Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32322d3232203d3e20323638363338.roa
File:                     34352e3136342e3232342e302f32322d3232203d3e20323638363338.roa (raw, json)
Hash identifier:          j1mozrgWiOO1lCHJ5CliQnPSxqNANEw2bX+uwCinI2c=
Subject key identifier:   0A:64:C7:B4:1F:0D:8B:A8:85:19:61:BB:A1:4B:A9:F5:BC:C5:50:90
Certificate issuer:       /CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
Certificate serial:       273CA41E655495134F5688E9575FB4200DE9507C
Authority key identifier: EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32322d3232203d3e20323638363338.roa
Signing time:             Fri 23 Feb 2024 14:40:54 +0000
ROA not before:           Fri 23 Feb 2024 14:35:54 +0000
ROA not after:            Fri 21 Feb 2025 14:40:54 +0000
asID:                     268638
IP address blocks:        45.164.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3c:a4:1e:65:54:95:13:4f:56:88:e9:57:5f:b4:20:0d:e9:50:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
        Validity
            Not Before: Feb 23 14:35:54 2024 GMT
            Not After : Feb 21 14:40:54 2025 GMT
        Subject: CN=0A64C7B41F0D8BA8851961BBA14BA9F5BCC55090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:b7:6d:85:bd:b3:b0:58:20:a1:a0:45:cb:
                    54:bc:d7:47:bd:27:ba:09:53:03:7d:a0:68:1d:82:
                    48:63:b7:d2:c7:b1:81:50:e6:4f:01:70:6b:22:d6:
                    6c:82:0d:d0:62:d3:53:6c:be:97:0d:bf:61:cf:b2:
                    8c:28:29:a4:32:d5:69:7f:17:a2:18:51:b6:2f:b1:
                    62:60:24:3d:ac:3a:23:2a:f6:2e:d3:17:be:81:1e:
                    c5:0b:3f:97:cb:0e:ab:b3:6f:da:7e:c1:a6:97:26:
                    50:6d:e2:96:7a:d5:fb:9f:a1:59:c7:28:16:91:27:
                    68:ad:d0:3b:6f:75:c7:60:45:b9:d5:38:47:ab:8a:
                    fa:d9:dd:a3:f3:19:99:16:77:d3:be:fb:56:9d:98:
                    dc:c8:4b:97:f6:c2:cd:55:8c:66:d7:dc:98:68:62:
                    ff:c4:48:f0:19:33:44:33:0b:7d:02:64:61:05:0f:
                    ad:09:bd:c9:0d:7e:9d:68:84:42:cd:1c:f4:42:3c:
                    ee:bb:2b:4a:0e:1c:f0:3a:07:9b:e6:f2:72:ed:91:
                    1a:17:74:ba:19:47:80:d9:47:10:f6:52:88:64:bb:
                    c9:95:39:09:08:ae:b7:d8:5d:77:99:da:5c:4f:84:
                    76:d1:30:27:29:e3:61:7e:5f:0c:f6:64:c9:33:90:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:64:C7:B4:1F:0D:8B:A8:85:19:61:BB:A1:4B:A9:F5:BC:C5:50:90
            X509v3 Authority Key Identifier:
                keyid:EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32322d3232203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:8b:1f:25:fe:c5:a9:e1:8a:ac:c4:8b:18:a1:e0:c8:53:
         4a:d4:4d:8b:6a:0c:fb:0e:c7:bf:64:d7:07:25:b0:af:2b:f9:
         76:d1:1c:af:05:56:a9:8b:9e:1f:c7:b0:df:57:f2:90:72:c5:
         92:fa:f4:68:fd:03:fc:cf:a7:e2:ce:47:33:11:26:f6:a3:ef:
         a0:cd:b2:f9:63:dc:fb:76:f7:9e:cc:d8:da:2e:9f:ba:28:e2:
         ba:6f:7e:90:e2:7a:e1:7e:72:a3:9d:08:7a:83:5e:86:34:96:
         1b:49:b3:55:27:ea:16:e9:00:18:2c:52:62:dd:93:8b:bc:75:
         fc:ee:b6:d7:c9:21:88:d3:c0:1b:6d:dc:69:2d:99:9e:8a:e4:
         9b:51:e9:ac:4e:ea:54:a5:90:94:32:a6:0d:e8:d4:63:71:7f:
         f1:2e:86:20:6d:ee:47:75:c4:1a:f5:06:a7:55:a5:91:3f:04:
         5d:48:15:7f:38:fd:f2:57:be:b5:8e:18:43:20:59:82:eb:9f:
         a5:98:e0:af:26:2d:32:9c:e3:1a:f9:ac:fd:7c:aa:1f:b7:e2:
         46:8b:1e:c0:82:f1:9d:e7:bc:dc:95:4f:03:af:61:a7:e4:13:
         a5:58:14:ea:fc:16:ed:de:67:5e:10:e5:bb:68:0d:46:9a:8d:
         03:f3:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org