Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136342e302f32322d3234203d3e20323637323031.roa
File:                     34352e3233302e3136342e302f32322d3234203d3e20323637323031.roa (raw, json)
Hash identifier:          3a6qTqQfTcw0IYK7ePIqL/WockY4p+ayYcSBrztr4Ro=
Subject key identifier:   0F:B8:8D:08:33:B7:C3:5A:97:21:C5:46:9F:D8:CC:2A:F8:65:41:0F
Certificate issuer:       /CN=85BC1E89231501C6B1D18A71517860BF9606AC7B
Certificate serial:       0B1B381641F978DA6619F2FCD398CF63D4D70B10
Authority key identifier: 85:BC:1E:89:23:15:01:C6:B1:D1:8A:71:51:78:60:BF:96:06:AC:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136342e302f32322d3234203d3e20323637323031.roa
Signing time:             Sun 05 Nov 2023 05:00:00 +0000
ROA not before:           Sun 05 Nov 2023 04:55:00 +0000
ROA not after:            Sun 03 Nov 2024 05:00:00 +0000
asID:                     267201
IP address blocks:        45.230.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1b:38:16:41:f9:78:da:66:19:f2:fc:d3:98:cf:63:d4:d7:0b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BC1E89231501C6B1D18A71517860BF9606AC7B
        Validity
            Not Before: Nov  5 04:55:00 2023 GMT
            Not After : Nov  3 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:7a:f3:72:74:90:9c:20:aa:95:d5:2b:b9:
                    59:7a:3f:61:1f:8f:b5:75:41:b3:79:59:5b:7a:f9:
                    10:a9:c5:12:38:6d:d1:71:3d:72:8d:8e:13:67:10:
                    80:d0:5f:ee:f1:19:aa:fc:12:ca:6f:6b:e9:0f:4e:
                    5d:3d:01:8d:61:a3:91:e3:47:25:0e:97:ec:a8:53:
                    b3:43:3c:9f:91:71:47:dd:82:8b:23:d5:6f:57:8e:
                    7b:a8:6f:3c:fa:08:f6:a1:fc:28:1c:2f:9e:0e:61:
                    89:d1:8f:fa:db:1f:25:89:52:27:3b:70:d1:0c:b9:
                    b6:1d:00:24:9e:25:30:25:86:0a:ca:0e:ba:17:88:
                    2d:e3:da:92:0d:5e:12:ee:d7:8a:a6:fe:35:84:38:
                    a3:a3:c2:52:6f:cd:cf:b8:4d:ca:71:fb:78:83:d8:
                    b8:a0:cf:07:1c:24:19:4c:84:53:44:c8:5f:72:5f:
                    72:71:11:86:e9:1f:f0:45:a0:4c:9f:62:12:20:a9:
                    9d:6c:4e:4d:14:f1:23:8d:c9:5a:bd:78:54:72:8b:
                    04:b9:54:c8:09:02:72:8f:47:6f:8b:51:3d:e9:2c:
                    cd:84:d6:0a:4e:cb:a8:e6:d0:cf:6c:32:b2:88:ca:
                    76:ed:26:de:56:dc:bc:22:e7:cc:08:ee:87:b0:c8:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B8:8D:08:33:B7:C3:5A:97:21:C5:46:9F:D8:CC:2A:F8:65:41:0F
            X509v3 Authority Key Identifier:
                keyid:85:BC:1E:89:23:15:01:C6:B1:D1:8A:71:51:78:60:BF:96:06:AC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85BC1E89231501C6B1D18A71517860BF9606AC7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136342e302f32322d3234203d3e20323637323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:be:52:34:d1:1f:80:93:c8:1e:85:ac:fb:64:12:16:18:24:
         d0:7c:56:92:71:80:6f:4c:47:ca:e3:bb:f9:23:32:27:71:7d:
         91:f9:55:eb:22:95:39:d8:db:7b:89:9f:2f:e3:9d:d1:1c:8f:
         07:df:2f:10:16:47:77:55:7b:8a:1b:26:e6:19:c5:67:96:2a:
         c4:22:82:a5:1d:3f:10:1d:dd:82:ee:d0:f7:23:9f:04:43:ff:
         b5:cf:ec:77:53:71:4a:ab:1f:1d:02:70:31:82:36:8c:f7:f3:
         e8:08:0f:76:54:ac:fd:a9:8f:d1:7a:eb:19:55:03:dc:73:a8:
         34:d8:df:3d:ad:e6:c3:c4:cd:25:3b:d9:ff:5e:f7:25:e2:41:
         df:65:6a:42:f1:b2:55:15:bb:fd:3a:5a:79:51:53:3e:d0:b4:
         ee:d0:d5:86:f9:32:d7:4e:fe:79:26:b9:b9:61:17:3a:86:92:
         1e:d7:be:43:6a:cf:ae:e7:90:3a:22:9c:ab:50:4f:d0:4f:27:
         77:f1:09:27:00:09:34:41:e5:df:e2:e2:ac:77:47:d4:f8:2b:
         80:b3:ca:81:19:42:3f:f2:95:f0:91:08:26:e8:26:50:6d:3a:
         73:b7:cd:1a:17:77:0a:af:df:d3:d8:24:d5:0f:c6:7a:e4:ca:
         67:de:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org