Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32322d3232203d3e203631353839.roa
File:                     34352e3233302e3130382e302f32322d3232203d3e203631353839.roa (raw, json)
Hash identifier:          Lb6aIiGOjrf6iQ14VdS4Ru+sd2lURwxfPXd6CIIMIUk=
Subject key identifier:   81:74:AD:47:FC:D1:2C:F4:8A:44:82:9C:79:62:E7:4E:5F:CA:63:46
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       020516EB181C7AD0A07A5E3B3907451FE6B267EF
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32322d3232203d3e203631353839.roa
Signing time:             Mon 24 Apr 2023 11:53:42 +0000
ROA not before:           Mon 24 Apr 2023 11:48:42 +0000
ROA not after:            Mon 22 Apr 2024 11:53:42 +0000
asID:                     61589
IP address blocks:        45.230.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:05:16:eb:18:1c:7a:d0:a0:7a:5e:3b:39:07:45:1f:e6:b2:67:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Apr 24 11:48:42 2023 GMT
            Not After : Apr 22 11:53:42 2024 GMT
        Subject: CN=8174AD47FCD12CF48A44829C7962E74E5FCA6346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:86:04:96:de:c3:4f:6d:2c:41:b4:11:80:
                    83:99:39:13:27:e3:79:4b:6f:8c:43:90:4b:6f:5a:
                    c4:4e:2e:b5:e5:1b:58:3a:66:e7:69:7c:9c:25:4b:
                    1d:5d:d8:0c:9e:e8:7f:77:ab:f7:dc:64:fc:e3:39:
                    a2:83:51:ef:86:f1:1e:c7:53:0c:f7:a5:3e:ed:27:
                    ff:39:44:61:46:eb:ea:82:53:74:c9:11:73:8b:95:
                    25:78:d1:34:7a:c8:72:c8:55:1a:04:03:18:19:00:
                    6c:44:aa:10:2b:3b:90:43:d3:ca:d8:cd:0a:22:13:
                    8c:a1:56:33:7e:2f:f1:e6:b5:e1:23:b5:27:05:c7:
                    62:41:e6:61:24:8c:5d:30:dc:0a:2d:61:7f:e9:e0:
                    35:75:01:0f:90:cd:f7:36:f4:44:80:a9:c5:45:1c:
                    cd:4d:c9:18:2d:a6:80:eb:ad:da:61:ce:ec:c9:e6:
                    b2:ff:3a:41:86:6c:e4:ed:60:a6:b2:f4:92:21:f4:
                    da:b6:27:4b:b5:aa:07:a3:17:26:d7:e8:7d:60:d3:
                    eb:bd:1b:37:91:74:24:f5:93:4c:97:6a:bb:7d:eb:
                    9e:11:0f:ba:fe:69:33:0b:88:38:8f:8a:ee:b3:f1:
                    9f:5e:df:98:33:86:aa:f2:29:cc:30:79:4d:50:f2:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:AD:47:FC:D1:2C:F4:8A:44:82:9C:79:62:E7:4E:5F:CA:63:46
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32322d3232203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:5a:fd:66:b8:c2:b7:ce:72:54:8f:d0:64:8f:3b:78:26:83:
         a6:ca:26:2f:74:6c:d1:f6:f7:27:56:7a:eb:89:ea:28:a6:b7:
         e0:c4:0d:05:d5:1c:9f:47:e7:b0:35:f3:d9:cd:5b:78:fe:30:
         30:34:22:1b:9e:be:76:50:94:7e:fa:26:2f:76:11:d2:94:11:
         a2:36:97:de:4f:ae:5a:5a:ca:ba:01:99:64:64:7f:4b:d0:9d:
         46:43:a7:8b:77:b7:ec:34:16:7d:34:11:05:27:66:eb:ae:1c:
         a9:9d:29:0a:7f:6e:63:5a:2f:4d:23:63:14:6a:e4:19:c5:4c:
         ce:65:68:6c:b9:7b:aa:42:7f:6e:d7:bc:bb:bb:94:47:e6:52:
         52:60:b9:d7:60:06:30:c2:b0:f9:4b:2a:59:93:59:d5:47:91:
         3e:15:30:e5:b2:b0:a4:bd:5a:42:ed:ab:87:a8:f7:b3:62:b4:
         8f:fe:b1:de:aa:38:73:92:43:27:2f:41:2d:fc:ce:69:65:68:
         e0:72:50:61:79:d1:8c:db:61:31:cd:05:f5:9c:a3:0f:53:b7:
         b7:26:22:72:ca:eb:7e:4a:a2:07:57:2c:e2:aa:e7:f1:cb:ba:
         d3:fb:1f:71:f9:90:1c:93:29:90:ab:05:2c:b1:97:9b:44:0b:
         38:ab:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org