Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa
File:                     34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa (raw, json)
Hash identifier:          GcjT+1EuHvMamEBmjhO6tKUyXVSVxfd5RkfQfdOyaD4=
Subject key identifier:   2C:02:D3:DE:99:47:07:D6:93:70:B1:D1:6E:65:A1:76:82:03:0F:61
Certificate issuer:       /CN=BAF2F00AF9A4B0421C581606DECAACE42785F24D
Certificate serial:       0A3F0E3F3BC529B698066EBA6A8C3E69A46726E5
Authority key identifier: BA:F2:F0:0A:F9:A4:B0:42:1C:58:16:06:DE:CA:AC:E4:27:85:F2:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAF2F00AF9A4B0421C581606DECAACE42785F24D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa
Signing time:             Mon 08 Apr 2024 22:30:36 +0000
ROA not before:           Mon 08 Apr 2024 22:25:36 +0000
ROA not after:            Mon 07 Apr 2025 22:30:36 +0000
asID:                     269537
IP address blocks:        45.188.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3f:0e:3f:3b:c5:29:b6:98:06:6e:ba:6a:8c:3e:69:a4:67:26:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF2F00AF9A4B0421C581606DECAACE42785F24D
        Validity
            Not Before: Apr  8 22:25:36 2024 GMT
            Not After : Apr  7 22:30:36 2025 GMT
        Subject: CN=2C02D3DE994707D69370B1D16E65A17682030F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:63:34:4d:63:a9:01:8a:3f:67:d0:65:e6:
                    fe:ac:cf:81:8d:38:12:71:84:85:e8:1a:83:1a:fc:
                    b5:76:4f:f4:a3:4b:0f:ab:22:0c:ce:32:99:f3:ea:
                    88:be:f3:0b:66:a1:89:3b:0f:8c:d6:1b:47:14:4a:
                    9c:9f:85:64:8c:89:8c:20:f1:5f:97:b1:00:69:93:
                    c8:d7:8b:0d:dc:6d:75:e2:c1:73:ee:28:67:7f:fb:
                    c8:a4:cb:65:3a:cf:1c:09:d9:bd:18:81:73:3b:b5:
                    1f:4c:5e:91:98:29:6a:41:57:ff:54:c0:2a:1e:91:
                    68:f9:ef:18:01:4c:f2:10:0e:8a:d7:cb:6e:7a:ce:
                    5f:ad:af:d1:df:46:ee:e0:35:ba:87:05:86:10:e8:
                    3b:b6:6b:a8:cc:f6:71:00:70:76:a2:7c:4a:aa:f7:
                    90:7d:17:71:4e:bb:64:4a:8a:21:bd:4d:75:26:cf:
                    b5:f1:44:ae:df:1d:96:61:a8:8e:2d:2f:f3:28:83:
                    f1:1b:77:ba:b1:d8:5d:0f:3e:d7:d2:38:af:25:03:
                    11:7b:e2:30:08:ed:03:3c:92:a1:2f:44:c8:ee:58:
                    0a:f1:81:5f:11:3f:e4:66:89:84:ae:80:96:c6:5f:
                    60:f0:bc:b2:49:11:2b:eb:ad:d6:09:ae:cc:da:49:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:02:D3:DE:99:47:07:D6:93:70:B1:D1:6E:65:A1:76:82:03:0F:61
            X509v3 Authority Key Identifier:
                keyid:BA:F2:F0:0A:F9:A4:B0:42:1C:58:16:06:DE:CA:AC:E4:27:85:F2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/BAF2F00AF9A4B0421C581606DECAACE42785F24D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAF2F00AF9A4B0421C581606DECAACE42785F24D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:a8:38:b3:1e:48:25:25:a7:4e:ef:f4:04:a9:64:42:41:80:
         2b:a4:35:f7:83:21:b4:60:06:3f:a8:c9:b7:96:fa:50:c1:85:
         7b:f0:98:90:95:4c:f0:0c:41:3d:46:b0:b9:5f:af:9c:0e:06:
         e5:55:19:d1:97:67:d8:37:44:8a:02:b6:bb:33:44:0f:ef:76:
         3a:6a:e0:0c:b3:55:7a:87:72:1d:2f:2b:93:4a:e8:2b:76:92:
         a4:c4:1b:61:53:25:be:9d:d4:b6:7d:02:e7:1a:43:fa:db:e3:
         58:e5:de:d9:01:3f:bb:83:36:fe:29:60:00:df:cf:6b:cc:2f:
         9e:d0:73:4d:78:1e:4f:be:40:43:ff:4f:c4:15:f5:b8:34:28:
         8d:f9:f4:64:55:5b:3c:ec:74:52:8f:04:0f:45:68:f0:68:5b:
         63:ab:f6:4c:3c:d7:18:5a:f4:5b:46:0a:ac:92:05:84:56:cd:
         de:90:87:f4:db:30:1a:e6:0f:8d:ee:99:8a:10:84:11:8a:77:
         47:da:59:99:60:d5:1e:69:22:17:f7:28:0e:e1:95:41:cd:ec:
         82:15:16:a9:57:c1:27:da:56:62:c4:81:cb:75:25:ba:e4:5a:
         a7:d3:e8:1d:34:75:8c:f9:ae:b5:a2:7d:9d:3f:55:ff:bf:c0:
         89:3e:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org