Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3136322e3136342e302f32322d3234203d3e203238313436.roa
File:                     34352e3136322e3136342e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          2pIbRW0v9KHKD3EX5JHwdE5/f/ASyITjNhTYjvrxIh4=
Subject key identifier:   5F:98:B3:F1:FC:D2:93:6E:4F:0E:25:28:1D:86:E3:68:0A:29:74:70
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       358C19E1A2B12932CEDB0F7C7647A882B40F6A6D
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3136322e3136342e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:46 +0000
ROA not before:           Wed 21 Dec 2022 17:11:46 +0000
ROA not after:            Wed 20 Dec 2023 17:16:46 +0000
asID:                     28146
IP address blocks:        45.162.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8c:19:e1:a2:b1:29:32:ce:db:0f:7c:76:47:a8:82:b4:0f:6a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:46 2022 GMT
            Not After : Dec 20 17:16:46 2023 GMT
        Subject: CN=5F98B3F1FCD2936E4F0E25281D86E3680A297470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:22:fd:a9:6a:87:5a:05:42:af:e5:e1:f1:
                    1b:19:3c:35:3b:79:d2:f9:13:95:d8:f5:77:82:af:
                    4a:7c:79:a3:54:df:c6:77:aa:c1:9f:0f:f7:55:b9:
                    26:2e:6c:c7:64:d9:1d:d7:3d:28:70:e4:41:68:dc:
                    14:1d:86:e5:a1:c8:1f:ad:4e:cc:56:fc:a9:93:b1:
                    ff:ea:20:e1:95:7a:33:a4:93:27:41:48:7d:10:42:
                    a8:34:11:3c:20:7f:0c:b1:d5:d8:51:f3:ff:36:d0:
                    e2:72:19:7b:eb:72:38:2f:dc:61:8d:05:25:c3:b2:
                    6c:7a:0c:2a:24:ae:39:a2:0f:67:f2:70:07:5e:05:
                    dd:a6:42:e7:a3:42:4e:f8:0f:77:bc:50:06:1f:d5:
                    2c:f5:f2:70:03:d7:7f:c1:46:55:a1:b7:8f:af:0e:
                    51:7d:78:c5:b8:7e:f3:49:2c:41:dc:99:70:ff:08:
                    92:27:ac:58:52:1d:8d:f4:1a:a0:02:df:85:04:03:
                    6d:a6:0a:4f:db:bd:d9:5a:9f:48:a6:f3:ae:b3:af:
                    ac:44:2e:f0:80:79:1f:30:74:55:d8:38:36:c9:5b:
                    00:e3:86:83:97:3a:e5:30:04:b8:0c:61:ca:31:19:
                    2c:4b:89:9d:cc:96:7d:67:43:0b:53:a3:58:65:8c:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:98:B3:F1:FC:D2:93:6E:4F:0E:25:28:1D:86:E3:68:0A:29:74:70
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3136322e3136342e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:a9:ad:88:06:12:6b:80:71:bb:43:21:6f:b5:ab:c0:72:38:
         4c:91:d1:a2:ad:1b:2e:3b:89:13:50:f3:11:61:27:02:b0:d8:
         67:e5:79:5b:71:91:a9:fb:3b:3e:4e:51:a5:42:c2:68:05:80:
         b1:5e:69:2a:6b:9c:bc:47:a6:da:14:01:63:3f:51:02:49:66:
         01:54:77:43:b6:17:51:20:f4:34:4d:aa:f9:4c:0c:2b:ae:e0:
         ec:94:7b:2a:a5:67:d5:88:10:1b:d7:74:43:b9:2e:27:a7:04:
         5e:1c:2a:60:16:f1:73:63:32:4a:4d:21:df:51:e2:4e:36:54:
         0c:b8:88:a0:56:bf:f6:ef:c8:52:41:c1:83:a7:86:47:0d:d1:
         fa:fc:fe:52:4d:9b:c7:c5:40:b9:5c:5f:50:ed:72:d8:45:0e:
         29:c6:3e:b7:60:5c:3a:d2:7c:b7:81:62:97:0d:83:17:90:99:
         da:de:bc:48:80:64:61:9c:6d:2c:38:11:d1:00:14:04:01:f4:
         70:da:ad:5e:93:71:e6:51:3d:ad:92:e6:e2:09:66:cd:c3:6e:
         9d:69:dd:5f:1d:ed:dd:93:e8:9f:2a:5a:b9:cc:a0:69:1f:e5:
         8b:86:f0:2d:d6:d7:42:fd:25:aa:27:03:e5:a6:93:e5:58:45:
         4c:28:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org