Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32322d3232203d3e20323638313837.roa
File:                     34352e3137312e36302e302f32322d3232203d3e20323638313837.roa (raw, json)
Hash identifier:          N2f4wxbbxcf4DGdno3q7lJ942Lcv2zHWfZgiNp+w7NU=
Subject key identifier:   82:57:F4:EE:D0:E2:E6:0B:E1:6F:03:33:A7:B1:5A:9C:0F:77:D0:25
Certificate issuer:       /CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
Certificate serial:       3D84D0702C7327E4C184F0AD1C33F466C5FE23
Authority key identifier: 02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32322d3232203d3e20323638313837.roa
Signing time:             Sun 11 Sep 2022 14:20:02 +0000
ROA not before:           Sun 11 Sep 2022 14:15:02 +0000
ROA not after:            Sun 10 Sep 2023 14:20:02 +0000
asID:                     268187
IP address blocks:        45.171.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:84:d0:70:2c:73:27:e4:c1:84:f0:ad:1c:33:f4:66:c5:fe:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
        Validity
            Not Before: Sep 11 14:15:02 2022 GMT
            Not After : Sep 10 14:20:02 2023 GMT
        Subject: CN=8257F4EED0E2E60BE16F0333A7B15A9C0F77D025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:42:d2:97:8b:9e:32:62:f7:84:61:56:c5:
                    e8:97:dd:44:79:19:bf:63:33:f4:6c:f9:b4:e9:44:
                    3c:46:0a:bf:20:af:cc:e7:f1:ef:a4:ed:06:ea:bc:
                    1a:6d:2e:24:0d:35:14:18:5a:71:5b:96:83:da:09:
                    bf:97:50:c3:a7:81:8d:9e:12:18:32:09:a1:0a:eb:
                    14:ae:dc:a4:d2:7a:6c:24:f2:a8:38:23:66:80:ce:
                    d8:ec:54:98:4b:1c:02:64:82:17:3f:6a:a7:98:76:
                    2e:40:86:a7:83:43:6d:5a:db:5f:d1:da:02:bc:6b:
                    ab:44:e0:c7:aa:c0:0c:54:90:73:2d:1b:4a:48:97:
                    cd:81:2f:b3:91:d9:88:ff:34:de:35:d5:16:48:e7:
                    00:5f:87:23:e2:dc:73:68:54:40:55:b1:b8:8a:38:
                    f3:14:54:e0:06:d8:99:7c:6d:15:3b:f0:ea:a6:40:
                    28:27:a2:26:c9:7c:0b:67:32:5c:8a:1f:7d:53:f7:
                    ad:42:88:9a:c4:e0:48:6d:3b:92:63:2b:3e:b1:60:
                    e4:5d:9b:7e:2a:07:46:6c:91:0a:bb:65:ce:7f:34:
                    82:32:f2:a8:0b:a6:87:e8:0c:65:c5:b1:19:aa:b1:
                    e3:b8:f0:b9:0a:ce:08:8e:28:4c:f3:8d:3a:cc:be:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:57:F4:EE:D0:E2:E6:0B:E1:6F:03:33:A7:B1:5A:9C:0F:77:D0:25
            X509v3 Authority Key Identifier:
                keyid:02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32322d3232203d3e20323638313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:d7:54:08:bd:4c:4d:71:fb:78:93:d5:a0:7f:bf:d7:7c:e1:
         3a:a9:90:7b:61:4c:2a:a1:97:10:e4:bb:69:54:ab:aa:14:7b:
         3f:51:33:13:ce:b1:e1:cb:fa:37:57:00:09:cd:cb:59:05:98:
         ff:e3:d5:ad:3e:55:33:94:37:87:d6:53:bc:df:40:3c:02:92:
         37:be:9f:d6:e6:38:02:f1:23:05:df:79:7c:87:dd:19:39:23:
         e3:e8:8e:cb:1c:36:7f:2e:34:df:f4:89:b3:31:49:58:7e:fc:
         51:bf:fa:9e:f8:3e:98:b8:1b:1e:88:47:10:d8:00:1b:ee:be:
         6d:82:b8:d8:f9:af:72:ab:63:e2:fe:bf:ba:97:17:e0:f1:c7:
         da:3f:3d:5a:f4:e5:60:b2:45:88:12:bd:3a:52:8e:ff:85:d3:
         c0:15:79:8a:3d:b3:1a:a5:94:21:e8:42:77:2c:94:2e:84:91:
         36:a7:47:79:f3:47:89:f7:da:6e:73:07:00:00:ad:bd:fa:6c:
         54:73:5f:99:70:34:f5:e5:53:0f:00:5a:f0:cc:61:3f:b3:60:
         a8:db:7f:db:0c:09:3b:a4:f6:ae:bb:bb:7b:41:fa:b8:8c:c8:
         36:35:86:5c:d2:8f:4d:55:4c:a2:40:aa:24:41:06:62:d8:59:
         43:fd:02:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org