Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32342d3234203d3e20323638303838.roa
File:                     34352e3136382e3130302e302f32342d3234203d3e20323638303838.roa (raw, json)
Hash identifier:          GAcIAg53EG7ZiMm+hgRzvNyQJD2SoPETgkOCtwoUfnA=
Subject key identifier:   ED:33:69:3A:71:92:D4:51:EE:B3:29:71:17:53:9C:46:FA:74:FE:54
Certificate issuer:       /CN=94A3DB62B012EF07C9AFE1762646CC714080A576
Certificate serial:       5BE0BAA60AF3D8D82C63428EF49B74F1BCAC38F9
Authority key identifier: 94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32342d3234203d3e20323638303838.roa
Signing time:             Fri 27 Oct 2023 15:57:40 +0000
ROA not before:           Fri 27 Oct 2023 15:52:40 +0000
ROA not after:            Fri 25 Oct 2024 15:57:40 +0000
asID:                     268088
IP address blocks:        45.168.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e0:ba:a6:0a:f3:d8:d8:2c:63:42:8e:f4:9b:74:f1:bc:ac:38:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A3DB62B012EF07C9AFE1762646CC714080A576
        Validity
            Not Before: Oct 27 15:52:40 2023 GMT
            Not After : Oct 25 15:57:40 2024 GMT
        Subject: CN=ED33693A7192D451EEB3297117539C46FA74FE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:96:53:3f:8e:f1:70:18:35:95:d5:60:02:
                    d5:ac:2d:23:e1:ba:ca:a6:01:1d:2d:e3:04:fd:f3:
                    12:85:2b:27:e4:68:0d:a5:93:84:d3:fa:3b:88:df:
                    1f:62:a2:27:bd:5a:9d:58:78:6b:e3:af:c1:b6:66:
                    7e:d1:19:52:0a:97:bb:18:b7:39:5e:54:5c:4d:ea:
                    03:b7:f0:6d:bc:e3:5e:e9:21:99:ac:6a:b5:c4:95:
                    6c:a7:f2:f1:e5:d6:c9:7a:95:35:04:88:00:e8:17:
                    91:7d:fd:9e:be:d2:f3:73:90:3b:3d:c7:db:cb:94:
                    74:75:d4:f5:58:a6:78:d1:f4:71:c8:3f:40:ac:f1:
                    86:07:c8:3d:27:34:74:db:25:77:26:c8:c4:a3:f2:
                    2f:25:82:62:59:c0:73:09:fe:0f:83:cf:5a:b1:02:
                    04:d7:8f:1d:cb:f8:52:c7:77:04:60:ab:34:e8:98:
                    c8:68:48:b8:19:69:0c:93:01:04:7c:44:98:37:89:
                    5f:7f:0e:52:a9:43:0c:70:78:30:e9:fe:25:b2:77:
                    ac:b3:53:f1:ac:30:16:f7:99:07:46:9d:e0:12:fa:
                    d4:66:0d:df:e1:b0:dd:cf:43:18:9c:81:3e:71:9e:
                    ef:32:c6:cc:06:3f:f7:d9:f2:05:2d:8d:8f:ef:5b:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:33:69:3A:71:92:D4:51:EE:B3:29:71:17:53:9C:46:FA:74:FE:54
            X509v3 Authority Key Identifier:
                keyid:94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32342d3234203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:32:03:3e:13:f6:09:aa:de:81:6d:c5:62:bf:4e:9a:35:be:
         c6:5b:ea:07:fa:2c:e2:bb:28:ca:ab:26:8b:ed:04:4f:47:f8:
         96:70:31:32:df:a5:5c:9c:43:05:29:79:61:07:5a:57:5a:d0:
         f3:fb:5c:c9:59:f1:bb:71:0b:47:f8:4b:71:82:81:e0:97:56:
         43:99:b6:b7:bd:fd:61:7d:f0:8e:1d:89:c8:a5:77:7e:80:5f:
         d3:13:48:9f:c9:eb:e7:37:8a:97:db:b1:a4:78:cc:8b:f6:5f:
         77:6b:71:7b:9c:8e:e9:0f:c2:cd:5b:e2:d8:ab:85:87:9f:a4:
         7e:5f:4f:f0:22:51:30:da:ed:4b:c0:5e:0e:a6:9b:7b:bc:77:
         d5:e6:96:a2:0b:52:69:06:15:97:5c:b8:6d:85:26:14:fb:ab:
         2e:ab:23:bc:f2:1a:8c:b8:3f:d5:59:14:cb:ef:51:37:aa:dd:
         0c:e0:da:38:03:0e:79:34:e0:14:85:9d:56:31:40:fe:53:1a:
         a2:26:a8:98:6b:5b:ef:10:08:93:6f:77:e2:00:ed:51:67:68:
         af:dc:7a:a2:59:81:e7:a0:4e:e5:9d:b4:81:81:de:01:12:e1:
         3c:ac:e2:52:53:2d:32:07:17:ce:eb:f0:49:b2:bc:97:12:fd:
         a3:7b:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org