Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234322e302f32332d3233203d3e20323638363437.roa
File:                     34352e3136342e3234322e302f32332d3233203d3e20323638363437.roa (raw, json)
Hash identifier:          Smra2kDjQZkjE8Xnjd1P+54WDu0KSq7RN+dcZ3EYsKI=
Subject key identifier:   9C:5E:ED:BF:C0:7F:30:63:E1:EB:87:20:26:71:CB:F1:37:74:D6:BF
Certificate issuer:       /CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
Certificate serial:       626151A8DCF244384B2F0BF95DEAAFBB521DDAFD
Authority key identifier: AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234322e302f32332d3233203d3e20323638363437.roa
Signing time:             Sat 14 Aug 2021 21:00:01 +0000
ROA not before:           Sat 14 Aug 2021 20:55:01 +0000
ROA not after:            Sun 14 Aug 2022 21:00:01 +0000
asID:                     268647
IP address blocks:        45.164.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:61:51:a8:dc:f2:44:38:4b:2f:0b:f9:5d:ea:af:bb:52:1d:da:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
        Validity
            Not Before: Aug 14 20:55:01 2021 GMT
            Not After : Aug 14 21:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:db:5c:ef:59:03:65:a8:70:38:3e:65:e7:
                    89:63:7f:55:0a:d1:4c:92:f4:25:f9:c9:c4:21:33:
                    7c:3b:b6:08:6c:c3:f0:41:af:74:bd:1e:84:1d:20:
                    54:5a:13:4d:f9:56:83:b9:df:62:23:3e:09:08:b5:
                    98:8d:6b:30:3d:02:4d:d8:13:83:3d:da:fd:38:7b:
                    48:f9:0f:a3:3d:27:69:3b:45:cf:4e:4e:75:8d:81:
                    66:04:1e:55:33:e0:b7:64:1d:7a:10:c7:bf:5a:d7:
                    d4:69:44:d3:5f:7d:0d:c3:40:b7:93:86:96:c7:cd:
                    4d:19:14:86:bb:d0:06:c7:22:bc:50:d2:6d:5e:a1:
                    4e:97:70:92:4f:a7:57:d6:5d:75:e8:7d:e6:e3:ad:
                    25:3e:5c:54:19:8c:0c:00:b2:13:58:4c:43:e2:28:
                    46:28:d3:7e:20:5d:11:d9:4e:90:e8:f6:9f:fd:bd:
                    1b:c9:ff:c3:e5:c3:44:84:f7:ba:19:b6:c9:24:c8:
                    4e:66:88:16:bd:cc:59:7a:d9:d7:0b:32:60:5e:58:
                    a1:8a:17:00:ba:68:08:25:9f:a4:15:3c:6c:5b:f8:
                    9e:70:23:d0:b6:bd:2b:ba:a7:a6:64:49:a7:b1:80:
                    33:53:d3:e8:66:36:ac:67:5b:f1:4f:d4:c6:b7:90:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:ED:BF:C0:7F:30:63:E1:EB:87:20:26:71:CB:F1:37:74:D6:BF
            X509v3 Authority Key Identifier:
                keyid:AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234322e302f32332d3233203d3e20323638363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:7b:28:6d:7d:39:4c:3f:50:09:2b:4c:ab:77:c9:82:a3:
         78:a7:51:cf:c3:65:e6:ab:93:21:2b:24:41:82:64:c9:d6:3e:
         50:04:d4:f2:ea:0c:e0:7c:d5:5e:c1:b9:1f:14:be:b5:63:8d:
         1c:a7:7c:e7:2f:a8:d3:18:c5:cd:cb:73:87:ca:48:e7:7c:53:
         4f:90:1d:2d:2f:7f:58:f1:82:85:a5:98:63:1f:00:90:12:c8:
         ab:5e:53:03:72:51:62:85:7c:ee:2f:dc:fe:a3:e8:1e:e4:b5:
         ee:ba:ce:63:4e:f4:05:d8:ac:1a:ab:02:3d:55:dc:ac:30:5c:
         6d:4e:10:29:d7:eb:d2:67:68:7b:3c:1c:9e:cc:08:d8:be:55:
         1f:7f:b9:11:4e:33:76:64:32:22:4a:b3:28:1f:82:8c:57:b7:
         b6:96:2d:57:62:21:00:82:60:d4:c8:e3:75:a1:22:42:e6:d9:
         e6:9b:51:f5:02:f9:7a:3f:44:2a:0b:c0:d0:3b:d4:8a:73:1a:
         7f:64:07:47:17:eb:04:b8:07:6a:83:4e:55:ec:49:6c:83:ca:
         a2:f2:01:99:47:75:62:87:ba:76:71:56:b2:9f:d7:23:22:1f:
         e6:4f:bc:e5:1d:a7:e3:4b:93:e8:b5:f6:82:3c:af:f3:2f:5e:
         96:61:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org