Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232372e302f32342d3234203d3e20323638363338.roa
File:                     34352e3136342e3232372e302f32342d3234203d3e20323638363338.roa (raw, json)
Hash identifier:          xd0YIALM1DDjSK0ktznLK//n+/4fXMFZqxanUp3avOY=
Subject key identifier:   97:DA:81:46:69:EF:76:8E:FC:0B:6D:E8:8E:64:71:A9:54:A4:9A:35
Certificate issuer:       /CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
Certificate serial:       1D7FB3123C7BB6F62F06E0023AF8B664A5FE0287
Authority key identifier: EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232372e302f32342d3234203d3e20323638363338.roa
Signing time:             Fri 24 Mar 2023 14:06:24 +0000
ROA not before:           Fri 24 Mar 2023 14:01:24 +0000
ROA not after:            Fri 22 Mar 2024 14:06:24 +0000
asID:                     268638
IP address blocks:        45.164.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7f:b3:12:3c:7b:b6:f6:2f:06:e0:02:3a:f8:b6:64:a5:fe:02:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
        Validity
            Not Before: Mar 24 14:01:24 2023 GMT
            Not After : Mar 22 14:06:24 2024 GMT
        Subject: CN=97DA814669EF768EFC0B6DE88E6471A954A49A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:50:4d:80:ea:a7:01:67:14:53:32:bf:01:
                    d4:7b:6f:a5:d5:fd:15:05:d6:ed:71:27:41:a9:22:
                    3d:16:1a:63:ef:68:91:15:7a:a3:a0:1f:12:6f:3b:
                    62:11:3d:dd:2d:dc:dd:59:f5:b9:4a:81:65:e5:7b:
                    37:c9:15:7f:f8:e9:73:11:76:95:40:f2:c7:f4:e5:
                    f4:22:56:96:23:6c:2d:da:1b:45:e8:97:6c:40:c3:
                    44:ea:de:af:76:e2:ea:bd:4f:98:30:ac:2b:c5:15:
                    11:50:70:ca:73:60:31:6e:f3:7d:e3:a0:f6:d0:9c:
                    58:92:47:21:06:0c:78:f4:f3:58:d9:b1:cc:ab:f7:
                    2d:a5:eb:28:44:a8:b8:21:dd:c8:36:ee:c4:62:26:
                    2a:ab:5a:79:cc:ac:9b:01:fa:2e:21:fe:40:56:5a:
                    9b:51:e4:f8:81:3d:95:dd:04:3b:bd:b6:6d:5c:57:
                    7e:40:7f:15:1f:80:f6:19:31:36:2e:95:13:fb:36:
                    1f:f6:01:73:e4:cd:56:46:ad:54:21:35:8f:69:38:
                    10:32:fd:00:5d:26:cd:9c:74:df:c4:fa:5c:72:3d:
                    33:61:ff:26:47:53:4b:54:37:7e:15:40:24:c5:c8:
                    27:93:a6:66:ac:85:65:e6:f0:a8:58:58:6a:52:ec:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DA:81:46:69:EF:76:8E:FC:0B:6D:E8:8E:64:71:A9:54:A4:9A:35
            X509v3 Authority Key Identifier:
                keyid:EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/34352e3136342e3232372e302f32342d3234203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:fd:87:43:c9:89:fd:b5:cf:0a:63:59:11:a6:cf:37:b6:9d:
         a8:3d:89:41:66:0e:38:28:aa:0c:59:8d:1a:d9:7e:10:89:da:
         79:5b:9e:16:1d:41:bb:c0:ee:e6:a5:a1:0c:f1:b2:3f:17:fb:
         75:58:d0:0e:e4:52:ce:9e:de:42:a5:29:b5:1f:d2:42:b0:e7:
         f3:79:4f:e7:b6:e8:a1:59:0f:bd:1b:e1:ea:9e:eb:29:a1:d1:
         6b:72:8b:52:ea:03:f6:db:9d:2e:84:1d:67:50:6b:fc:16:9b:
         56:3a:31:d9:dd:e1:f5:76:e3:8d:40:23:28:3b:39:0f:aa:b2:
         ee:01:c3:48:8c:11:a6:7d:6b:fb:fe:f9:1b:6d:94:a1:fe:f2:
         44:49:f0:fb:5f:20:5b:44:1f:99:41:ee:f5:84:c9:67:44:e8:
         d5:83:de:06:fc:06:e9:56:b2:16:42:ab:b9:c9:7a:16:32:ff:
         29:6e:fc:f5:ba:69:09:16:00:91:f7:07:6f:73:3b:5f:a4:75:
         63:6f:4d:11:17:d1:ff:87:39:72:41:48:79:20:ce:ca:8b:92:
         81:6e:b4:e7:c8:b3:36:48:0d:1d:c3:f3:8b:92:da:dd:73:95:
         5d:fd:2a:48:dd:bf:63:d4:52:a4:aa:b6:b7:dd:07:b3:fb:6a:
         a9:3a:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org