Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3131312e302f32342d3234203d3e20323637393939.roa
File:                     34352e3136372e3131312e302f32342d3234203d3e20323637393939.roa (raw, json)
Hash identifier:          WL4ke3RozvyQp8csa0bLVeRDuLX6hBBGMfEJhMhTbp8=
Subject key identifier:   AC:F0:62:D5:53:7F:A6:69:77:9E:84:CE:AA:75:69:7E:CF:9E:2C:6E
Certificate issuer:       /CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
Certificate serial:       0F6A0F46295E896F30BB21EFCF771DABF4359211
Authority key identifier: 96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3131312e302f32342d3234203d3e20323637393939.roa
Signing time:             Wed 28 Sep 2022 18:50:37 +0000
ROA not before:           Wed 28 Sep 2022 18:45:37 +0000
ROA not after:            Wed 27 Sep 2023 18:50:37 +0000
asID:                     267999
IP address blocks:        45.167.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6a:0f:46:29:5e:89:6f:30:bb:21:ef:cf:77:1d:ab:f4:35:92:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968E5CAEACB1D4F34255AEBF51A78C194056E1DC
        Validity
            Not Before: Sep 28 18:45:37 2022 GMT
            Not After : Sep 27 18:50:37 2023 GMT
        Subject: CN=ACF062D5537FA669779E84CEAA75697ECF9E2C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:9a:67:11:20:fb:3f:5c:e6:99:66:0c:ea:
                    1f:84:3e:4c:59:77:9a:a1:c4:82:5b:01:79:18:c9:
                    32:29:78:ff:d5:00:2b:10:cb:97:4f:27:0d:0d:33:
                    3a:f4:da:bf:4a:77:c9:f5:f3:52:2b:27:47:75:c4:
                    49:db:07:b9:9d:97:d6:64:63:d4:d5:be:6b:0a:98:
                    38:d2:70:78:2e:c6:f9:37:5b:ab:58:73:ff:f5:d3:
                    5d:3a:51:d2:e5:b0:21:01:f0:13:79:6e:3e:9c:d4:
                    e9:4b:72:68:e9:88:ea:dc:d8:70:17:f9:e9:e5:cb:
                    5c:ed:09:6a:72:41:9d:4d:2e:91:24:2b:86:51:4e:
                    84:80:ac:8c:a9:98:77:d5:2e:4e:6d:9b:64:cd:56:
                    c0:03:63:fa:18:2e:41:6d:b7:74:6c:3a:34:8a:36:
                    34:97:2d:e7:2a:66:65:74:a8:73:e1:e4:7d:82:1e:
                    7f:80:da:85:f9:51:4a:7b:8e:98:8d:e5:ce:ad:74:
                    7f:44:53:af:20:43:d7:85:98:34:ba:51:41:a5:3b:
                    0a:6e:6e:04:b1:e3:4f:69:3b:93:62:9b:ba:e0:77:
                    ae:16:62:da:29:52:80:6c:85:cd:b3:d8:1e:a3:1d:
                    a8:7e:23:74:5b:89:29:f7:0a:f9:3f:e9:fa:c6:2b:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F0:62:D5:53:7F:A6:69:77:9E:84:CE:AA:75:69:7E:CF:9E:2C:6E
            X509v3 Authority Key Identifier:
                keyid:96:8E:5C:AE:AC:B1:D4:F3:42:55:AE:BF:51:A7:8C:19:40:56:E1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/968E5CAEACB1D4F34255AEBF51A78C194056E1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3131312e302f32342d3234203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:76:94:17:e3:e3:b0:c9:aa:05:46:9a:ad:0d:b5:ff:21:d6:
         50:a4:bd:96:92:53:01:00:39:e0:e6:89:1f:87:fe:2f:2c:ea:
         bd:21:90:0b:56:6e:06:64:21:17:63:61:47:ed:3b:d3:ba:28:
         07:ce:a4:cd:22:81:19:a3:ea:9d:bd:d9:cf:6c:c9:6a:2a:71:
         bd:d4:74:11:e1:24:32:4b:5b:73:e0:32:1b:5a:33:a6:e6:bb:
         c6:9c:b0:3c:29:57:dd:b7:42:a3:ee:21:f0:be:ed:f3:82:34:
         ef:52:10:10:16:10:39:43:8c:29:18:13:7b:5c:c8:d4:6a:b8:
         8f:62:3f:7f:d1:86:99:dc:da:49:77:b8:81:70:f5:f6:71:20:
         68:a1:28:98:aa:2d:63:36:de:9d:75:5b:81:0b:4e:df:5d:48:
         6f:1a:c4:10:fa:63:ec:4b:df:d8:45:25:1a:74:c0:12:18:94:
         9f:2e:16:85:84:b3:c5:31:72:d9:46:a0:54:9f:bb:21:2b:e2:
         21:7b:5d:57:7a:85:8c:fa:f4:46:0e:eb:c5:fa:41:38:94:e9:
         a4:c6:e4:55:e2:fa:54:99:b2:bf:9a:a4:74:56:67:f5:cc:70:
         55:10:2e:b3:52:5c:f5:1a:4f:49:71:be:18:0b:6b:50:74:3c:
         ce:f9:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org