Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/34352e3233302e3133322e302f32322d3232203d3e20323637313638.roa
File:                     34352e3233302e3133322e302f32322d3232203d3e20323637313638.roa (raw, json)
Hash identifier:          XE8GMd3LhSckSo2qOdz8GmEFIKfLCUPQOgBqxu5be+c=
Subject key identifier:   E8:E8:83:88:FB:1C:06:60:C5:DD:A0:EF:44:5A:CA:90:63:5D:41:31
Certificate issuer:       /CN=C48F9D371DFEA1B18BDE20A84C319A09510281E0
Certificate serial:       06B966E2D34601F76FB0448D6BEAC8919C459EC5
Authority key identifier: C4:8F:9D:37:1D:FE:A1:B1:8B:DE:20:A8:4C:31:9A:09:51:02:81:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/34352e3233302e3133322e302f32322d3232203d3e20323637313638.roa
Signing time:             Tue 16 May 2023 12:38:33 +0000
ROA not before:           Tue 16 May 2023 12:33:33 +0000
ROA not after:            Tue 14 May 2024 12:38:33 +0000
asID:                     267168
IP address blocks:        45.230.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b9:66:e2:d3:46:01:f7:6f:b0:44:8d:6b:ea:c8:91:9c:45:9e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48F9D371DFEA1B18BDE20A84C319A09510281E0
        Validity
            Not Before: May 16 12:33:33 2023 GMT
            Not After : May 14 12:38:33 2024 GMT
        Subject: CN=E8E88388FB1C0660C5DDA0EF445ACA90635D4131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:3f:f7:3e:6e:8a:66:6b:6e:be:48:d1:4c:
                    8f:3d:6d:45:cd:77:b9:c9:26:a2:47:2b:9c:d0:e2:
                    d3:d6:20:d8:57:a6:da:a6:c4:ee:d8:9c:cb:e9:6d:
                    54:23:15:6e:ae:89:21:15:3f:f0:27:b8:de:89:a5:
                    8c:79:ed:d5:bf:67:39:e1:8e:50:92:e6:a8:b0:64:
                    61:5b:b1:8b:79:bf:ef:b6:1c:d3:52:bc:af:96:56:
                    05:81:1a:87:50:fd:b2:65:6c:c5:ef:15:3e:33:4f:
                    b3:c3:18:fc:cd:f4:ca:43:86:b7:41:a1:5d:36:5a:
                    f2:61:5b:cc:3e:1b:a8:04:a5:26:0c:ee:b0:8b:ed:
                    9d:36:3b:5a:a8:39:be:06:1d:63:d0:78:68:96:c7:
                    fc:9d:19:16:07:bf:8c:c0:da:c3:94:d9:ea:3a:c7:
                    b2:4d:41:a8:16:9f:06:4b:f5:21:d9:36:79:0b:be:
                    3d:4e:3e:79:31:1b:d1:1e:e6:86:82:32:9a:34:93:
                    c4:ae:4b:97:f7:1f:7e:1c:68:6a:aa:25:40:60:5d:
                    b0:65:7c:89:7d:71:9b:72:94:8f:52:4e:39:87:cf:
                    1b:b0:f7:e5:3a:50:54:65:28:8b:98:e5:de:ff:9e:
                    eb:c2:1c:97:93:35:88:22:04:86:ae:49:ef:d3:d9:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E8:83:88:FB:1C:06:60:C5:DD:A0:EF:44:5A:CA:90:63:5D:41:31
            X509v3 Authority Key Identifier:
                keyid:C4:8F:9D:37:1D:FE:A1:B1:8B:DE:20:A8:4C:31:9A:09:51:02:81:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/34352e3233302e3133322e302f32322d3232203d3e20323637313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:c4:1a:e7:96:ff:ae:bc:f5:ba:18:b6:ce:b6:b2:87:20:b4:
         ac:1c:d6:8b:6f:ac:57:fa:ee:92:ea:90:91:a6:9e:c5:7e:4d:
         4e:a4:05:19:c7:99:aa:5a:38:73:6a:e4:6c:9f:46:c8:95:66:
         e4:a9:62:76:6f:7b:70:22:8f:de:0f:eb:8f:d2:0c:9b:fd:b7:
         97:d8:e6:97:54:4f:84:6d:d4:59:d9:c5:64:56:0e:9b:03:a5:
         25:d2:6d:74:d5:98:05:ae:c8:d8:65:15:db:9d:6a:1a:72:bd:
         d9:85:04:f0:49:ad:29:b9:7f:a0:1c:9c:58:18:bf:00:c3:51:
         4f:f0:e8:8c:e9:9a:cf:d7:db:f3:c9:17:c3:cf:46:fe:5a:00:
         e9:00:c1:ed:c7:e2:08:f6:9a:12:34:3a:90:10:84:80:41:9c:
         6b:b6:5c:5c:f2:86:15:8d:02:39:47:ad:ee:64:2d:6e:e1:44:
         33:28:79:17:8f:a3:0e:a6:bb:30:86:ef:6d:ec:60:7a:04:37:
         c2:44:4c:6c:e1:5b:79:a8:1c:64:2e:a6:65:8b:4e:d7:98:c9:
         44:a1:12:e6:7d:34:b4:23:df:f8:65:ad:50:0f:7a:12:50:18:
         6c:e0:9b:04:48:be:73:7c:fb:78:7d:10:97:2a:9f:16:aa:83:
         42:1e:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org