Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32332d3233203d3e20323637393939.roa
File:                     34352e3136372e3130382e302f32332d3233203d3e20323637393939.roa (raw, json)
Hash identifier:          bLJF40tqdJrvuhH5Zgcd0LM1+rysOFlEg7pu9RX4kNc=
Subject key identifier:   1A:ED:D4:E0:2E:B9:38:2E:AB:15:9C:A3:A0:F6:09:C2:AA:03:C1:B2
Certificate issuer:       /CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
Certificate serial:       34789AC9C1CDFAF2E6EA580ACE98199B8BA85C61
Authority key identifier: 96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32332d3233203d3e20323637393939.roa
Signing time:             Wed 28 Sep 2022 18:50:37 +0000
ROA not before:           Wed 28 Sep 2022 18:45:37 +0000
ROA not after:            Wed 27 Sep 2023 18:50:37 +0000
asID:                     267999
IP address blocks:        45.167.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:78:9a:c9:c1:cd:fa:f2:e6:ea:58:0a:ce:98:19:9b:8b:a8:5c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
        Validity
            Not Before: Sep 28 18:45:37 2022 GMT
            Not After : Sep 27 18:50:37 2023 GMT
        Subject: CN=1AEDD4E02EB9382EAB159CA3A0F609C2AA03C1B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:20:e2:79:f4:3c:bc:30:30:61:c8:32:62:
                    f4:62:a9:94:d8:3e:23:92:37:32:b6:85:ce:91:b8:
                    14:0e:ea:dd:8a:6d:83:6f:4c:64:d2:a6:07:a2:a5:
                    96:67:82:f9:ed:0f:9b:89:1c:33:ad:cd:6c:6d:8e:
                    90:eb:27:ef:d0:dc:c1:81:45:56:71:6d:7c:db:ea:
                    2b:e3:e1:8f:dd:02:c8:53:99:2f:0b:98:da:53:a2:
                    5e:36:88:ae:34:e8:a4:f5:c9:5c:f3:c8:72:0a:89:
                    59:43:d9:e7:fe:b7:ce:ea:93:10:5e:8a:17:13:a9:
                    f3:26:f4:6d:ec:70:14:10:11:42:e7:44:38:ff:89:
                    af:54:20:04:c6:d3:3d:73:77:6c:f3:36:6c:30:58:
                    aa:e9:b5:d5:9c:1a:5a:04:7f:90:66:f0:8c:01:13:
                    ab:81:ef:f8:e9:15:ac:40:7c:eb:00:ac:f2:a1:9f:
                    b7:85:6d:47:09:e5:c5:ac:b3:da:90:5d:0a:d5:78:
                    c2:d6:b0:c5:c0:1c:d2:99:bd:fc:3e:d0:1a:a2:b5:
                    a0:fa:16:c2:59:ac:fd:e1:38:ff:ec:20:46:c1:c5:
                    6e:1b:61:a9:15:8f:df:ba:42:66:fc:1f:e8:47:dc:
                    3e:61:92:c8:81:0d:53:1e:cb:27:dd:7d:d5:e1:51:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:ED:D4:E0:2E:B9:38:2E:AB:15:9C:A3:A0:F6:09:C2:AA:03:C1:B2
            X509v3 Authority Key Identifier:
                keyid:96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32332d3233203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:2d:ae:e2:6b:24:f9:24:ec:26:be:43:72:54:ca:e1:7c:fb:
         70:0a:2f:c0:c8:ec:f4:29:ff:a2:ef:aa:9c:87:93:60:33:58:
         94:68:cb:c7:b4:32:52:f6:2a:40:65:53:b7:c9:9c:be:ec:44:
         5a:e8:e9:32:f5:c3:f1:37:6d:40:c2:c6:5c:2e:22:c3:1a:a6:
         e4:7d:58:b8:04:74:24:8a:5c:85:cf:6a:8c:85:51:42:a6:ac:
         82:2a:7b:84:75:49:18:16:bb:87:9b:26:c9:8f:c2:c6:37:b3:
         a9:a3:3a:b7:6a:66:0d:39:ed:07:31:90:6d:1b:6b:20:b1:d3:
         5f:89:d4:05:49:f3:b8:a1:ff:4b:e2:a8:80:03:4c:3a:be:59:
         90:5c:ac:af:23:11:ed:c4:c1:fc:fb:39:a9:18:05:96:e0:60:
         da:01:86:93:fe:75:0f:ee:b1:1c:71:1f:be:12:7f:ab:5c:04:
         66:db:be:6f:ac:37:4c:45:2e:a6:a7:08:49:c2:eb:8e:0c:b9:
         ef:b9:19:ed:d5:a2:97:4d:8f:c3:9c:7f:c8:94:13:ae:d8:e3:
         0d:35:f9:c4:78:7a:51:3f:2e:3f:46:be:5b:fb:29:af:6a:8a:
         56:7a:b0:00:ea:1b:e4:4e:32:09:e6:50:a8:e6:7f:38:ed:28:
         3e:e0:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org