Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa
File:                     34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa (raw, json)
Hash identifier:          QNYPvS7RGZ2gi5jcMcWXzZCz4X0MsxuVzMrmnH2Bgig=
Subject key identifier:   B6:B1:EE:08:58:9A:37:42:6F:0E:16:2C:11:17:E0:E9:72:4C:DC:E1
Certificate issuer:       /CN=11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B
Certificate serial:       0A2A9E54A7F1DAAFB97916441C5579D63388D959
Authority key identifier: 11:EC:3F:AF:C4:B2:34:C0:5A:44:39:51:C7:BD:C1:F0:E9:89:BF:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa
Signing time:             Sun 04 Jun 2023 19:00:00 +0000
ROA not before:           Sun 04 Jun 2023 18:55:00 +0000
ROA not after:            Tue 04 Jun 2024 19:00:00 +0000
asID:                     268235
IP address blocks:        45.236.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2a:9e:54:a7:f1:da:af:b9:79:16:44:1c:55:79:d6:33:88:d9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B
        Validity
            Not Before: Jun  4 18:55:00 2023 GMT
            Not After : Jun  4 19:00:00 2024 GMT
        Subject: CN=3082010A0282010100B40E6C1ECD3A7786C9C5D0A2741EA5FBDEEDB787E93B8B61D2B830F4027B6B0A7FB1BE5193C909FB375D14F2B944C30422E476537D44F63BFE581EDD70C8E49B15B2B40C7DFE4ED63DD2770C5B66E1C98B7F235F1B04699DB6C19478255AF8F1CB7E7B401EF0F6BD4D4B2429522AF814312015CD89496E9F62CD4EBAD676BD962CBA546AE702C623D453E7F8AF425BBB0AD2C440FCCC153B8A428E3BEF6E902BF8978CA191ADFDF2E51A1B0C9384EBD57F76ABB9C336C36AE745642B26278A6F1ECDB44423295DD89F628435E9E817FFD3395F9978316B259E0B7C2F390FE3B36AA9BA9EA4CBCB67525B2E836303995244B7EEEB4CA388127108E4E3D5A37C630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:6c:1e:cd:3a:77:86:c9:c5:d0:a2:74:1e:
                    a5:fb:de:ed:b7:87:e9:3b:8b:61:d2:b8:30:f4:02:
                    7b:6b:0a:7f:b1:be:51:93:c9:09:fb:37:5d:14:f2:
                    b9:44:c3:04:22:e4:76:53:7d:44:f6:3b:fe:58:1e:
                    dd:70:c8:e4:9b:15:b2:b4:0c:7d:fe:4e:d6:3d:d2:
                    77:0c:5b:66:e1:c9:8b:7f:23:5f:1b:04:69:9d:b6:
                    c1:94:78:25:5a:f8:f1:cb:7e:7b:40:1e:f0:f6:bd:
                    4d:4b:24:29:52:2a:f8:14:31:20:15:cd:89:49:6e:
                    9f:62:cd:4e:ba:d6:76:bd:96:2c:ba:54:6a:e7:02:
                    c6:23:d4:53:e7:f8:af:42:5b:bb:0a:d2:c4:40:fc:
                    cc:15:3b:8a:42:8e:3b:ef:6e:90:2b:f8:97:8c:a1:
                    91:ad:fd:f2:e5:1a:1b:0c:93:84:eb:d5:7f:76:ab:
                    b9:c3:36:c3:6a:e7:45:64:2b:26:27:8a:6f:1e:cd:
                    b4:44:23:29:5d:d8:9f:62:84:35:e9:e8:17:ff:d3:
                    39:5f:99:78:31:6b:25:9e:0b:7c:2f:39:0f:e3:b3:
                    6a:a9:ba:9e:a4:cb:cb:67:52:5b:2e:83:63:03:99:
                    52:44:b7:ee:eb:4c:a3:88:12:71:08:e4:e3:d5:a3:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B1:EE:08:58:9A:37:42:6F:0E:16:2C:11:17:E0:E9:72:4C:DC:E1
            X509v3 Authority Key Identifier:
                keyid:11:EC:3F:AF:C4:B2:34:C0:5A:44:39:51:C7:BD:C1:F0:E9:89:BF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EC3FAFC4B234C05A443951C7BDC1F0E989BF4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:58:04:c3:3a:30:a2:39:68:13:8e:5d:85:f4:17:7c:6b:
         f0:1f:2b:1e:24:50:ba:b3:0d:d9:68:ff:c0:d3:38:51:02:85:
         2b:d9:62:05:0f:c6:5b:83:b6:c6:22:bf:93:88:48:e5:88:8e:
         cb:0d:ba:6b:cf:e1:c1:ec:68:26:bc:fa:21:8c:13:33:62:5f:
         02:8b:d9:67:b3:fa:7f:83:4e:da:20:07:cd:d3:e7:54:d3:03:
         98:9f:af:51:cf:9a:47:3e:a0:f0:53:58:fd:a5:0c:15:f5:df:
         1e:47:c5:e7:ba:fe:34:53:3a:9e:5b:7d:b7:da:3f:14:f4:ec:
         14:7b:77:89:31:68:f6:c9:4f:db:d0:89:d8:b0:9b:ff:f6:5e:
         a0:51:e1:a2:a4:f5:2d:2e:f9:90:c3:7f:7b:05:20:35:1e:d3:
         fb:9e:58:f1:6f:3e:cf:76:bf:99:4c:43:51:85:94:26:e6:b4:
         a7:02:d8:b0:7f:2f:1c:8c:4c:9a:c4:8a:11:88:0e:9c:1c:74:
         d2:60:4c:54:91:eb:f0:23:de:25:3c:9a:3b:8a:fc:eb:f7:c2:
         49:85:b0:a2:c4:e7:4d:22:75:32:5a:8c:84:43:65:11:56:66:
         b5:7d:68:1b:f0:1d:f9:6d:84:98:e2:9b:11:4b:cd:81:8a:69:
         bc:2a:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org