Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3234203d3e20323638313935.roa
File:                     34352e3233352e3130302e302f32322d3234203d3e20323638313935.roa (raw, json)
Hash identifier:          /dNmkQfACy+TLZi5S07qNlHCgAD4cbmHGM2W5HcXvnk=
Subject key identifier:   01:1A:F3:00:BB:F9:67:BC:08:C4:BA:A5:E8:32:C6:16:EC:D6:6D:8F
Certificate issuer:       /CN=2EBCA12266480FA2635C1DB38D44B5240CFA8934
Certificate serial:       5AE2FD010C8351F13C36B571B4A1DD651D4DF458
Authority key identifier: 2E:BC:A1:22:66:48:0F:A2:63:5C:1D:B3:8D:44:B5:24:0C:FA:89:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3234203d3e20323638313935.roa
Signing time:             Sat 16 Dec 2023 21:43:26 +0000
ROA not before:           Sat 16 Dec 2023 21:38:26 +0000
ROA not after:            Sat 14 Dec 2024 21:43:26 +0000
asID:                     268195
IP address blocks:        45.235.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e2:fd:01:0c:83:51:f1:3c:36:b5:71:b4:a1:dd:65:1d:4d:f4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EBCA12266480FA2635C1DB38D44B5240CFA8934
        Validity
            Not Before: Dec 16 21:38:26 2023 GMT
            Not After : Dec 14 21:43:26 2024 GMT
        Subject: CN=011AF300BBF967BC08C4BAA5E832C616ECD66D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:ab:45:3f:18:b2:53:fe:1b:63:83:96:16:
                    9a:cc:94:4c:b6:82:3e:55:2d:52:9e:3e:bf:77:af:
                    b5:ea:ad:83:fc:39:df:26:0e:01:bd:d0:a8:63:e4:
                    26:b5:2b:7e:93:62:c4:19:c9:c7:47:97:53:7c:9e:
                    dd:e6:79:b9:4e:a5:31:9b:1d:91:37:a2:36:f9:4a:
                    2a:36:fc:f9:7e:2a:20:62:11:51:c4:90:7c:82:69:
                    d9:1b:68:65:a6:4d:10:7c:25:f4:86:64:18:bc:aa:
                    30:6c:f7:46:45:1c:59:45:f7:8a:c9:78:d1:d7:84:
                    fe:c2:b6:bc:91:07:f3:e1:5f:1d:60:12:8d:c2:57:
                    b9:92:dd:91:01:cd:5f:ef:17:87:e6:5f:23:05:04:
                    38:c8:f9:1b:ad:c2:2f:9a:c6:5b:87:11:b3:83:e1:
                    43:28:6f:56:c5:46:e7:87:5a:51:22:e2:ad:8f:5e:
                    20:2b:87:73:b7:7d:e3:86:3d:33:d1:03:31:06:b7:
                    ee:c6:03:a2:7d:cd:a0:98:31:c2:90:cc:97:1f:38:
                    41:1e:5a:cf:d6:14:fb:2a:83:98:02:97:0f:ee:07:
                    bf:8a:06:d9:62:99:a8:bb:42:b4:b1:6a:5b:08:27:
                    57:72:73:2b:73:9d:7e:90:1c:b3:65:4e:c1:4f:1b:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1A:F3:00:BB:F9:67:BC:08:C4:BA:A5:E8:32:C6:16:EC:D6:6D:8F
            X509v3 Authority Key Identifier:
                keyid:2E:BC:A1:22:66:48:0F:A2:63:5C:1D:B3:8D:44:B5:24:0C:FA:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3234203d3e20323638313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:e1:f4:40:ba:e8:0b:d0:2e:a7:7f:31:01:c9:fd:46:76:4e:
         1c:75:03:0e:eb:ce:d8:d5:50:9f:e7:70:e4:bb:f5:9b:71:b3:
         75:1e:66:b5:ca:00:ee:07:a6:22:42:53:7f:17:98:42:8c:00:
         a0:53:ff:4d:cd:82:e3:bb:3d:96:a9:ab:85:f7:43:a9:40:1a:
         0e:ae:44:7d:90:ab:61:0c:b0:1b:54:a0:2a:b2:01:0c:ac:1b:
         51:f4:f8:d7:bd:9e:08:9d:d0:cd:e4:e7:12:9a:62:84:42:cb:
         4d:18:97:9c:84:81:cf:c3:1b:6f:69:ac:43:9b:fa:2e:ba:74:
         bb:0d:d4:61:1d:60:fe:a2:44:b3:1c:a8:4b:a8:85:47:08:60:
         4c:9b:05:e2:c4:6f:e3:b2:ef:c0:dc:e0:41:ea:37:e7:98:c6:
         2f:2a:cc:94:05:53:67:18:a4:47:31:da:ec:a4:72:b8:a1:75:
         49:50:c1:8b:da:27:9f:d6:e5:95:73:da:f6:c6:5a:4c:22:ae:
         af:42:1e:21:1f:7a:8f:e3:16:d8:f8:bf:8e:49:f7:f9:ce:eb:
         ed:e2:0c:77:b6:7e:37:c6:00:dd:89:4d:30:08:23:15:6b:d5:
         6b:c1:6e:75:d3:45:18:8f:ff:07:1c:1c:ae:5a:86:5f:eb:0c:
         00:69:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org