Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa
File:                     34352e3233352e39322e302f32332d3233203d3e20323637343130.roa (raw, json)
Hash identifier:          kwK5lE9fBSIAwStHJvOedD/1qr9ETfc1Qp+Ip8XPT6A=
Subject key identifier:   02:DB:5C:CC:E8:4E:04:2D:45:AD:2B:9F:28:59:30:BA:70:49:EC:2C
Certificate issuer:       /CN=CB82F441A2AB9E9D367CB186AB1C39CCFD34599C
Certificate serial:       0EBEA12B8FC36C590F52B3C84A6154AED28A068B
Authority key identifier: CB:82:F4:41:A2:AB:9E:9D:36:7C:B1:86:AB:1C:39:CC:FD:34:59:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa
Signing time:             Sun 25 Jun 2023 16:25:36 +0000
ROA not before:           Sun 25 Jun 2023 16:20:36 +0000
ROA not after:            Sun 23 Jun 2024 16:25:36 +0000
asID:                     267410
IP address blocks:        45.235.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:be:a1:2b:8f:c3:6c:59:0f:52:b3:c8:4a:61:54:ae:d2:8a:06:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB82F441A2AB9E9D367CB186AB1C39CCFD34599C
        Validity
            Not Before: Jun 25 16:20:36 2023 GMT
            Not After : Jun 23 16:25:36 2024 GMT
        Subject: CN=02DB5CCCE84E042D45AD2B9F285930BA7049EC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:d8:50:83:28:fc:11:fd:48:27:46:16:c8:
                    02:0e:e4:bd:2d:ae:61:12:ba:8e:49:5f:ee:a9:40:
                    8e:87:f4:96:0d:ed:0b:b2:36:d6:57:75:c1:74:dd:
                    08:44:8f:ad:08:1c:ea:65:4f:0d:28:8c:1e:c7:61:
                    1d:a2:c0:79:65:a6:f0:dd:a2:83:e8:6b:e2:cb:31:
                    07:ef:4c:db:63:d6:8b:5d:e9:e8:46:2a:f3:00:b1:
                    ef:9c:0f:3f:f0:17:e8:55:7f:57:b8:e8:8c:15:3f:
                    96:6c:01:a7:07:7e:e3:6e:22:44:6a:0d:92:43:c4:
                    ef:4f:1e:36:0a:e7:e0:dc:ec:c6:9b:0a:bf:6a:66:
                    f4:be:45:31:d8:3d:dc:6b:e4:b5:fc:2e:c3:79:36:
                    35:16:1d:e4:a2:3d:d1:19:ac:46:6f:d3:4d:66:d6:
                    27:d4:8f:73:89:42:22:b9:e2:f3:9e:35:c3:b8:87:
                    d0:a3:4a:42:21:83:9a:01:29:a4:65:6f:4a:d6:cf:
                    01:64:5c:a2:bb:dd:ff:7b:db:52:dd:98:08:0e:63:
                    ec:cd:f0:52:34:01:74:bc:47:d6:ff:f2:3e:a3:12:
                    b5:fd:96:51:73:cb:2d:3d:1f:b9:9d:40:55:fb:79:
                    2e:a3:59:b1:63:e9:80:aa:2a:5d:6b:30:13:9e:27:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DB:5C:CC:E8:4E:04:2D:45:AD:2B:9F:28:59:30:BA:70:49:EC:2C
            X509v3 Authority Key Identifier:
                keyid:CB:82:F4:41:A2:AB:9E:9D:36:7C:B1:86:AB:1C:39:CC:FD:34:59:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:a2:e9:cd:9d:e3:3d:65:06:b3:32:6e:86:86:05:be:34:09:
         00:72:89:51:3a:c3:97:fe:cd:30:d3:c9:5f:9f:a5:2a:40:d2:
         0b:fb:69:13:2e:ff:3d:c1:15:69:b3:4e:a4:db:c6:0c:73:7b:
         a1:c1:6b:da:e7:9d:1e:14:1d:9b:28:2f:e0:ee:e3:0a:f7:42:
         34:c7:a2:e5:7a:d9:e5:5c:bb:70:8c:05:df:47:51:e8:ff:0f:
         b6:6a:07:c8:73:27:89:ac:6b:81:ce:1c:65:40:f9:12:ea:0d:
         2f:40:a2:85:18:17:5b:5c:d2:82:10:8f:46:6e:31:d0:4e:e7:
         6e:aa:66:a1:ee:0b:08:df:56:dd:34:1c:60:db:d0:26:bd:98:
         19:ae:45:2d:fc:ff:2e:af:bf:67:49:4a:33:00:63:c2:df:7d:
         e7:ad:65:86:3c:bd:24:f3:9b:62:64:b0:c2:5a:59:66:9c:bb:
         51:a8:2d:22:ee:cc:38:e6:f4:ba:75:c3:f2:dc:45:ee:fb:1e:
         4d:25:91:b3:89:82:c8:0b:b7:59:d1:26:fb:3a:f3:fc:ef:8c:
         49:dc:ae:76:d2:8d:a2:5e:f3:d0:3c:ce:a7:04:55:b8:66:3f:
         0c:bc:af:02:f7:b5:06:1e:4c:64:09:cd:47:70:e4:67:4c:02:
         ff:2c:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org