:f9:41:b5:3b:44:54:89:
         9c:49:3c:77:e4:e7:1d:a4:49:95:d3:42:88:0d:5d:ea:79:70:
         1f:33:a4:2b:2d:21:68:74:98:8b:15:3c:55:b9:9c:22:03:a4:
         d0:9b:7b:ae:bc:27:f4:f0:50:e5:6e:60:2d:dd:4d:fa:bb:35:
         de:34:0d:50:d5:7f:00:ba:f2:d1:ed:cf:be:1f:bd:43:7a:65:
         67:6d:51:db:cd:98:16:48:b9:05:84:27:6b:67:d2:f7:c7:5d:
         f2:e9:39:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org