Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa
File:                     34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa (raw, json)
Hash identifier:          ERUfRtoMt5dJz4+XCTm1O2rJ3Rkouud/isA38e1ONCI=
Subject key identifier:   BF:D9:CF:83:F5:1F:C6:B6:6F:D5:33:C1:95:EB:5D:56:13:9D:7B:8B
Certificate issuer:       /CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
Certificate serial:       4AD4F3BCAC4AD6149DC9B100120995566908400E
Authority key identifier: EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa
Signing time:             Fri 23 Feb 2024 14:40:53 +0000
ROA not before:           Fri 23 Feb 2024 14:35:53 +0000
ROA not after:            Fri 21 Feb 2025 14:40:53 +0000
asID:                     268638
IP address blocks:        45.164.226.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d4:f3:bc:ac:4a:d6:14:9d:c9:b1:00:12:09:95:56:69:08:40:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
        Validity
            Not Before: Feb 23 14:35:53 2024 GMT
            Not After : Feb 21 14:40:53 2025 GMT
        Subject: CN=BFD9CF83F51FC6B66FD533C195EB5D56139D7B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:40:2c:51:40:7c:a9:fb:c5:74:a4:ec:3d:
                    48:fc:3a:40:03:a9:a4:ae:e6:ef:07:5e:2b:9b:70:
                    3e:9b:1e:4c:c8:34:92:fd:31:1c:a0:f3:6f:63:3e:
                    d3:8b:2d:d7:c0:10:fd:b0:c8:78:57:3e:3d:11:d6:
                    b8:00:eb:6c:4b:2e:72:a7:35:48:8d:40:63:2a:3b:
                    6b:12:b9:de:0f:57:ae:74:26:41:9a:1c:a7:ca:6b:
                    a3:64:fd:54:de:1d:f3:6e:aa:9e:33:14:ee:ac:3d:
                    b2:3d:29:e1:42:37:54:b2:77:ac:b9:17:7a:c3:23:
                    7c:5a:0e:5c:01:f5:75:6c:d8:7b:01:de:6f:4a:29:
                    d3:b5:c0:c7:c2:84:0b:4c:d5:8e:ab:21:19:b3:02:
                    6b:33:bb:5b:38:b4:2f:aa:06:e0:da:39:24:84:bc:
                    49:69:b9:30:ff:83:ca:cf:79:e1:d5:52:a6:98:38:
                    2c:c6:8c:6f:bf:c5:11:18:df:99:41:0c:b7:69:49:
                    d3:f9:b8:f3:02:a8:34:9d:9f:75:2b:93:37:92:a9:
                    ab:c8:c4:3f:05:9d:86:cd:39:98:96:76:ee:93:52:
                    40:6b:72:4a:3a:4b:28:45:f9:fe:7d:0b:45:e1:92:
                    6f:9d:0e:2c:4a:2f:4f:23:63:85:87:e9:d1:4a:c8:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D9:CF:83:F5:1F:C6:B6:6F:D5:33:C1:95:EB:5D:56:13:9D:7B:8B
            X509v3 Authority Key Identifier:
                keyid:EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232362e302f32332d3233203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:d1:8e:b3:c1:f2:9a:91:f1:c0:d6:b6:bc:62:b8:65:3e:
         1f:10:8b:ea:c6:b9:55:76:f8:83:eb:11:2f:a1:2a:73:7b:4c:
         1a:ef:f2:09:ea:8b:bb:8e:a6:2d:ed:19:5e:1c:d2:7c:43:e6:
         3e:e8:c1:48:fc:62:ca:d9:d5:aa:0d:6b:1d:c6:a6:2f:ae:eb:
         03:cf:27:60:0d:e3:57:b0:e2:18:44:5e:2e:26:ee:db:3e:78:
         4b:3d:15:7f:85:3d:21:cf:51:72:da:f1:fe:d7:51:8c:15:78:
         e1:ef:e1:3d:c9:ea:4e:72:ef:42:b4:be:8c:c7:67:bf:d8:2f:
         9f:50:21:47:40:42:a4:ec:e1:c4:19:1e:ae:99:78:29:43:44:
         d5:97:61:72:ca:01:16:43:66:fc:d5:aa:48:a1:a0:fa:67:95:
         5f:09:2d:51:7a:f2:66:8a:1e:90:57:5d:67:d2:73:e8:3d:6e:
         1d:93:8a:d8:c9:43:0b:6e:67:da:13:0f:2f:41:c2:86:b9:6c:
         2b:0f:1c:52:0d:a3:82:15:8a:0f:d4:96:25:6a:7e:9f:89:fb:
         02:03:01:72:31:89:fe:7f:77:47:1a:15:76:5e:37:3e:0a:d1:
         e1:12:c0:08:a9:68:c3:e7:79:2b:ec:c2:3c:6c:51:e4:d7:f2:
         6b:43:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org