Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32332d3233203d3e20323637323439.roa
File:                     34352e3233322e35362e302f32332d3233203d3e20323637323439.roa (raw, json)
Hash identifier:          uixiwKqir7Pk1OmCb61OZriKiZrgrnsT67XY4ATsh+g=
Subject key identifier:   6C:BE:55:E5:06:1A:EA:31:7A:11:B8:53:1F:F9:BB:90:CA:E6:CE:F1
Certificate issuer:       /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial:       1352ECBCFBF9ADD74AE171F066852F3BDD84F137
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32332d3233203d3e20323637323439.roa
Signing time:             Thu 15 Feb 2024 13:49:28 +0000
ROA not before:           Thu 15 Feb 2024 13:44:28 +0000
ROA not after:            Thu 13 Feb 2025 13:49:28 +0000
asID:                     267249
IP address blocks:        45.232.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:52:ec:bc:fb:f9:ad:d7:4a:e1:71:f0:66:85:2f:3b:dd:84:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
        Validity
            Not Before: Feb 15 13:44:28 2024 GMT
            Not After : Feb 13 13:49:28 2025 GMT
        Subject: CN=6CBE55E5061AEA317A11B8531FF9BB90CAE6CEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:cd:7e:41:d0:fc:b4:00:1b:2a:9a:8e:4a:
                    cc:71:b0:f3:b2:1f:04:ab:1a:5d:ab:6a:cb:2b:f5:
                    fe:c1:44:77:f3:56:85:33:16:7b:3a:99:b0:87:3b:
                    a8:84:86:8c:56:42:d2:d7:24:86:d0:5c:f2:76:c4:
                    90:82:c8:9c:d6:52:ff:31:78:64:02:97:98:15:bd:
                    6b:9e:f0:48:c9:e3:36:2c:df:26:97:9d:0c:e3:e6:
                    62:7b:df:96:ee:e4:04:c3:38:a0:38:b7:41:4a:88:
                    a7:cc:70:03:87:fc:c3:b2:9b:3a:da:a7:c2:57:6d:
                    b6:48:14:f3:46:0f:05:68:02:b9:88:d2:b3:b0:c3:
                    a7:db:7f:f9:5e:a6:13:86:cd:8a:43:8b:64:d6:5d:
                    f5:6a:50:66:ba:89:b7:ab:b6:0a:21:20:fe:c6:dd:
                    14:76:c9:da:87:fb:b6:1a:38:73:35:17:8a:bc:0b:
                    74:8d:02:9d:5c:0f:1b:28:c1:89:21:2a:63:2f:c4:
                    0c:02:74:a3:0a:fe:46:ab:9d:9d:9c:03:ee:0a:71:
                    a1:18:c0:7a:2f:5b:c5:8a:57:a3:23:32:e4:a6:fb:
                    c3:9f:69:65:a7:ad:36:7b:37:d2:08:66:cc:97:98:
                    85:c1:53:2f:a6:64:87:06:bc:6d:03:7c:d6:7f:db:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BE:55:E5:06:1A:EA:31:7A:11:B8:53:1F:F9:BB:90:CA:E6:CE:F1
            X509v3 Authority Key Identifier:
                keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32332d3233203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:6e:0b:b1:12:ee:70:c3:5a:16:7f:3e:7c:13:31:76:60:
         f5:70:e5:7f:7a:e8:3e:29:74:af:91:2f:3e:75:e3:d7:b5:eb:
         b7:a7:a1:db:39:65:61:a2:ae:9e:6e:75:4a:93:30:3f:04:f2:
         15:54:26:ae:92:7e:2a:be:e0:e2:e4:d0:da:ea:d2:f7:05:e1:
         24:d0:bc:7e:66:1e:fa:be:ae:f3:8f:94:ee:05:5f:6c:8f:da:
         b7:3a:db:4a:7a:51:12:83:0f:fa:9e:f2:8c:48:d8:3e:36:5d:
         d9:84:32:7f:65:c9:32:17:21:e9:4c:eb:c6:85:9f:56:fd:f3:
         f5:25:7f:0b:4f:8c:64:d2:a4:8d:e3:5d:a9:9a:62:f7:2e:ee:
         9b:ac:ed:09:46:fb:25:53:b1:b6:c5:1e:6c:7c:35:fc:73:c0:
         42:36:b0:aa:67:96:98:d9:1e:c8:41:e1:af:ea:d5:cc:20:5a:
         44:62:40:37:41:4f:38:ea:a0:a3:96:d6:34:f1:ec:ee:4c:82:
         71:c9:7f:e4:58:e8:71:53:61:bc:8f:9a:63:da:ce:28:38:4b:
         30:ca:ec:b6:c4:6d:89:ae:67:b4:92:e5:ba:30:e7:79:c6:9d:
         86:3d:b7:ac:29:fe:63:81:00:88:8e:71:38:5b:24:3e:4d:9f:
         2f:14:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org