Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3232203d3e20323638313935.roa
File:                     34352e3233352e3130302e302f32322d3232203d3e20323638313935.roa (raw, json)
Hash identifier:          OaSP3xXVDONIKwCSpXEgzY6XBVNCwwDWZXFn/42TBgk=
Subject key identifier:   DF:1A:3D:41:41:CE:1B:58:E3:67:55:B1:54:54:5F:21:78:FB:F2:12
Certificate issuer:       /CN=BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794
Certificate serial:       476AA8B2D93CFD5B212C4AEBC1C696A1532C2086
Authority key identifier: BF:E8:EA:8B:A4:57:05:88:5E:AA:A9:FF:DB:C9:8A:83:D1:1B:27:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3232203d3e20323638313935.roa
Signing time:             Wed 27 Dec 2023 00:18:05 +0000
ROA not before:           Wed 27 Dec 2023 00:13:05 +0000
ROA not after:            Wed 25 Dec 2024 00:18:05 +0000
asID:                     268195
IP address blocks:        45.235.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:a8:b2:d9:3c:fd:5b:21:2c:4a:eb:c1:c6:96:a1:53:2c:20:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794
        Validity
            Not Before: Dec 27 00:13:05 2023 GMT
            Not After : Dec 25 00:18:05 2024 GMT
        Subject: CN=DF1A3D4141CE1B58E36755B154545F2178FBF212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:91:5c:56:9d:17:d0:3f:34:88:ce:e5:35:
                    ad:d0:55:97:51:2f:e7:48:96:dc:94:ef:0c:93:75:
                    e3:cf:9e:3b:e7:62:be:fa:d0:45:cc:74:1a:c8:bf:
                    6a:ee:14:21:d1:3b:99:e3:a4:a6:9a:9a:82:f7:7b:
                    95:32:3c:eb:aa:76:a1:da:2c:9f:4e:d0:67:76:8c:
                    d7:66:1d:1e:df:0b:54:56:8a:3d:c7:a1:dc:40:5d:
                    3c:6b:87:4b:a5:7e:45:14:4b:29:7f:3c:da:80:90:
                    02:86:b6:a5:fe:e0:0c:3a:7f:36:cb:e5:32:4f:bc:
                    0f:29:ec:53:42:42:cc:35:38:cc:bd:12:ae:9e:29:
                    2c:52:23:dc:63:9a:09:c1:12:8e:cc:13:ca:12:42:
                    5e:60:2c:16:20:a5:35:4e:6d:e6:01:05:bd:86:9c:
                    97:b1:13:72:62:63:42:51:ad:dd:54:6d:cf:80:6d:
                    8c:da:fa:aa:86:8b:9a:0b:d2:fc:be:f1:37:d3:c3:
                    ae:f4:8b:0f:63:08:84:18:ab:80:aa:10:f3:9e:d2:
                    f2:14:ec:6a:78:3f:0d:3d:04:ef:12:96:3a:81:af:
                    51:c1:b0:a6:9f:c9:4d:ba:15:af:e5:4a:03:33:7d:
                    6f:53:8a:98:fb:ea:71:11:df:fa:da:25:b7:f0:ae:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1A:3D:41:41:CE:1B:58:E3:67:55:B1:54:54:5F:21:78:FB:F2:12
            X509v3 Authority Key Identifier:
                keyid:BF:E8:EA:8B:A4:57:05:88:5E:AA:A9:FF:DB:C9:8A:83:D1:1B:27:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3232203d3e20323638313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:41:b3:99:37:88:59:6b:d1:3d:fd:4f:6b:ff:98:bd:dd:
         b7:00:f2:b6:9c:a3:3b:ef:fc:62:c5:b9:f2:67:63:29:d7:e2:
         1d:c1:b0:29:b3:37:18:32:4b:b1:34:85:b6:d9:77:13:f1:7d:
         9f:86:5d:55:4b:0e:83:a8:c6:a2:e1:bd:5e:01:28:8e:bf:8c:
         03:2e:59:47:1d:c7:41:9a:e5:07:50:d7:ee:be:96:16:89:7a:
         2f:02:5a:68:bd:f8:b8:b4:10:ca:9d:80:6f:95:ec:2d:82:10:
         fe:6a:8b:7d:76:88:6d:04:b2:6f:f7:51:39:4c:ae:4b:e3:0a:
         b9:69:9a:ac:d6:2b:00:9c:25:6e:58:fe:0a:c3:c4:21:c3:ab:
         7b:a3:d3:a6:d3:18:29:ce:e4:d7:f3:70:a4:4b:dc:0b:77:db:
         b3:d6:65:74:69:0b:64:81:43:26:bb:f3:bd:c3:fa:dc:22:cd:
         27:bb:18:81:8f:1a:ca:f5:7d:0c:ef:55:4e:79:1d:51:e4:44:
         d9:f4:6a:24:e1:3b:3a:84:53:0f:20:2a:2d:93:26:06:88:52:
         9e:7f:11:ca:41:1a:75:01:4d:c6:78:0b:7d:c1:ec:d2:01:17:
         f2:cc:83:b1:b2:67:3a:10:c0:ad:04:7a:e1:8b:53:b4:a6:7f:
         b3:cf:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org