Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32352e302f32342d3234203d3e20323639363539.roa
File:                     34352e3139312e32352e302f32342d3234203d3e20323639363539.roa (raw, json)
Hash identifier:          s8e6XAbJEUQV6BDWBD3Vn9mlHZMgE9HvBNsafz9kyxY=
Subject key identifier:   D8:AB:DE:21:18:04:09:1D:CE:71:E0:20:52:74:38:4C:45:46:15:08
Certificate issuer:       /CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
Certificate serial:       6541A45B477865535AE4B8540426052DE471D259
Authority key identifier: 9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32352e302f32342d3234203d3e20323639363539.roa
Signing time:             Fri 18 Nov 2022 14:06:35 +0000
ROA not before:           Fri 18 Nov 2022 14:01:35 +0000
ROA not after:            Fri 17 Nov 2023 14:06:35 +0000
asID:                     269659
IP address blocks:        45.191.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:41:a4:5b:47:78:65:53:5a:e4:b8:54:04:26:05:2d:e4:71:d2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
        Validity
            Not Before: Nov 18 14:01:35 2022 GMT
            Not After : Nov 17 14:06:35 2023 GMT
        Subject: CN=D8ABDE211804091DCE71E0205274384C45461508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:00:11:ba:4b:8c:5b:39:32:87:4d:51:dc:
                    44:1c:a4:e8:3d:0d:f4:c2:4f:23:68:42:3d:84:92:
                    2c:7f:57:40:0c:26:f0:85:f8:92:84:99:d5:67:c0:
                    ef:b7:ac:49:b8:ae:2a:06:90:ae:7f:27:16:db:ec:
                    33:e8:3e:b0:ee:ef:6c:5d:1a:1e:61:77:67:a8:6a:
                    ab:74:68:35:af:af:40:cc:e7:82:18:ad:ae:61:25:
                    1d:a8:37:f7:dd:bc:8e:be:e4:b8:d2:69:dd:28:12:
                    67:9f:22:5c:74:d1:72:04:6e:18:dd:eb:ea:cc:c1:
                    8f:81:50:bc:1e:db:af:45:9d:18:39:e3:06:c7:f1:
                    0b:97:3f:53:f2:bc:d9:a4:cd:60:ee:19:27:98:f2:
                    e3:a4:ec:55:61:e9:86:24:e9:65:e9:9a:bb:54:a8:
                    5e:6e:8d:9e:5b:97:11:b5:f5:f5:52:41:a1:99:64:
                    64:c2:2a:5e:57:7a:3f:3a:b5:bd:b8:72:6e:94:fa:
                    89:ae:e3:da:f1:a5:0c:72:38:2d:36:94:de:e3:48:
                    b4:69:09:6a:3a:56:80:de:d8:4d:88:06:7c:a4:ca:
                    af:b7:07:e8:af:73:d1:8d:36:e0:c4:02:9c:b0:90:
                    a7:34:9f:49:16:57:17:f3:93:d2:93:b0:bb:ab:20:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:DE:21:18:04:09:1D:CE:71:E0:20:52:74:38:4C:45:46:15:08
            X509v3 Authority Key Identifier:
                keyid:9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32352e302f32342d3234203d3e20323639363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c6:27:e0:6c:c7:a6:c1:30:4c:93:82:eb:18:96:32:ee:f9:
         1b:ba:35:e6:e3:68:c2:7a:8f:00:e7:49:b1:3e:23:8d:44:cf:
         e6:5a:69:ce:cc:da:2e:c7:54:ee:8c:8a:e8:73:82:7b:84:ee:
         64:17:4f:35:f4:d0:89:54:e5:fd:cb:c7:03:f0:e0:af:e9:fa:
         aa:a9:66:17:2b:03:92:e8:38:2d:8f:48:e8:68:e0:df:6e:70:
         3d:79:9c:63:74:c7:9a:fc:9b:cb:5f:0f:5d:a6:7a:d9:ea:03:
         2b:36:fd:ce:9d:b6:c7:21:4a:eb:37:fe:9e:a8:8c:ea:53:01:
         d3:96:d9:cc:e7:2e:61:45:43:fb:fc:61:9c:9d:45:06:69:26:
         82:fe:75:24:70:1a:45:d5:bf:b9:77:08:53:f2:0a:19:e1:20:
         78:24:87:92:e8:59:a5:99:70:df:ad:c3:a2:ba:54:58:b9:fd:
         4e:a1:3d:35:8f:f5:97:07:40:84:ce:37:52:6c:22:99:65:f9:
         f8:2c:a3:f4:9f:41:01:6b:01:97:2d:f7:a9:b3:a2:0f:a2:0b:
         49:37:0c:5f:e5:9a:d2:86:be:5f:e8:1a:ee:cd:ff:8e:a1:60:
         16:8e:f1:d1:7f:51:5e:ed:0b:3b:05:54:20:1c:ce:36:68:e0:
         79:d7:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org