Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130322e302f32332d3233203d3e20323638303838.roa
File:                     34352e3136382e3130322e302f32332d3233203d3e20323638303838.roa (raw, json)
Hash identifier:          r49beAmvHsvdpXEZkBh9hSnDLHAnvCUE5XGg5ZiZm4o=
Subject key identifier:   26:54:A4:A0:B0:76:28:96:06:54:EE:CA:BD:FF:18:3D:93:E7:81:0F
Certificate issuer:       /CN=94A3DB62B012EF07C9AFE1762646CC714080A576
Certificate serial:       5177C0E31AC26E666BC12E8B7EC0CA4AA558185E
Authority key identifier: 94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130322e302f32332d3233203d3e20323638303838.roa
Signing time:             Fri 27 Oct 2023 15:57:40 +0000
ROA not before:           Fri 27 Oct 2023 15:52:40 +0000
ROA not after:            Fri 25 Oct 2024 15:57:40 +0000
asID:                     268088
IP address blocks:        45.168.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:77:c0:e3:1a:c2:6e:66:6b:c1:2e:8b:7e:c0:ca:4a:a5:58:18:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A3DB62B012EF07C9AFE1762646CC714080A576
        Validity
            Not Before: Oct 27 15:52:40 2023 GMT
            Not After : Oct 25 15:57:40 2024 GMT
        Subject: CN=2654A4A0B07628960654EECABDFF183D93E7810F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9e:89:3e:d3:91:23:50:66:be:d2:e4:e9:bc:
                    99:90:47:28:59:e4:bd:14:ea:26:76:ff:d3:4c:be:
                    4b:1c:9e:e1:89:3b:62:c4:24:b1:03:6f:0c:66:30:
                    ed:85:ed:d4:73:96:9f:8d:a2:fa:1a:58:78:84:e5:
                    ca:de:2b:12:70:16:5d:af:5a:6c:95:c0:f4:d3:ab:
                    c4:4d:7b:c9:95:fa:ee:65:2e:7c:12:9a:c3:08:61:
                    f1:fb:2b:e6:5a:70:cc:10:77:af:ea:ed:64:ac:e3:
                    d2:3a:ee:cf:d1:2b:08:8c:24:b1:ee:e6:6f:71:86:
                    51:a8:48:77:83:25:62:64:0e:98:aa:1b:60:86:11:
                    27:b8:02:a3:1a:bb:8d:00:d6:41:c4:df:27:84:07:
                    cf:64:f1:71:8a:8a:c5:96:68:a6:93:0f:04:18:af:
                    a4:d6:b7:b6:4e:ed:c6:46:5a:1b:32:91:f5:11:7e:
                    8e:f4:d9:67:77:3e:ba:6c:18:db:60:d2:f8:39:4b:
                    4e:ab:d6:d7:80:3b:d4:14:9a:a6:78:e8:11:f9:f5:
                    4c:67:4e:8d:62:dd:d0:8f:cb:50:bb:3b:e0:07:60:
                    29:ff:a3:06:c1:93:47:c1:85:2c:fe:ce:57:80:1c:
                    83:6f:f2:e4:05:85:1d:c1:fd:6e:1e:d8:8a:d0:3d:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:54:A4:A0:B0:76:28:96:06:54:EE:CA:BD:FF:18:3D:93:E7:81:0F
            X509v3 Authority Key Identifier:
                keyid:94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130322e302f32332d3233203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:01:c3:73:03:cf:ac:7b:13:0d:9d:36:df:3c:b0:27:95:
         35:6b:28:38:0e:6e:6a:84:de:35:10:44:1d:28:77:5d:a1:61:
         f6:6f:d4:de:d6:a4:f3:76:11:cc:b9:44:3e:b4:03:e1:94:b8:
         5c:6b:57:f3:a4:11:d6:b8:a3:a1:30:b6:94:89:42:59:15:16:
         02:e3:a6:cc:c0:fa:ac:fe:52:e1:df:be:84:23:2a:5b:6c:6a:
         0e:9a:b5:cd:a2:2c:76:fa:a5:f9:50:51:83:d3:11:98:4f:e7:
         2f:77:48:47:39:e5:da:29:99:57:dc:3f:70:c3:ca:f5:84:a6:
         2c:39:ae:b1:ec:07:7d:93:a8:e1:89:2c:17:dd:5b:95:69:64:
         e3:12:cc:f9:5f:2f:60:37:83:d8:60:30:4e:9c:ab:f8:09:6e:
         95:ee:ac:7b:2e:e5:5c:51:8b:e4:94:ad:3b:2d:1c:76:f0:54:
         02:3a:10:5f:02:d8:26:06:65:30:b2:c6:8b:50:93:e4:dc:f7:
         b6:ce:8b:69:b0:67:ec:06:a8:bb:10:ab:83:7c:8e:d1:b4:08:
         2f:21:dc:10:72:ff:d0:92:81:e8:f9:13:8f:75:8b:bc:ff:e2:
         0f:1f:b0:70:b4:b7:34:e9:61:ee:e6:a5:cb:3f:4c:fc:cb:49:
         98:43:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org