Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32342d3234203d3e20323637313538.roa
File:                     34352e3233302e36382e302f32342d3234203d3e20323637313538.roa (raw, json)
Hash identifier:          TNT8SYoyYKso/PKpi0pxuT5IRvRRpqN+5umTF8uHJwM=
Subject key identifier:   CA:A1:B2:B5:54:C7:1C:9C:6E:09:F4:B4:56:85:67:F4:62:5A:EE:BE
Certificate issuer:       /CN=A5B05E902FCF0AE404C26BD07DC5B4DFCC542934
Certificate serial:       69826AE73EE99D91CF605B2739BFB62064975FE3
Authority key identifier: A5:B0:5E:90:2F:CF:0A:E4:04:C2:6B:D0:7D:C5:B4:DF:CC:54:29:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32342d3234203d3e20323637313538.roa
Signing time:             Mon 07 Feb 2022 12:09:11 +0000
ROA not before:           Mon 07 Feb 2022 12:04:11 +0000
ROA not after:            Mon 06 Feb 2023 12:09:11 +0000
asID:                     267158
IP address blocks:        45.230.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:82:6a:e7:3e:e9:9d:91:cf:60:5b:27:39:bf:b6:20:64:97:5f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B05E902FCF0AE404C26BD07DC5B4DFCC542934
        Validity
            Not Before: Feb  7 12:04:11 2022 GMT
            Not After : Feb  6 12:09:11 2023 GMT
        Subject: CN=CAA1B2B554C71C9C6E09F4B4568567F4625AEEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ff:fc:12:b6:96:2c:72:ec:5e:51:72:c7:e7:
                    24:21:b0:39:3f:37:b6:76:7a:1c:1e:f8:1c:7d:42:
                    5b:c8:ea:bb:68:f9:df:31:19:d6:28:fb:cd:4b:7e:
                    e1:d1:bb:85:a3:b3:e6:f7:1a:65:e2:f6:91:06:b5:
                    29:ce:73:24:f2:14:4b:55:c2:e5:5a:b8:02:14:06:
                    3b:84:4f:e6:98:cb:02:7e:40:33:ec:39:19:c1:67:
                    90:36:0e:06:2b:79:e7:8f:76:04:ee:d1:8d:07:82:
                    52:11:07:34:79:0b:be:0f:db:c9:ae:6f:53:23:45:
                    8e:e2:c5:63:c6:7c:fe:ca:07:cb:b7:07:8a:70:01:
                    d6:0b:a1:31:7a:8e:3d:27:2b:7a:81:5d:80:d9:69:
                    27:f6:37:18:65:15:bb:49:9b:e5:34:f0:02:05:60:
                    37:e9:5a:f4:92:b9:c0:eb:57:50:31:8f:3e:8f:a7:
                    47:b4:0d:4d:93:d5:aa:32:a2:60:ab:cc:37:d3:4a:
                    5a:98:ca:e2:bd:6f:ef:ff:45:43:54:78:aa:4e:0b:
                    d0:99:5e:a7:9f:f6:2e:3f:4f:bf:70:c9:70:f3:ad:
                    89:38:6b:53:84:5e:8f:fb:a4:88:72:9e:8c:4b:b7:
                    f4:28:3d:5d:48:c3:5c:66:b7:59:8d:57:66:8d:e2:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A1:B2:B5:54:C7:1C:9C:6E:09:F4:B4:56:85:67:F4:62:5A:EE:BE
            X509v3 Authority Key Identifier:
                keyid:A5:B0:5E:90:2F:CF:0A:E4:04:C2:6B:D0:7D:C5:B4:DF:CC:54:29:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/34352e3233302e36382e302f32342d3234203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c2:21:c5:a3:55:8d:88:91:02:63:f3:44:c5:40:c4:75:e8:
         d2:f4:86:d3:f4:b3:79:42:51:96:eb:61:d3:92:ad:0c:6b:df:
         24:74:82:91:4b:34:25:67:19:e9:23:2f:bc:79:c5:09:f4:4b:
         92:2b:f9:79:f0:d4:88:00:e1:76:15:ad:41:80:59:90:b3:d7:
         17:88:99:fc:4d:0f:db:6a:39:4a:04:ad:98:6f:49:fc:f4:31:
         94:a7:98:32:b0:b9:b9:11:08:9d:bf:7c:f6:1e:2e:e2:be:13:
         91:b2:60:67:1b:55:44:a9:f4:ed:a4:be:4b:86:5b:82:b2:f0:
         86:13:49:5c:df:d3:0b:ae:43:44:f3:b3:ae:07:e3:c0:b2:53:
         19:9d:31:74:a5:54:9b:8d:84:99:7d:46:3d:0f:9f:23:ce:39:
         f6:1e:83:7d:40:87:b1:b6:8c:5a:30:c7:0d:10:a0:ff:96:46:
         5f:80:da:a0:4d:99:61:df:e6:25:ae:2d:b8:b6:11:53:5a:ef:
         23:36:d7:57:48:c0:5b:48:3a:78:97:66:7d:0c:1f:0c:5f:a5:
         4c:04:fb:22:f6:2a:29:3e:96:a3:56:7b:02:18:a5:12:87:48:
         c5:30:73:29:e8:eb:6d:34:37:af:25:eb:23:de:b5:2c:5a:7c:
         3e:74:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org