Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa
File:                     34352e3233382e3136342e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          gucg5coGzMU3Fn8uwK9SkzWnvIb91DWkq77XnngUFt8=
Subject key identifier:   5C:4D:F7:42:95:43:9A:FD:47:22:61:6E:2E:C2:8D:3B:07:FC:03:CD
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       0B86409AEEB2B497489F844A6B9B80A200A584C4
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:46 +0000
ROA not before:           Wed 21 Dec 2022 17:11:46 +0000
ROA not after:            Wed 20 Dec 2023 17:16:46 +0000
asID:                     28146
IP address blocks:        45.238.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:86:40:9a:ee:b2:b4:97:48:9f:84:4a:6b:9b:80:a2:00:a5:84:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:46 2022 GMT
            Not After : Dec 20 17:16:46 2023 GMT
        Subject: CN=5C4DF74295439AFD4722616E2EC28D3B07FC03CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:2f:97:82:cb:39:87:75:68:ee:61:34:5d:
                    2e:ce:4f:69:5f:ea:79:55:10:04:6c:fe:00:e1:34:
                    2b:ef:e7:4d:41:61:a5:03:2e:5c:be:18:dd:9a:e6:
                    f2:50:a7:37:20:65:ac:13:87:e2:e0:4c:e3:e9:b7:
                    45:59:d7:bf:93:0b:31:f8:e4:53:9b:78:ac:5e:17:
                    8e:cb:8b:c4:b6:00:b8:2b:fb:2a:6d:19:7f:4e:25:
                    64:19:e6:6a:6e:cf:80:76:ac:11:ce:b1:36:46:3c:
                    39:d9:44:0a:0b:79:e3:07:6a:cd:bb:31:f8:d6:46:
                    7e:a6:ab:16:94:97:cb:1a:4b:3b:c9:cb:19:97:d4:
                    a2:bd:11:4a:db:ac:1c:ec:a7:c7:d8:6b:7d:1a:2d:
                    6c:ec:07:54:af:ef:4e:46:0e:24:b0:33:3a:82:12:
                    7f:a7:10:ec:d8:dc:09:de:48:72:be:ad:0b:c4:18:
                    8f:50:d0:b2:a3:64:dd:d4:c7:0c:09:49:88:1a:2c:
                    a7:40:c8:cb:18:37:b6:62:8f:6a:05:b5:9d:b2:05:
                    87:dc:8e:48:95:a9:0a:19:21:63:d0:e5:cb:af:71:
                    9a:84:65:5d:36:af:7b:36:69:42:dc:29:61:d5:d7:
                    2e:d3:d6:45:80:da:b8:2e:8e:2f:fd:98:87:68:98:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:F7:42:95:43:9A:FD:47:22:61:6E:2E:C2:8D:3B:07:FC:03:CD
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:14:82:f9:66:5a:8e:8f:bf:6f:47:1b:d8:95:f6:6e:68:54:
         cd:e2:07:16:fe:93:75:16:c5:5a:d0:f2:55:a0:ed:e6:78:8c:
         f0:3d:18:29:d6:e6:03:ff:9e:41:ea:55:14:64:ec:1f:af:79:
         a4:1b:16:91:5a:a5:e5:33:10:92:7c:fa:0e:5c:9d:a9:0d:10:
         9d:f7:c0:62:13:3f:08:b7:60:93:38:ba:31:5c:49:34:b2:b1:
         ca:b3:b5:fd:38:db:12:e2:be:ac:bc:ee:75:cf:a3:32:fa:25:
         a5:8a:46:e2:33:f7:56:e0:44:76:eb:08:e9:4f:e6:3d:18:1b:
         a1:12:fc:58:01:a5:d1:82:36:0b:e7:23:ba:a5:dc:b9:99:ad:
         fd:9d:58:fd:1c:c2:88:b6:f4:8c:da:ac:41:d0:09:aa:09:bc:
         6e:cd:ab:f0:74:44:40:3b:5c:57:c6:95:d3:e5:47:c3:8c:81:
         92:90:e5:78:12:e3:56:62:74:3b:3c:a5:8b:e1:74:fd:51:93:
         46:fe:e6:06:be:7d:12:54:78:37:c9:2d:b2:8e:6b:67:07:ec:
         69:ef:a8:c8:d1:d2:5d:7b:bb:13:26:16:65:de:22:82:ee:94:
         86:aa:67:a9:8a:ee:7c:10:bc:23:ff:23:53:80:18:fc:c1:8b:
         48:61:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org