Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/34352e342e36322e302f32332d3233203d3e20323636303339.roa
File:                     34352e342e36322e302f32332d3233203d3e20323636303339.roa (raw, json)
Hash identifier:          gTcXUj8FQrxkGzem8qIBpG8iJMzguzcG9DVbRaWruus=
Subject key identifier:   F1:F8:2E:84:35:07:5D:22:E9:EF:41:2E:44:5B:EC:50:BC:68:9D:AE
Certificate issuer:       /CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
Certificate serial:       310FCF6339C3DBB0B3B7BE108D52F8D4CB0330EC
Authority key identifier: 10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/34352e342e36322e302f32332d3233203d3e20323636303339.roa
Signing time:             Mon 04 Jul 2022 14:26:00 +0000
ROA not before:           Mon 04 Jul 2022 14:21:00 +0000
ROA not after:            Mon 03 Jul 2023 14:26:00 +0000
asID:                     266039
IP address blocks:        45.4.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0f:cf:63:39:c3:db:b0:b3:b7:be:10:8d:52:f8:d4:cb:03:30:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
        Validity
            Not Before: Jul  4 14:21:00 2022 GMT
            Not After : Jul  3 14:26:00 2023 GMT
        Subject: CN=F1F82E8435075D22E9EF412E445BEC50BC689DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:99:0a:43:de:37:97:2e:69:83:94:20:8f:
                    ed:46:81:fb:94:6f:58:6e:09:81:10:1c:25:71:ea:
                    19:0f:08:7a:14:02:5c:ec:7c:e9:5d:67:79:6f:c8:
                    9d:dc:de:3b:ca:1a:df:b5:fe:03:d5:6e:bc:4a:33:
                    81:d5:ba:13:3e:d8:7e:2b:93:3b:15:31:32:d1:3a:
                    9c:3e:98:88:fb:45:84:2b:7e:64:f7:d3:d3:61:51:
                    49:9b:e2:3c:f7:64:f7:b7:8d:de:fe:4d:8e:fa:83:
                    3c:9e:80:95:de:03:96:b8:0a:5c:e0:d7:bc:59:4f:
                    df:0d:60:72:51:35:e7:df:5f:c2:28:ae:7a:2c:68:
                    4c:55:b2:f4:81:24:ad:52:4e:6f:a3:53:25:d4:61:
                    62:9f:61:fb:b6:2a:b4:fe:0a:78:ff:91:8f:30:34:
                    e3:01:df:6b:f4:d4:0e:3d:46:f4:6e:e7:21:82:fe:
                    6d:67:e2:ec:3d:2b:a4:47:e4:ed:40:65:72:3b:05:
                    3f:aa:1c:b5:5f:e8:0f:28:e8:a3:ea:23:54:b0:fc:
                    d4:c0:d0:86:35:46:03:e5:d4:0f:96:d1:70:97:49:
                    01:6a:54:d2:c0:11:f6:d1:b5:7b:6c:2f:40:f2:8c:
                    ab:49:3a:ca:4d:e5:0e:89:9d:d5:b2:16:a6:85:ab:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F8:2E:84:35:07:5D:22:E9:EF:41:2E:44:5B:EC:50:BC:68:9D:AE
            X509v3 Authority Key Identifier:
                keyid:10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/34352e342e36322e302f32332d3233203d3e20323636303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:b7:9e:6f:36:cc:de:83:7a:3d:2d:50:58:d9:55:50:45:14:
         13:da:6e:74:80:a5:8b:a5:bb:97:4a:84:71:4e:26:84:96:b4:
         e7:c1:f7:19:34:d2:96:9e:ae:7d:93:4a:bf:a9:88:02:80:70:
         51:29:0a:7c:87:cd:b8:97:64:5c:09:77:9b:4c:1b:a9:49:b7:
         6e:b4:25:e7:34:d2:d8:c0:3f:7b:85:25:dd:4b:c1:9a:b1:1d:
         9e:a8:34:8f:db:79:d3:86:88:35:90:0f:54:aa:b4:d3:a6:48:
         64:29:c0:c5:90:89:1b:60:cb:12:0b:d7:3b:14:f0:4f:f2:5f:
         26:bb:9d:28:bc:ce:77:70:5f:84:92:98:b7:35:c9:78:f6:85:
         a9:cf:0c:98:44:f3:22:c4:ba:b3:79:7c:5f:1b:3f:ea:50:e4:
         66:9e:0a:5b:0e:55:5a:5f:22:e5:49:d2:c6:b9:8d:63:57:df:
         34:60:44:fb:a8:1b:91:6d:38:74:59:b1:0b:0d:a3:38:49:99:
         f7:6b:85:68:f1:21:20:83:f3:a5:59:7c:d3:de:03:bc:65:65:
         b1:fa:d1:e0:ce:2e:e1:60:5d:fb:9a:ca:b9:e3:a7:18:6f:41:
         24:8b:d9:68:7a:c8:0b:e7:0b:8a:9e:43:c2:e3:04:a8:a3:d2:
         66:e4:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org