Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32322d3232203d3e20323637313538.roa
File:                     34352e3233302e36382e302f32322d3232203d3e20323637313538.roa (raw, json)
Hash identifier:          R6x2VvtmM9dq4XV3B9NchOy12DqKCLWlQbYDwEoUsCM=
Subject key identifier:   E2:82:7C:B6:66:24:41:75:3A:07:C9:C1:C8:92:93:69:D6:5B:3E:F8
Certificate issuer:       /CN=A5B05E902FCF0AE404C26BD07DC5B4DFCC542934
Certificate serial:       651C81D014B5852CEF7FF31050403924CB6677AB
Authority key identifier: A5:B0:5E:90:2F:CF:0A:E4:04:C2:6B:D0:7D:C5:B4:DF:CC:54:29:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32322d3232203d3e20323637313538.roa
Signing time:             Thu 17 Nov 2022 15:58:08 +0000
ROA not before:           Thu 17 Nov 2022 15:53:08 +0000
ROA not after:            Thu 16 Nov 2023 15:58:08 +0000
asID:                     267158
IP address blocks:        45.230.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1c:81:d0:14:b5:85:2c:ef:7f:f3:10:50:40:39:24:cb:66:77:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B05E902FCF0AE404C26BD07DC5B4DFCC542934
        Validity
            Not Before: Nov 17 15:53:08 2022 GMT
            Not After : Nov 16 15:58:08 2023 GMT
        Subject: CN=E2827CB6662441753A07C9C1C8929369D65B3EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:a4:27:1f:6b:1d:e2:0a:57:e4:5f:84:d3:
                    47:22:e3:8f:48:70:04:0d:ff:7e:25:52:31:77:f2:
                    42:c8:ff:77:70:55:f1:45:12:46:0c:a7:b2:32:10:
                    a1:0d:27:35:5e:a5:36:31:c1:77:b0:4e:7d:17:53:
                    0c:0d:cd:99:75:4d:d4:6e:56:97:8b:45:cd:18:40:
                    f4:a1:dc:fe:a9:16:46:83:2d:80:68:35:fe:d8:73:
                    71:ae:77:8b:06:4d:6e:74:19:7f:8c:8f:2e:b8:00:
                    40:d1:45:f9:a6:85:65:6a:c6:93:e2:5b:9a:54:be:
                    6b:e3:05:aa:8f:61:2c:77:c7:ab:5c:21:f2:4f:16:
                    43:65:7d:12:04:38:5b:f6:a1:bb:c0:1f:ed:42:aa:
                    85:bc:50:cc:fa:d0:63:10:2f:71:69:b0:e3:2d:79:
                    cb:84:94:8f:39:f4:70:6a:c9:d8:51:b0:6a:2f:81:
                    70:9b:ee:96:a1:ef:b2:5b:99:84:74:14:63:7d:9f:
                    df:ab:d2:e1:d1:b4:38:05:c1:3a:fd:c8:80:09:f6:
                    94:fa:27:ed:11:52:10:0d:e8:e6:ef:76:52:87:8e:
                    e1:31:b8:63:21:6d:a4:19:22:b3:6b:30:31:78:39:
                    f1:c9:a4:c4:91:66:58:29:1c:2c:b3:d4:4e:77:62:
                    f9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:7C:B6:66:24:41:75:3A:07:C9:C1:C8:92:93:69:D6:5B:3E:F8
            X509v3 Authority Key Identifier:
                keyid:A5:B0:5E:90:2F:CF:0A:E4:04:C2:6B:D0:7D:C5:B4:DF:CC:54:29:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32322d3232203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:20:56:8d:fb:63:63:96:a7:95:d7:38:75:3f:eb:58:0f:8d:
         1f:10:1d:af:a8:9c:09:ca:53:ca:5a:42:a2:9f:4c:8d:45:b2:
         b7:62:52:ac:50:a5:3e:40:7d:b6:df:e8:7d:ec:42:c0:18:bb:
         b2:41:12:7e:98:76:3b:81:d5:ba:83:b9:c8:e7:aa:30:d6:a2:
         66:65:df:63:f8:b4:b8:c8:6c:72:21:ab:02:8f:d4:29:ce:88:
         fc:20:7f:3a:b9:a1:8e:e3:54:2d:3a:00:b7:5b:b1:a7:f6:87:
         0b:f7:76:92:1e:1e:f8:33:a1:82:ad:6f:a6:5d:70:64:af:29:
         e8:54:aa:39:96:ec:8f:b8:ed:7f:34:e3:1a:55:e2:98:58:74:
         6a:7a:8b:95:3f:bf:f3:44:c8:14:b7:5b:e7:35:83:b9:19:91:
         5e:47:96:a2:c4:a1:bd:ba:39:84:e7:ac:75:01:34:b2:b8:71:
         77:c2:08:05:00:f2:75:20:cf:d0:c8:0d:f3:05:ac:6d:64:55:
         96:16:96:50:ae:ac:ae:2a:4e:fd:f6:36:52:48:ac:fe:42:c9:
         4d:1f:8a:a4:92:6c:c8:6d:42:97:c6:92:ae:3c:ce:b9:28:44:
         5c:03:b0:d5:24:08:f5:6f:56:6c:0b:70:a2:3c:5b:61:5f:52:
         db:93:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org