Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32322d3238203d3e20323637313538.roa
File:                     34352e3233302e36382e302f32322d3238203d3e20323637313538.roa (raw, json)
Hash identifier:          r0Re1vwHHpM5Fa3Xp3zmJ8tLWlD/6CJkiY9QlJqGgl0=
Subject key identifier:   14:88:94:DE:B8:51:07:94:93:89:10:81:1F:BE:F8:E9:D9:EA:88:63
Certificate issuer:       /CN=B96BA1DF29AD5BED612F9E0F05DA9E221657C8BE
Certificate serial:       3BE95DD3C274328AAA64BD808F1E11BD3CA5D81A
Authority key identifier: B9:6B:A1:DF:29:AD:5B:ED:61:2F:9E:0F:05:DA:9E:22:16:57:C8:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96BA1DF29AD5BED612F9E0F05DA9E221657C8BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32322d3238203d3e20323637313538.roa
Signing time:             Thu 09 Nov 2023 14:20:10 +0000
ROA not before:           Thu 09 Nov 2023 14:15:10 +0000
ROA not after:            Thu 07 Nov 2024 14:20:10 +0000
asID:                     267158
IP address blocks:        45.230.68.0/22 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e9:5d:d3:c2:74:32:8a:aa:64:bd:80:8f:1e:11:bd:3c:a5:d8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96BA1DF29AD5BED612F9E0F05DA9E221657C8BE
        Validity
            Not Before: Nov  9 14:15:10 2023 GMT
            Not After : Nov  7 14:20:10 2024 GMT
        Subject: CN=148894DEB8510794938910811FBEF8E9D9EA8863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:db:ab:34:43:bd:68:ed:29:68:f2:cb:dd:
                    48:73:8f:c4:98:d8:04:f8:ee:f9:ae:d2:87:51:f3:
                    4b:9b:ea:bd:dd:88:5a:e4:80:c4:b0:4c:41:64:a1:
                    17:1c:39:70:a8:d3:d3:87:0a:ac:25:c7:a5:ba:18:
                    a6:69:0a:aa:6d:5c:f3:14:48:a9:68:99:ff:80:26:
                    63:df:26:d6:9d:d3:d9:31:06:c6:3f:92:a7:8e:cb:
                    d5:8f:6a:ac:04:21:1d:e0:8d:89:2a:6f:1f:04:44:
                    3a:11:c0:82:d6:84:ae:de:79:42:34:67:4f:93:b7:
                    82:11:82:60:b3:89:03:45:a5:12:db:72:69:dd:0b:
                    be:18:7e:29:98:ea:b7:55:8d:74:f6:e7:d4:3b:f2:
                    8e:03:56:c9:3a:c9:9a:55:33:63:6a:18:3e:c8:05:
                    90:6c:6e:d7:73:49:09:6b:45:5b:fc:62:48:25:28:
                    8d:b4:c1:2a:1d:a0:6f:60:f2:9a:de:ee:53:e6:03:
                    42:04:24:d7:38:f0:c2:cd:99:e3:27:44:fb:e8:37:
                    ed:34:f3:bb:2a:e1:e4:2e:18:96:b3:0c:cf:9c:f9:
                    21:27:6a:4c:1f:0b:dd:9b:7b:3c:d1:c0:84:f0:e0:
                    4f:da:2f:ce:f9:1d:4d:11:e5:d5:d0:ce:95:be:81:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:94:DE:B8:51:07:94:93:89:10:81:1F:BE:F8:E9:D9:EA:88:63
            X509v3 Authority Key Identifier:
                keyid:B9:6B:A1:DF:29:AD:5B:ED:61:2F:9E:0F:05:DA:9E:22:16:57:C8:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/B96BA1DF29AD5BED612F9E0F05DA9E221657C8BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96BA1DF29AD5BED612F9E0F05DA9E221657C8BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32322d3238203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:bb:e0:4e:ae:91:5c:3d:a8:2f:4b:55:c3:62:28:92:bc:
         13:8f:b7:13:28:45:77:47:73:43:65:4e:ec:b3:b2:a9:3f:62:
         7a:29:f6:3b:12:3a:0e:9a:5e:21:62:5d:3a:ad:12:a5:11:95:
         ba:d6:0d:38:03:70:3e:17:7f:b6:f0:cb:5c:00:3e:f5:0e:86:
         1e:9d:63:b7:0f:f4:70:c9:02:31:60:77:b8:31:b9:7b:53:c0:
         89:a5:50:94:de:80:a5:d5:4d:13:66:d5:a0:0a:88:fa:73:53:
         21:9c:a5:bf:b9:48:80:22:25:82:f1:f8:af:32:dc:0b:62:98:
         d2:e0:ed:75:6e:a1:46:03:a8:11:c8:92:15:12:c0:59:83:aa:
         94:78:94:63:94:df:25:ae:d4:88:42:1c:3a:10:a9:cb:ac:5a:
         76:2b:89:fb:63:f5:df:10:ab:c9:e7:fe:ca:3d:61:5f:0d:51:
         3a:3e:0a:9b:ac:27:5f:fc:4c:d5:f1:4b:50:40:ae:d0:21:fa:
         da:d4:a2:0d:2d:6e:65:35:5a:c3:35:3c:bf:e0:d3:9a:59:83:
         bc:4d:c4:3e:fb:2f:ea:fd:bf:6a:43:84:19:ee:44:1d:38:c4:
         23:ca:ba:d7:c6:6d:70:f0:af:96:c6:17:70:4a:f3:91:3e:0e:
         c2:4a:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org