Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e203238323230.roa
File:                     34352e3232372e3138382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          IEEKCD9nQDIUqTnPClwag5VPJO6FfDlC9jiZR3hzM20=
Subject key identifier:   50:72:38:FD:B9:0F:4C:94:6D:33:25:5F:D8:E4:8E:F1:F0:18:6F:98
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       0DA3351EB6664DE5885B1BC31282E5ACF8A41D66
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:00:16 +0000
ROA not before:           Fri 16 Dec 2022 19:55:16 +0000
ROA not after:            Fri 15 Dec 2023 20:00:16 +0000
asID:                     28220
IP address blocks:        45.227.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a3:35:1e:b6:66:4d:e5:88:5b:1b:c3:12:82:e5:ac:f8:a4:1d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:55:16 2022 GMT
            Not After : Dec 15 20:00:16 2023 GMT
        Subject: CN=507238FDB90F4C946D33255FD8E48EF1F0186F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:87:3b:2d:c1:66:58:e2:e4:00:5d:3d:53:
                    51:7a:df:db:7e:b6:46:e7:09:21:cb:b1:ab:20:02:
                    02:0e:13:14:93:f5:55:2e:71:61:24:f4:ab:2e:6d:
                    4b:85:e6:ba:6b:07:c8:69:70:c6:f5:c0:92:e5:69:
                    8a:0f:18:0b:de:c8:b7:ec:3d:cf:d5:b7:e5:31:a8:
                    1a:f2:fc:fa:7a:71:3b:2e:d9:3c:80:46:eb:4a:b1:
                    b3:a7:35:cf:15:8c:b9:1b:50:a8:7e:c2:05:2c:cd:
                    da:16:c2:1c:9e:d3:78:80:34:96:29:d3:b7:5e:43:
                    7f:53:75:e4:37:f8:ca:e2:bd:7f:6b:e7:3c:7f:6d:
                    a5:b6:94:ce:16:33:e8:d5:bf:37:9e:01:fb:40:79:
                    cd:2a:d2:26:3f:5c:89:d6:db:82:0b:83:ca:05:19:
                    d8:1c:e6:ae:15:ae:ea:53:48:83:ca:3a:f8:65:36:
                    ba:12:85:8d:b9:3e:e8:0a:bc:26:87:52:99:c6:9c:
                    60:12:a2:c8:d7:37:de:3d:a5:25:66:dd:00:92:d1:
                    16:7a:9c:2c:c9:12:10:47:34:45:cd:0b:64:eb:ba:
                    20:f8:86:63:3c:46:de:ca:26:86:57:fe:c7:24:5f:
                    65:21:44:0a:a0:aa:d5:2c:99:67:f7:53:7b:e9:71:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:72:38:FD:B9:0F:4C:94:6D:33:25:5F:D8:E4:8E:F1:F0:18:6F:98
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:98:25:c0:1f:8e:37:fd:81:39:5c:58:04:38:46:76:16:
         8a:8e:f9:ed:27:1b:7a:72:58:63:f0:3b:fc:ea:32:5c:eb:75:
         11:da:e8:b8:b6:aa:96:7a:2c:d7:ff:78:23:a0:45:3f:ad:39:
         d2:c4:28:17:cc:93:cc:bc:f5:58:a2:d2:81:2c:08:e7:a0:6d:
         fe:02:5f:d2:04:97:aa:c5:1d:bc:bb:6a:c5:52:54:51:49:2c:
         4d:bd:bf:e6:9b:b6:77:b6:83:62:6e:d7:63:f8:a7:50:e4:dc:
         98:49:4d:13:23:14:5d:08:d6:5c:f3:ba:16:b7:3e:d8:83:44:
         56:5f:e5:07:d6:9a:fb:26:a0:31:f2:fb:7c:fd:7e:fa:f7:4f:
         a3:66:7a:bc:70:c3:a3:07:16:9e:db:e9:dc:9c:0d:76:ec:58:
         76:05:63:5e:63:03:5f:f9:a3:dd:96:e5:38:0b:dd:dc:e1:4e:
         b7:06:5a:b2:8f:14:9e:ab:c9:ba:fb:67:6a:2b:fe:dc:eb:3a:
         1b:b5:48:6e:cb:08:1f:5c:15:8e:9f:ec:1c:3b:c0:e6:c8:72:
         1e:70:21:67:63:db:2b:4d:37:a2:89:61:64:18:df:46:16:03:
         b1:fb:96:63:5b:a7:48:d1:fd:51:76:a4:e6:87:c6:b3:64:10:
         6a:ac:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org