Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/34352e3232382e3232352e302f32342d3234203d3e20323637303830.roa
File:                     34352e3232382e3232352e302f32342d3234203d3e20323637303830.roa (raw, json)
Hash identifier:          xBAABuoxeFDqRTp5GKcYyLa4rnBRGOaGSWGnPMzu6e4=
Subject key identifier:   E8:FF:82:E4:3B:02:9A:12:F2:66:EA:14:2D:89:B9:5B:ED:F4:96:BE
Certificate issuer:       /CN=B853BE29B6BEB55F7E83C4314E352AE87F81760A
Certificate serial:       128836CD3051E7FEDD3389186BF59FC93F381362
Authority key identifier: B8:53:BE:29:B6:BE:B5:5F:7E:83:C4:31:4E:35:2A:E8:7F:81:76:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/34352e3232382e3232352e302f32342d3234203d3e20323637303830.roa
Signing time:             Wed 09 Nov 2022 12:30:40 +0000
ROA not before:           Wed 09 Nov 2022 12:25:40 +0000
ROA not after:            Wed 08 Nov 2023 12:30:40 +0000
asID:                     267080
IP address blocks:        45.228.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:88:36:cd:30:51:e7:fe:dd:33:89:18:6b:f5:9f:c9:3f:38:13:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B853BE29B6BEB55F7E83C4314E352AE87F81760A
        Validity
            Not Before: Nov  9 12:25:40 2022 GMT
            Not After : Nov  8 12:30:40 2023 GMT
        Subject: CN=E8FF82E43B029A12F266EA142D89B95BEDF496BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:00:ff:65:be:55:b1:91:fa:3d:11:88:5f:
                    6c:58:22:63:7c:bf:3e:ad:4a:27:15:21:2e:dd:66:
                    af:45:8e:67:7e:71:41:31:18:fd:8a:e5:d4:5e:bb:
                    08:2c:99:76:1f:e2:9c:bb:ee:d4:17:77:de:e7:53:
                    01:a2:1d:44:4f:67:11:df:3a:90:a1:f3:93:3e:61:
                    21:8f:e4:f3:f5:f6:0c:19:6e:f9:7e:0e:8b:34:f4:
                    b9:27:18:6c:07:19:60:38:1c:3d:3f:9d:b6:74:f3:
                    33:fe:d0:63:42:4a:6a:36:c9:3e:22:33:00:ad:69:
                    41:8f:9f:5e:b5:43:77:c7:2b:15:ec:9e:10:3b:67:
                    45:5b:d9:3e:66:66:10:f9:07:1f:82:e9:73:91:4c:
                    7c:b8:9c:59:df:1c:0f:26:79:fc:31:5e:5c:ad:e1:
                    37:dc:f5:39:1d:46:c0:2f:87:47:12:c4:b1:0d:8b:
                    09:15:76:11:66:51:b1:0b:72:56:69:b0:41:31:35:
                    d1:02:fd:5c:6c:ac:61:fd:54:39:3d:1d:f7:6f:0e:
                    b9:db:93:3d:14:d3:21:b4:b0:b8:f9:6d:30:d0:f0:
                    73:43:73:4d:ee:d9:97:ac:85:e6:fc:14:08:36:23:
                    fa:fd:f6:f2:be:b1:1b:d6:16:83:f2:45:61:c5:7f:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FF:82:E4:3B:02:9A:12:F2:66:EA:14:2D:89:B9:5B:ED:F4:96:BE
            X509v3 Authority Key Identifier:
                keyid:B8:53:BE:29:B6:BE:B5:5F:7E:83:C4:31:4E:35:2A:E8:7F:81:76:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/34352e3232382e3232352e302f32342d3234203d3e20323637303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f3:9f:a8:7e:85:5c:a9:4a:6f:c5:b4:47:e5:b9:ad:ec:82:
         4b:7d:8d:fe:22:a4:a3:d6:06:42:bd:02:8f:ff:f0:51:8a:7f:
         c0:88:2a:45:1d:2a:2f:4b:07:83:3a:6c:7b:53:1b:1d:4c:e3:
         39:27:c0:6e:1f:85:3a:c4:6b:e9:69:95:ba:1c:91:b3:c9:1c:
         33:94:b2:e8:3d:dd:8f:6f:72:8f:54:41:58:cc:eb:3a:6d:48:
         e0:77:d3:0c:5e:3b:8d:e6:fe:44:ce:a1:9a:e9:53:d8:3d:7d:
         04:9f:18:e0:2f:f5:7e:e0:a9:f3:b0:1c:b7:c7:e6:27:fe:87:
         21:e7:72:37:3c:5f:7b:3b:46:ba:44:ca:cf:b5:07:0b:04:ff:
         98:ff:12:2a:24:4a:7a:5e:e7:e7:bf:be:7b:21:e6:1a:59:c1:
         be:a7:b8:1d:c9:d0:7b:02:0c:7f:87:f0:65:09:93:7a:53:d0:
         61:73:3f:57:d4:04:2b:75:31:e2:99:17:34:73:d0:40:48:c6:
         89:99:3b:1f:2b:7a:33:b9:22:b9:3b:3d:d7:ad:e7:28:bb:bf:
         ef:16:c2:02:6e:4b:b2:10:2a:c1:49:3f:ef:ca:6c:79:9c:78:
         ce:08:ec:f7:a5:0d:f4:15:89:53:0d:a8:e2:4a:a7:86:3b:fa:
         17:e2:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org