Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa
File:                     34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa (raw, json)
Hash identifier:          my6Hh6hkjqSJAVkA8tDpRwuYRJzhPxebx1SRLuwqcqs=
Subject key identifier:   BF:B9:45:6D:07:FA:EE:C4:29:06:86:93:B0:7A:B7:7C:32:63:50:71
Certificate issuer:       /CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
Certificate serial:       5A8EDCF9E1025B753E3A693883A2BAAD2268E7E4
Authority key identifier: BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa
Signing time:             Thu 30 Nov 2023 20:50:44 +0000
ROA not before:           Thu 30 Nov 2023 20:45:44 +0000
ROA not after:            Thu 28 Nov 2024 20:50:44 +0000
asID:                     267999
IP address blocks:        45.167.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8e:dc:f9:e1:02:5b:75:3e:3a:69:38:83:a2:ba:ad:22:68:e7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
        Validity
            Not Before: Nov 30 20:45:44 2023 GMT
            Not After : Nov 28 20:50:44 2024 GMT
        Subject: CN=BFB9456D07FAEEC429068693B07AB77C32635071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:8b:b0:c9:c3:83:3e:38:f8:bc:b9:dd:69:
                    29:71:a0:0a:f1:4b:6b:bb:23:6b:00:3a:19:0e:86:
                    b6:85:21:57:87:15:bf:86:cf:fe:97:63:d1:fe:83:
                    fc:4d:50:40:2b:e7:2d:19:d7:ca:f8:b6:19:0d:ac:
                    3d:3f:0e:b5:99:e1:09:d0:1a:32:1c:97:74:2d:3d:
                    77:c3:4a:61:df:a6:1e:eb:29:e6:d7:6f:51:0c:5d:
                    74:ae:2c:e7:81:bb:09:56:d6:4c:e9:2d:d3:4b:2e:
                    f0:c6:93:a9:d1:45:75:6d:88:5c:5e:71:47:f1:9e:
                    7b:15:af:85:3d:a6:45:62:da:f0:fe:b2:88:87:13:
                    7f:9d:8d:22:cf:50:f0:65:d4:8e:fe:96:4f:4e:2f:
                    93:e8:57:62:81:b8:93:ae:8b:d7:a8:8c:14:f0:cf:
                    4f:95:ef:9c:1d:06:8a:36:67:c4:4f:aa:56:cf:ff:
                    6b:78:ad:67:8e:58:5a:0a:10:99:02:3c:90:87:95:
                    62:f1:af:8a:2e:83:1b:fc:54:95:58:03:68:4d:8c:
                    4a:1b:bf:fa:79:65:9f:d4:09:97:55:8d:74:75:e8:
                    0a:cb:97:e4:69:86:17:f7:9b:df:e6:6a:e3:c7:0a:
                    1a:b6:bd:8b:2b:6a:dc:2f:7f:7f:58:b0:bd:23:09:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B9:45:6D:07:FA:EE:C4:29:06:86:93:B0:7A:B7:7C:32:63:50:71
            X509v3 Authority Key Identifier:
                keyid:BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:1e:45:9d:7e:eb:70:4e:2e:89:c7:05:48:5a:b4:8d:85:
         df:82:01:da:e8:d4:22:80:9e:bf:94:0e:f2:55:71:ca:95:a3:
         ce:7e:b9:91:99:29:15:57:57:f6:0e:8f:8e:52:67:59:ef:08:
         51:49:0b:5c:e2:db:09:5f:f2:cb:e6:46:75:95:4e:8b:90:1b:
         b4:bd:5c:89:bb:d9:d5:40:0c:74:79:1d:27:ec:b2:bc:79:d1:
         dc:42:97:ca:9e:4f:47:74:c7:b2:4b:18:4c:82:7c:ff:c3:56:
         c7:da:f9:1b:61:61:f0:38:c2:0f:28:68:60:4d:90:c7:9e:c7:
         cf:83:a1:23:c4:61:ce:ec:b6:4d:ab:b2:02:e5:16:74:37:85:
         12:3b:c1:81:8c:9c:c2:f3:12:d9:4e:f2:b5:36:59:89:ee:32:
         c3:6f:9f:5b:4b:98:87:af:6b:4e:ec:5f:6b:8a:6b:da:db:fd:
         4d:1a:95:9d:94:45:31:3c:c1:ea:6b:6f:b4:58:56:08:62:46:
         16:70:64:93:ad:79:d7:18:ea:a5:d0:39:53:f2:a1:48:ab:c5:
         45:10:99:da:68:25:4a:ac:53:04:70:2e:9d:39:a5:77:95:d1:
         2f:f6:53:d8:08:b7:b1:06:1c:a6:31:b4:05:e7:5c:06:bf:bb:
         09:79:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org