Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa
File:                     34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (raw, json)
Hash identifier:          +kJBCtOoQhQBi2hsSytnRJHU4atsgLEt0ru+jtMExFQ=
Subject key identifier:   E1:47:98:D1:8A:98:A7:8E:B7:E6:9A:C9:7C:B5:C4:BB:5B:50:93:29
Certificate issuer:       /CN=EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A
Certificate serial:       704CA23ABCA84F4ACAFC31F90456214310B1C5A5
Authority key identifier: EF:89:BA:CE:71:05:E7:1E:C2:0E:AF:CA:84:04:C3:A4:BA:2C:67:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa
Signing time:             Sun 22 Oct 2023 18:28:05 +0000
ROA not before:           Sun 22 Oct 2023 18:23:05 +0000
ROA not after:            Sun 20 Oct 2024 18:28:05 +0000
asID:                     267236
IP address blocks:        45.231.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4c:a2:3a:bc:a8:4f:4a:ca:fc:31:f9:04:56:21:43:10:b1:c5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A
        Validity
            Not Before: Oct 22 18:23:05 2023 GMT
            Not After : Oct 20 18:28:05 2024 GMT
        Subject: CN=E14798D18A98A78EB7E69AC97CB5C4BB5B509329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:80:e7:d3:23:de:5c:38:75:86:e9:e2:23:
                    71:d3:46:26:a2:de:d1:3f:69:50:b3:02:18:21:4d:
                    a3:02:30:bb:af:7b:bb:9d:7a:b5:98:6a:52:dd:f8:
                    69:ca:7a:b2:a2:1b:fc:f9:6f:e9:a3:db:a2:12:5f:
                    de:64:09:86:02:7f:e6:67:14:25:a6:5e:ed:90:1e:
                    74:cc:cb:69:fd:71:f2:eb:de:72:b7:58:1d:5e:b4:
                    95:fe:d1:85:99:83:1b:48:27:ba:16:84:9d:2a:13:
                    22:61:da:9b:aa:b3:43:f8:86:18:bd:99:0e:02:7d:
                    52:23:e9:e4:6c:d1:c2:e0:c0:36:1d:6f:87:45:9b:
                    b5:b4:e0:6f:f1:69:94:7e:6d:a2:19:d1:55:a3:27:
                    f8:d5:c7:4d:26:9b:40:53:17:8a:21:54:5b:2d:12:
                    84:7a:74:0f:6b:96:e6:9a:3c:92:60:ef:51:a2:5c:
                    d0:24:fd:97:04:06:c6:0a:cd:64:14:b2:e7:e2:1a:
                    a0:8d:31:3f:07:6a:2b:39:ba:55:eb:cb:3c:bb:42:
                    9d:84:da:18:c7:8e:9b:e5:e2:26:ed:26:45:39:9d:
                    37:e7:ca:02:15:18:a9:3e:90:59:93:b7:66:d3:9c:
                    9b:84:af:ed:36:45:93:f2:f6:9f:89:d7:d8:fd:53:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:47:98:D1:8A:98:A7:8E:B7:E6:9A:C9:7C:B5:C4:BB:5B:50:93:29
            X509v3 Authority Key Identifier:
                keyid:EF:89:BA:CE:71:05:E7:1E:C2:0E:AF:CA:84:04:C3:A4:BA:2C:67:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:22:9c:77:c7:bd:86:c8:8c:a0:1a:42:d6:87:5b:bd:4d:f8:
         7b:28:64:19:f7:af:8c:19:12:62:5a:2e:02:70:d5:b4:74:85:
         53:4b:c6:80:b9:ac:ca:ad:87:c8:54:ec:cd:29:74:c9:21:e8:
         5d:33:e5:d6:ef:51:31:17:bd:b6:8d:9e:2b:18:c3:58:b3:32:
         d0:cd:cd:84:cf:b9:0e:c6:ad:ff:81:c9:e8:f3:b2:f9:ff:71:
         5d:c3:32:52:76:4c:39:50:9e:87:0e:38:71:8e:44:17:67:bd:
         27:0c:18:06:b3:e0:74:74:90:a0:45:ba:e5:84:04:68:b1:08:
         9d:12:16:52:b1:e1:1b:f5:3a:0c:bc:96:c3:8a:6d:31:1c:a9:
         2e:78:50:da:93:82:84:ac:1d:2d:0b:d4:41:0d:7d:c0:21:dd:
         05:33:52:24:30:ab:b0:1b:73:50:25:e5:40:99:af:cf:6b:92:
         0e:ba:31:fc:87:04:02:da:1c:a8:37:19:b8:cc:b5:f5:66:48:
         d2:b3:3e:c2:0f:70:18:1e:53:93:09:20:01:1b:d0:f4:71:01:
         98:15:24:46:c3:96:c5:d0:4e:46:84:05:e1:82:65:c1:3a:06:
         7c:bf:50:7b:5e:42:36:8c:49:e7:05:c0:42:46:31:b3:5f:12:
         de:92:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org