Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32322d3332203d3e20323637393932.roa
File:                     34352e3136372e36382e302f32322d3332203d3e20323637393932.roa (raw, json)
Hash identifier:          e+dwfKkrr6UkT8UFdlA/vGb1JNxaAuYtOWXYHrezGYU=
Subject key identifier:   23:EC:FF:58:BD:D3:C6:69:4B:18:EB:CD:56:02:67:C6:70:0B:64:D6
Certificate issuer:       /CN=85221691CDF08706BEE1A2A092778521C8204123
Certificate serial:       302A6850B6FDAEB2D7D1BE08B2132CA8F1FE3D4A
Authority key identifier: 85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32322d3332203d3e20323637393932.roa
Signing time:             Mon 22 Apr 2024 13:26:36 +0000
ROA not before:           Mon 22 Apr 2024 13:21:36 +0000
ROA not after:            Mon 21 Apr 2025 13:26:36 +0000
asID:                     267992
IP address blocks:        45.167.68.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2a:68:50:b6:fd:ae:b2:d7:d1:be:08:b2:13:2c:a8:f1:fe:3d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85221691CDF08706BEE1A2A092778521C8204123
        Validity
            Not Before: Apr 22 13:21:36 2024 GMT
            Not After : Apr 21 13:26:36 2025 GMT
        Subject: CN=23ECFF58BDD3C6694B18EBCD560267C6700B64D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:b7:a3:8a:91:e6:3c:12:88:b9:f9:f9:9b:
                    d5:38:69:39:11:1d:49:19:c2:31:e8:a4:f1:15:9d:
                    cb:f6:d5:2a:d4:b5:c6:19:15:31:04:f8:35:a7:06:
                    be:56:9e:b6:42:2a:a9:f4:85:97:4b:49:57:ff:42:
                    3e:db:9a:25:e1:9c:9c:89:b3:e5:70:99:40:42:04:
                    53:ed:32:48:29:a9:f5:08:a0:97:44:cc:8b:46:59:
                    24:92:d5:7e:d8:7c:10:da:08:e6:d2:ed:71:84:b7:
                    b3:5d:f8:89:90:83:50:c3:d6:61:71:6d:7a:51:76:
                    79:27:4c:58:1c:7e:cc:84:71:c4:5f:a1:90:5f:a5:
                    0b:46:01:e9:98:02:05:a2:ac:5e:2c:5c:6b:2b:98:
                    ee:98:0d:bc:9d:9a:9d:b7:78:cf:29:8c:55:07:fe:
                    ed:ea:67:99:2e:40:20:89:84:4b:46:3f:d1:6c:35:
                    02:5f:8f:dd:92:d6:e0:62:0f:e3:0a:77:7a:49:66:
                    76:64:78:02:9c:16:db:f0:02:d2:7f:3c:78:ae:12:
                    0e:5f:91:09:66:2e:ff:e0:0a:9e:77:47:92:65:d5:
                    22:db:5a:f8:c9:75:fc:f1:78:5e:93:d8:fb:6c:40:
                    dc:0d:c8:27:3d:f8:e9:e6:76:63:7e:96:73:83:90:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EC:FF:58:BD:D3:C6:69:4B:18:EB:CD:56:02:67:C6:70:0B:64:D6
            X509v3 Authority Key Identifier:
                keyid:85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/85221691CDF08706BEE1A2A092778521C8204123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32322d3332203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:6d:43:17:ac:95:7c:cf:fa:d1:1c:b5:71:e8:33:db:f0:d1:
         47:5b:2d:bf:5c:04:c4:01:64:9f:82:6e:4e:13:2e:f8:6a:ce:
         b1:75:37:14:3f:70:51:86:b2:50:b8:3e:3e:2d:21:d7:04:79:
         ed:22:8b:91:ce:db:d0:41:79:b7:e4:36:f7:8a:ec:98:bb:f6:
         99:c8:77:88:ae:f1:9d:77:1d:c6:61:a1:13:ce:cd:7c:80:55:
         35:a1:36:96:21:aa:e7:6b:69:b7:4e:ff:5f:05:1e:dc:5e:e7:
         f2:5a:ae:5e:4f:1e:31:bd:1e:ef:94:1d:37:3d:dc:41:56:d5:
         d5:b8:e3:8f:72:98:64:4a:59:51:30:8b:19:06:97:32:13:4f:
         6e:c4:cc:8c:07:36:d6:81:fc:b7:25:5d:6b:3e:f0:80:d9:f5:
         e0:fc:34:27:d1:99:a1:8b:e5:67:72:20:cf:6d:9c:c4:a6:d7:
         86:e7:e7:16:1b:0a:d0:22:57:64:4f:11:1c:df:e4:92:01:3a:
         af:10:6a:ac:bb:55:34:18:85:eb:7b:7b:c7:f7:63:cb:c2:cc:
         f9:ab:39:25:1b:18:0f:84:51:21:fa:03:7a:3c:44:86:70:a9:
         8b:c0:3c:ab:87:4d:0f:64:e4:ce:15:2a:f9:48:ad:0f:0c:4f:
         e1:f3:97:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org