Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130392e302f32342d3234203d3e20323637393939.roa
File:                     34352e3136372e3130392e302f32342d3234203d3e20323637393939.roa (raw, json)
Hash identifier:          tEWWwMhkyTuwn6SEEKp2pmjfLuMGEc2QdpRJ14hCcPQ=
Subject key identifier:   31:C1:E6:94:EB:34:D0:C6:36:E5:0D:9E:9C:11:20:D6:E9:DD:AB:8F
Certificate issuer:       /CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
Certificate serial:       1B2B072909C11EA1F6F323CA05D79F0BB5A5FE70
Authority key identifier: 96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130392e302f32342d3234203d3e20323637393939.roa
Signing time:             Wed 28 Sep 2022 18:50:37 +0000
ROA not before:           Wed 28 Sep 2022 18:45:37 +0000
ROA not after:            Wed 27 Sep 2023 18:50:37 +0000
asID:                     267999
IP address blocks:        45.167.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2b:07:29:09:c1:1e:a1:f6:f3:23:ca:05:d7:9f:0b:b5:a5:fe:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
        Validity
            Not Before: Sep 28 18:45:37 2022 GMT
            Not After : Sep 27 18:50:37 2023 GMT
        Subject: CN=31C1E694EB34D0C636E50D9E9C1120D6E9DDAB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:a7:f1:68:4b:3f:a3:6d:61:97:03:df:14:
                    8d:35:0d:3f:5e:63:92:85:7e:c6:d3:4e:5d:ee:81:
                    2b:5a:ca:bf:05:19:0c:32:76:f4:9f:37:ef:83:5b:
                    48:82:61:e1:50:c5:6d:1b:79:d6:7d:f0:e1:9d:9a:
                    20:52:bb:1f:a6:8c:4c:24:e8:cf:51:3d:04:c0:0e:
                    9f:95:5b:23:fd:44:5b:54:34:59:4f:6f:35:73:03:
                    fc:c3:ba:9d:cc:83:85:ef:fa:5b:fa:96:16:4d:98:
                    6e:29:e2:ac:f4:ad:b0:7f:09:88:aa:d3:67:ab:31:
                    53:5f:b2:04:d9:c3:0d:b5:50:1c:b9:68:40:27:ce:
                    ba:47:c4:b1:db:12:31:c6:2b:b2:20:ea:05:9a:61:
                    b9:16:14:01:72:34:7f:cf:cc:5e:96:58:aa:e2:10:
                    34:9b:ef:58:cc:3e:5f:d6:93:e9:87:56:dc:67:e4:
                    82:72:8e:75:b3:7c:5f:bb:82:63:f9:2d:34:86:62:
                    4d:75:52:e6:6d:1e:5d:95:66:c2:ff:15:c9:80:88:
                    a4:4d:9e:e1:07:36:d7:83:9e:7c:07:33:3f:d7:57:
                    a7:49:39:4d:97:91:86:17:9f:e4:9f:f9:50:55:b7:
                    e9:c5:46:43:2e:10:28:5e:82:92:f9:8a:7f:35:f8:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:E6:94:EB:34:D0:C6:36:E5:0D:9E:9C:11:20:D6:E9:DD:AB:8F
            X509v3 Authority Key Identifier:
                keyid:96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130392e302f32342d3234203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:30:e7:02:e1:0e:fe:80:52:df:3a:98:f3:5b:23:0f:73:33:
         7a:b9:71:29:f7:f4:95:a4:49:e6:a7:86:ba:ed:0b:bd:8b:05:
         02:99:8d:cd:fb:ea:c1:23:51:66:ad:e9:01:6e:45:01:8d:6f:
         03:6a:4e:97:11:8a:88:d3:b9:a6:9d:69:d8:7b:56:70:2a:2e:
         36:3e:0d:18:a5:0a:51:d4:3f:af:57:c7:0d:4b:1d:b1:4d:e8:
         16:1d:8c:de:1b:0f:02:14:a8:84:4d:95:13:05:7c:34:0d:17:
         55:15:28:02:d0:09:66:62:8d:36:46:bc:5d:67:10:a4:5d:8e:
         77:5e:59:47:35:92:97:9a:b4:a3:f6:cc:39:cb:f0:1d:56:88:
         ef:f2:d1:b0:67:ac:d9:47:98:8c:a2:20:2b:8a:00:6e:bc:ff:
         87:63:4d:4c:46:4e:6f:9c:59:f1:cf:37:0c:f4:a4:b4:e3:70:
         ef:e5:e6:f1:85:da:05:16:8a:8e:68:74:a3:5c:26:1c:5d:3f:
         de:57:de:a9:e9:bb:1d:ec:b6:37:06:3f:2f:4b:35:2b:66:16:
         a7:22:42:0c:29:b3:65:5b:2d:d0:01:02:fa:49:4e:ff:c2:15:
         a9:39:dc:2f:8a:e4:1d:7a:62:ea:49:fe:87:03:41:f1:5b:9b:
         a7:c9:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org