Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa
File:                     34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa (raw, json)
Hash identifier:          //wn5aygnOCyKubVqGL7jihvsqywXJPi0Vjo5QdrfHs=
Subject key identifier:   5B:33:D4:15:A5:01:74:AB:1E:88:E4:50:77:97:86:AC:D1:B9:7F:96
Certificate issuer:       /CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
Certificate serial:       45EA8756E33692FFE726975280EFF058EBAF47C7
Authority key identifier: EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa
Signing time:             Fri 23 Feb 2024 14:40:54 +0000
ROA not before:           Fri 23 Feb 2024 14:35:54 +0000
ROA not after:            Fri 21 Feb 2025 14:40:54 +0000
asID:                     268638
IP address blocks:        45.164.224.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ea:87:56:e3:36:92:ff:e7:26:97:52:80:ef:f0:58:eb:af:47:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
        Validity
            Not Before: Feb 23 14:35:54 2024 GMT
            Not After : Feb 21 14:40:54 2025 GMT
        Subject: CN=5B33D415A50174AB1E88E450779786ACD1B97F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:4b:00:89:82:82:e3:bc:53:d8:22:10:aa:
                    95:93:34:b3:90:cf:e9:85:b0:06:1a:e8:8f:e3:db:
                    16:de:11:3b:7f:95:af:8c:2e:35:23:6e:dc:92:8e:
                    ec:18:d5:2a:b6:0e:89:c4:77:0d:a8:5c:99:dd:ed:
                    54:eb:1d:f1:a6:aa:e1:37:fa:55:40:35:a6:79:10:
                    d2:43:a8:b4:ab:08:20:a7:36:a5:bb:3b:48:7d:50:
                    26:2f:9e:87:8a:c1:e1:87:1b:f9:a5:65:4f:11:c7:
                    19:3b:32:d7:99:c9:d0:f3:59:51:07:cb:49:55:34:
                    7a:6c:3d:40:a8:2b:5b:81:7f:5e:c7:bc:a2:36:08:
                    aa:09:0a:36:f4:d3:9a:dd:24:f1:24:57:c4:22:fb:
                    d0:62:86:d1:a1:2b:b7:31:79:4f:75:4c:97:b8:7c:
                    1b:79:e7:5b:5c:1b:87:4b:2f:53:4b:6f:f9:cf:77:
                    8f:47:10:20:ff:08:83:cb:1e:14:6f:38:4d:df:ad:
                    bb:0d:48:da:60:d8:6b:ec:85:cd:cd:12:9f:d7:29:
                    9a:48:a8:bd:ac:f3:63:95:dd:f5:fb:9a:bc:9c:bf:
                    52:2c:a5:75:b8:90:66:d8:27:bf:fa:8a:96:b7:d3:
                    03:ab:f4:16:e2:89:9f:ed:94:ed:73:8c:55:b0:fc:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:D4:15:A5:01:74:AB:1E:88:E4:50:77:97:86:AC:D1:B9:7F:96
            X509v3 Authority Key Identifier:
                keyid:EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:12:38:83:d6:6f:6b:5e:65:af:3b:74:bb:67:53:de:7f:
         7a:a4:e7:b5:82:d9:cd:f3:05:80:a4:b9:ed:e6:1d:2e:89:5b:
         c2:b3:76:14:f5:9a:8f:81:e2:7d:cd:a1:7d:0d:45:93:40:00:
         f5:01:54:3c:36:93:74:dc:64:76:05:7b:4e:67:d6:0f:c2:f2:
         bf:93:dc:b8:cf:0a:ec:54:96:cc:36:08:db:eb:b1:b1:5e:d7:
         f3:0a:56:42:58:13:50:be:4e:ae:26:c0:6b:15:a1:ac:39:aa:
         68:54:36:cc:53:0d:9d:ed:12:b7:3b:6b:66:ad:cb:b6:2b:bf:
         e2:be:bd:cd:9a:d8:71:f7:ca:1a:af:15:f2:d3:39:c0:31:f1:
         88:37:8b:72:83:d3:27:2d:5a:5e:39:0b:29:9e:c1:9b:65:d2:
         16:02:49:e4:07:5d:aa:4d:69:ba:06:db:bd:af:e8:97:3a:c7:
         ed:51:8f:cd:6d:74:be:f9:c2:5c:18:21:ad:97:ea:cd:9f:d0:
         ea:1d:f9:27:2d:d8:ad:3b:c1:98:00:8c:a5:ed:00:e0:67:9d:
         3a:29:d6:42:20:43:e2:4c:cf:3d:43:9e:20:34:47:05:db:b5:
         91:1f:16:cd:ea:1d:88:e2:86:4e:67:16:d6:a5:36:07:c1:34:
         0e:24:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org