Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/34352e3138362e38382e302f32322d3232203d3e20323639343137.roa
File:                     34352e3138362e38382e302f32322d3232203d3e20323639343137.roa (raw, json)
Hash identifier:          6u/uoU+ko2QGG4z8NwbwtDaMdC9zjx7pFPz8ARGqFxs=
Subject key identifier:   63:26:A7:6E:36:09:58:0D:0E:EF:99:29:44:2F:B1:D0:DF:05:4B:1D
Certificate issuer:       /CN=F8E0774EBB65EA4D22E46394EB91322F695067B5
Certificate serial:       4E0687B2D3A1D44D5416BBD8E8FBAB272CD78F2C
Authority key identifier: F8:E0:77:4E:BB:65:EA:4D:22:E4:63:94:EB:91:32:2F:69:50:67:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E0774EBB65EA4D22E46394EB91322F695067B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/34352e3138362e38382e302f32322d3232203d3e20323639343137.roa
Signing time:             Tue 28 Feb 2023 18:02:35 +0000
ROA not before:           Tue 28 Feb 2023 17:57:35 +0000
ROA not after:            Tue 27 Feb 2024 18:02:35 +0000
asID:                     269417
IP address blocks:        45.186.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:06:87:b2:d3:a1:d4:4d:54:16:bb:d8:e8:fb:ab:27:2c:d7:8f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E0774EBB65EA4D22E46394EB91322F695067B5
        Validity
            Not Before: Feb 28 17:57:35 2023 GMT
            Not After : Feb 27 18:02:35 2024 GMT
        Subject: CN=6326A76E3609580D0EEF9929442FB1D0DF054B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:bb:4e:e7:d3:ea:61:cc:0f:8c:ae:b3:a5:
                    2f:03:24:4f:38:78:87:0a:b7:05:b0:2f:09:56:65:
                    fd:6f:41:6b:5c:03:e1:d3:6d:f9:c3:cf:39:4d:16:
                    96:d4:5e:66:2e:1f:9d:22:9d:03:79:89:b3:b6:8f:
                    83:36:ac:bf:1a:b3:e4:bf:b7:db:98:66:49:33:46:
                    1e:05:34:55:99:0f:13:5e:8f:2a:6e:79:cd:f2:98:
                    d0:f3:cb:2c:76:28:3d:ef:0f:18:33:59:aa:5c:34:
                    3c:b5:42:37:1c:60:4f:00:09:a8:c5:d1:0a:45:1c:
                    06:58:65:16:1e:43:a7:0e:bb:fb:2f:58:ef:d0:88:
                    2a:43:66:32:e2:f7:13:01:d8:99:82:3d:a7:44:b5:
                    d5:fa:11:fb:a8:96:7b:54:26:01:7f:14:91:70:bd:
                    01:90:21:fa:f5:af:2a:21:73:4d:56:e7:dc:3b:31:
                    51:aa:64:08:59:5d:ec:bf:d3:ff:b7:b1:29:27:33:
                    32:32:30:3f:a6:7f:55:8f:98:29:21:c1:02:51:66:
                    00:9b:a8:c4:ef:ae:46:5b:18:1e:24:4e:c8:39:84:
                    59:25:a8:2a:b4:0e:92:dd:10:b0:ea:bf:97:60:5f:
                    b4:8b:23:84:e9:7e:83:c0:98:4e:eb:04:00:ba:ce:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:A7:6E:36:09:58:0D:0E:EF:99:29:44:2F:B1:D0:DF:05:4B:1D
            X509v3 Authority Key Identifier:
                keyid:F8:E0:77:4E:BB:65:EA:4D:22:E4:63:94:EB:91:32:2F:69:50:67:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/F8E0774EBB65EA4D22E46394EB91322F695067B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E0774EBB65EA4D22E46394EB91322F695067B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/34352e3138362e38382e302f32322d3232203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:76:e7:f3:9b:d9:12:3a:93:cd:5f:0b:75:b4:09:a9:4a:61:
         53:a7:83:5e:5e:85:1b:db:a2:94:39:9a:0e:91:ec:1d:bf:d2:
         91:e6:f1:73:a6:01:60:13:38:fa:69:11:53:3a:e3:80:04:8b:
         44:8d:e9:71:c6:f5:39:46:cb:e6:0b:7d:fd:ba:28:0e:1b:ef:
         dc:0b:6e:57:00:af:87:ea:b7:4f:ac:99:77:9e:ed:bf:94:c9:
         42:d2:48:f8:b1:60:87:82:8c:a7:b7:90:80:f6:cd:84:2f:f9:
         2e:58:32:d0:5d:a7:90:8c:37:17:0e:dd:0d:01:5c:b1:0c:ac:
         8b:ac:96:60:7a:dc:13:66:f3:16:6f:e6:26:52:af:f7:59:0f:
         57:70:19:8c:c8:d9:26:c7:9d:06:89:01:b9:4d:67:66:56:96:
         f9:e1:d0:19:20:f7:4e:32:5e:b9:48:48:85:6e:d5:56:f9:eb:
         84:9d:9c:c8:e0:06:a1:22:84:91:87:c7:64:e6:b6:70:19:75:
         7b:f0:f9:fc:d9:5c:3f:9f:7d:11:50:fd:1f:8e:6f:11:83:21:
         13:6c:9b:d5:54:96:b2:61:cc:2e:b7:ad:8b:2f:28:9f:c8:8a:
         21:6f:ab:55:7f:5d:0f:78:b6:17:27:c4:a2:e0:6a:04:f0:2b:
         32:d1:4a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org