Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32322d3234203d3e20323638363338.roa
File:                     34352e3136342e3232342e302f32322d3234203d3e20323638363338.roa (raw, json)
Hash identifier:          yTXDALeFJbOIBl0cdLXgsfvkk33qObO2OravQvGT8iU=
Subject key identifier:   CD:64:7F:A3:3A:50:02:48:87:BA:D0:CA:26:BA:CE:90:2C:74:B4:AB
Certificate issuer:       /CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
Certificate serial:       24FF3817E8B7BBABD6E11461698A09EE95B8B0A7
Authority key identifier: AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32322d3234203d3e20323638363338.roa
Signing time:             Thu 02 Dec 2021 15:00:00 +0000
ROA not before:           Thu 02 Dec 2021 14:55:00 +0000
ROA not after:            Fri 02 Dec 2022 15:00:00 +0000
asID:                     268638
IP address blocks:        45.164.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ff:38:17:e8:b7:bb:ab:d6:e1:14:61:69:8a:09:ee:95:b8:b0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
        Validity
            Not Before: Dec  2 14:55:00 2021 GMT
            Not After : Dec  2 15:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:70:a5:af:97:b6:6e:41:6a:c3:69:02:d1:
                    dd:ac:8b:92:e6:e1:4f:0f:87:d4:ea:75:e3:e6:f1:
                    ec:5d:f2:56:5c:57:c4:68:fa:6f:e2:59:6e:bc:c9:
                    eb:e1:07:ea:f1:ac:b0:4b:8a:10:58:69:f2:c4:72:
                    dc:62:75:b8:5b:4b:fb:1b:9d:7d:57:4f:fb:2b:7f:
                    c7:ad:62:82:32:c4:e0:8e:1b:2c:f1:56:57:38:ac:
                    ed:da:96:00:26:ad:e2:21:e0:dd:0e:19:d2:0b:f3:
                    1e:92:67:56:d5:fa:b9:8f:91:95:72:9d:70:dd:e3:
                    fc:c4:fb:80:d9:ff:a9:7d:9e:f6:85:42:a1:84:0e:
                    1e:96:2b:b2:c9:a2:d3:8d:8d:12:f5:4b:33:48:1e:
                    e3:4c:bb:ec:33:0a:9b:94:a7:59:92:02:73:d8:43:
                    b6:27:bc:2c:b1:93:d4:b9:ec:cc:da:53:98:e6:d9:
                    24:92:28:71:95:55:46:bf:ca:b4:9a:47:52:27:d2:
                    a6:50:d8:f9:0f:71:f0:8e:1b:e6:85:15:e2:32:61:
                    0d:d9:f8:d7:a9:b3:48:0d:eb:9f:8e:0b:cc:fe:41:
                    af:a7:44:92:e4:2f:0c:f0:3c:41:ac:ac:f9:f9:e1:
                    9a:80:de:da:cb:22:75:68:cf:d7:2c:83:e0:96:22:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:64:7F:A3:3A:50:02:48:87:BA:D0:CA:26:BA:CE:90:2C:74:B4:AB
            X509v3 Authority Key Identifier:
                keyid:AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32322d3234203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:dc:57:d9:d1:0c:66:63:d1:14:41:1c:3f:50:c8:f0:74:
         6c:98:6c:ef:36:7d:07:fc:ce:81:ef:51:02:b7:b3:7d:cb:06:
         a1:0b:ec:10:aa:1d:7a:a7:24:81:f1:1b:21:e3:51:0b:02:86:
         64:3a:4f:a4:6b:e6:3f:92:63:17:f0:a1:59:3d:88:4f:f3:b2:
         fe:bb:a0:d9:cd:8c:3e:01:21:56:ac:97:29:57:83:95:8c:c4:
         2d:dc:7e:d5:f8:20:eb:8b:9c:19:e6:88:a4:03:cb:2f:4c:1f:
         ee:2d:a6:6d:40:0e:ae:18:00:10:62:bf:5c:7d:0b:ab:35:42:
         84:ce:9d:23:fb:5d:09:10:f9:da:32:b3:2f:43:01:74:50:fd:
         8c:b9:a2:29:61:56:fd:e2:f6:a8:26:bf:c3:b2:46:89:43:42:
         20:7e:46:3b:c6:87:9b:ec:0d:ad:67:46:cb:ea:fc:cb:42:82:
         26:04:cf:c2:6b:64:fb:21:99:ed:9b:ae:a4:c7:19:6e:fd:d3:
         45:c0:59:6a:28:73:9c:68:42:b5:cd:38:23:9a:b9:b9:83:cd:
         7b:e6:e0:14:a7:c0:aa:db:b6:f8:d8:a3:5f:8f:85:8e:c8:2d:
         27:04:7a:a1:52:98:fd:e3:e9:bd:af:b3:a8:f4:00:5e:00:82:
         f7:ac:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org