Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232352e302f32342d3234203d3e20323638363338.roa
File:                     34352e3136342e3232352e302f32342d3234203d3e20323638363338.roa (raw, json)
Hash identifier:          wBgSMHfzf8X2uFbYmn3rdx30yuOoGX/Kk3i+RNMPtdo=
Subject key identifier:   73:09:D2:AA:9A:CC:3D:81:16:D8:66:43:07:B7:DC:13:05:3B:C8:CF
Certificate issuer:       /CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
Certificate serial:       4A841F8D1B22AB5F6678A57BE898315B7D455A87
Authority key identifier: EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232352e302f32342d3234203d3e20323638363338.roa
Signing time:             Fri 24 Mar 2023 14:06:24 +0000
ROA not before:           Fri 24 Mar 2023 14:01:24 +0000
ROA not after:            Fri 22 Mar 2024 14:06:24 +0000
asID:                     268638
IP address blocks:        45.164.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:84:1f:8d:1b:22:ab:5f:66:78:a5:7b:e8:98:31:5b:7d:45:5a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
        Validity
            Not Before: Mar 24 14:01:24 2023 GMT
            Not After : Mar 22 14:06:24 2024 GMT
        Subject: CN=7309D2AA9ACC3D8116D8664307B7DC13053BC8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:e1:82:4b:ad:f0:12:fa:ae:a2:d9:53:d9:
                    d6:65:bd:0e:fe:6a:8f:88:3c:7d:38:67:6e:27:75:
                    84:8c:ef:a1:d0:b5:4b:85:a0:40:e4:11:ae:91:8e:
                    73:5a:28:1c:9d:65:ef:4f:62:da:02:2b:74:36:76:
                    32:2b:dc:66:57:9d:cc:b4:37:fd:0b:c6:6c:be:aa:
                    14:ca:3e:93:3b:72:8f:e2:44:31:f6:13:30:f2:fe:
                    1b:b1:b3:82:24:47:f2:0c:27:f9:23:9b:bd:02:09:
                    2c:39:70:69:ca:eb:33:77:5f:b8:a4:91:b0:20:38:
                    c7:a9:f7:60:d8:37:cd:72:35:23:92:fa:7b:99:4f:
                    61:6d:b6:d3:1e:a7:75:22:3a:a8:fb:a3:b9:0d:b0:
                    45:d0:d3:7c:0c:7e:0d:98:46:5c:b5:94:7f:28:a1:
                    f0:2b:e2:37:77:d6:7b:d4:54:ab:f2:25:37:e5:5b:
                    e1:bf:93:31:d9:62:de:89:5f:d1:8b:b6:f3:3c:a9:
                    da:48:19:28:83:9a:3b:af:f4:59:e0:03:74:7b:77:
                    1c:59:85:4c:d7:8b:f1:5e:84:3c:2f:50:6c:b8:2a:
                    69:0b:79:a4:6c:0b:5d:21:5e:f4:de:d6:03:5e:ae:
                    60:c2:a2:2d:e9:7f:7e:d2:53:8f:0d:69:83:6d:77:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:09:D2:AA:9A:CC:3D:81:16:D8:66:43:07:B7:DC:13:05:3B:C8:CF
            X509v3 Authority Key Identifier:
                keyid:EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232352e302f32342d3234203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:23:e3:0f:87:e5:93:67:ff:5a:4c:91:41:1e:78:ed:6b:80:
         19:ca:36:94:0a:34:aa:8e:2f:0c:f5:65:00:68:3b:38:f3:3f:
         26:8f:b6:6b:01:b1:be:9a:df:3e:7d:8e:23:f5:81:e1:ff:f3:
         ed:03:d9:e9:a7:58:e9:0d:25:93:d0:3d:7a:68:bd:9f:ad:f8:
         db:07:bc:26:1f:9f:96:e8:de:de:56:ea:c3:f8:16:08:6d:ce:
         96:97:67:f6:1b:c6:00:00:dd:a6:49:91:c2:2f:6b:9a:ae:c2:
         24:f2:11:83:b2:18:a9:95:d8:9e:cd:f3:74:4d:1e:86:94:4c:
         fb:d6:e7:7f:46:87:f2:3c:2c:ef:9b:cb:5f:6c:81:58:4f:76:
         aa:0b:68:25:98:b2:50:0e:6a:08:af:c1:5a:02:0f:a8:fe:c4:
         6c:55:a7:5c:ac:b5:d8:dd:fe:88:5a:2b:32:f6:1d:49:a5:6e:
         1d:c8:e2:d0:cf:0f:26:cc:45:c5:7f:db:a3:3d:7f:9c:3f:b0:
         81:82:79:4e:dd:ed:e7:09:5a:a6:bf:fc:ec:d8:6e:3d:8e:0d:
         5c:c5:08:a9:41:2e:c7:2e:d7:91:6f:06:97:6c:c3:e9:da:ca:
         92:64:09:18:3d:79:cb:26:81:13:5d:94:81:ec:b6:d6:04:ff:
         3b:db:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org