Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa
File:                     34352e3137372e38342e302f32322d3332203d3e20323639303333.roa (raw, json)
Hash identifier:          6jT+Wxpmlwd84NepN3DU7JZWyhRWaNDLhiSmaoWXue8=
Subject key identifier:   C8:C5:12:4B:F4:72:6D:05:68:D9:49:4D:7E:2D:3B:4D:0D:F1:15:9C
Certificate issuer:       /CN=C0261E6D297B0680D054CE57910CEDB3E3EE7771
Certificate serial:       5D616E45D073D9FD723186C5C5F2CC33A9CF84FE
Authority key identifier: C0:26:1E:6D:29:7B:06:80:D0:54:CE:57:91:0C:ED:B3:E3:EE:77:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0261E6D297B0680D054CE57910CEDB3E3EE7771.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa
Signing time:             Tue 23 Jan 2024 02:36:49 +0000
ROA not before:           Tue 23 Jan 2024 02:31:49 +0000
ROA not after:            Tue 21 Jan 2025 02:36:49 +0000
asID:                     269033
IP address blocks:        45.177.84.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:61:6e:45:d0:73:d9:fd:72:31:86:c5:c5:f2:cc:33:a9:cf:84:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0261E6D297B0680D054CE57910CEDB3E3EE7771
        Validity
            Not Before: Jan 23 02:31:49 2024 GMT
            Not After : Jan 21 02:36:49 2025 GMT
        Subject: CN=C8C5124BF4726D0568D9494D7E2D3B4D0DF1159C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:bc:02:0b:bc:b6:be:30:39:7c:07:2b:fa:
                    4a:1d:69:97:60:87:6f:7f:ba:b5:9e:11:9e:fa:d7:
                    95:d4:f6:d2:1a:63:b7:b5:7f:37:9f:a4:53:e4:fa:
                    2a:db:0d:59:23:ec:86:40:e7:8d:04:e8:93:30:d7:
                    2e:a5:5e:a1:76:dd:f2:40:ac:ca:cf:c7:b2:4c:db:
                    ba:50:dd:8f:53:16:3b:e4:f9:01:92:d4:ce:35:d4:
                    62:a5:a3:27:33:89:ed:3a:40:8e:7b:d4:e7:19:29:
                    61:44:99:38:08:67:77:53:99:f3:3f:ee:d6:b6:d4:
                    58:f9:09:c2:49:c9:40:f4:e8:b7:db:9a:06:f3:a1:
                    99:b5:64:06:5d:46:c1:7f:98:5a:f2:e5:58:08:2f:
                    49:eb:70:4a:a1:5f:35:21:2c:4e:6c:3a:44:58:3e:
                    65:35:92:c4:bd:a6:29:a1:7d:b3:41:a5:8a:26:7d:
                    ff:0c:81:06:e5:c6:69:ae:29:63:21:98:ea:ab:36:
                    2f:7e:34:22:de:6a:3e:19:1b:db:80:e0:64:60:ea:
                    d2:f6:02:89:15:07:82:2c:92:75:23:ee:af:ae:07:
                    4a:1c:4b:0b:99:06:0d:c9:c6:cb:45:2a:05:f0:1e:
                    cb:ec:85:63:7f:2e:40:e1:f3:9d:d6:ba:a8:7e:10:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C5:12:4B:F4:72:6D:05:68:D9:49:4D:7E:2D:3B:4D:0D:F1:15:9C
            X509v3 Authority Key Identifier:
                keyid:C0:26:1E:6D:29:7B:06:80:D0:54:CE:57:91:0C:ED:B3:E3:EE:77:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/C0261E6D297B0680D054CE57910CEDB3E3EE7771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0261E6D297B0680D054CE57910CEDB3E3EE7771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:8c:09:aa:71:c0:c4:c1:ed:e2:d4:b6:e2:58:32:a7:4f:
         61:65:cc:05:c2:3b:c6:ae:d8:5c:59:ec:ba:5d:1d:44:01:6e:
         f7:6f:9e:2f:19:1b:4c:27:27:55:48:50:62:9d:da:d5:23:7c:
         67:a9:9f:cf:86:b9:f9:fd:c4:c6:fe:13:79:bb:38:8e:ae:f9:
         0c:6e:72:d2:0a:f0:52:86:d5:ea:86:98:54:7c:a2:c0:e4:e1:
         7a:5a:35:db:fa:8d:36:25:d0:50:45:7b:8a:a3:64:87:62:cd:
         9a:ed:b4:d4:aa:38:8f:4f:50:24:5f:de:a2:43:66:e2:2f:53:
         86:bd:19:97:d3:9b:0d:e1:70:56:44:54:30:9a:5d:f6:66:32:
         ad:76:38:e3:d6:52:aa:6f:46:3c:b3:f8:52:36:32:a8:b4:f1:
         eb:4a:8c:52:ef:db:47:78:a4:a6:6e:ae:01:b0:79:49:4a:4b:
         ce:16:a2:60:07:44:34:0d:3d:bb:f0:a5:dd:ce:b9:4f:24:41:
         12:92:27:1c:0f:45:80:ec:df:5e:f1:b3:0a:3e:8b:69:b1:96:
         a7:58:dd:04:11:06:ea:f4:80:47:63:d2:83:f3:56:7e:9a:a0:
         99:32:b5:47:8b:c3:9f:ec:76:24:53:34:5d:19:9f:2a:91:f2:
         27:dc:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org