Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e38382e302f32322d3232203d3e20323638303536.roa
File:                     34352e3136382e38382e302f32322d3232203d3e20323638303536.roa (raw, json)
Hash identifier:          ZHO30Te6XBcp6E7KE1Gy1sgNSXkUREjno92d14CbYn0=
Subject key identifier:   F6:72:AD:F4:61:E2:38:06:A2:F9:BC:B2:56:79:C6:7A:47:FA:54:9B
Certificate issuer:       /CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
Certificate serial:       14B151E5F0F01182BE517CE733BA0A5CF7962C24
Authority key identifier: E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e38382e302f32322d3232203d3e20323638303536.roa
Signing time:             Wed 27 Mar 2024 15:59:18 +0000
ROA not before:           Wed 27 Mar 2024 15:54:18 +0000
ROA not after:            Wed 26 Mar 2025 15:59:18 +0000
asID:                     268056
IP address blocks:        45.168.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b1:51:e5:f0:f0:11:82:be:51:7c:e7:33:ba:0a:5c:f7:96:2c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
        Validity
            Not Before: Mar 27 15:54:18 2024 GMT
            Not After : Mar 26 15:59:18 2025 GMT
        Subject: CN=F672ADF461E23806A2F9BCB25679C67A47FA549B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:b3:85:bb:49:74:2b:42:46:5b:8a:94:a2:
                    f7:01:fb:9f:ca:5c:7f:32:8e:ab:e9:a7:af:a2:c3:
                    7e:df:ec:82:ea:a7:39:f8:c5:b2:4a:31:c0:34:07:
                    d9:89:2e:8d:29:d3:46:04:88:df:89:13:9c:07:ce:
                    82:6a:7a:02:8d:85:21:b8:13:7e:3c:32:9f:e7:0b:
                    d4:b8:f5:43:e8:5a:0e:63:60:2a:80:14:6d:cf:10:
                    0d:0c:ed:ca:74:07:6c:1f:31:89:65:c0:d3:1e:83:
                    0c:69:7f:64:57:c6:17:99:de:fc:15:da:7a:b0:12:
                    a0:c6:c7:4a:20:3d:2c:87:16:ba:20:63:47:55:04:
                    39:6c:11:10:12:cf:6c:05:84:73:6f:4e:7d:af:a4:
                    d9:f9:e8:65:54:86:64:21:6d:1b:87:d5:ad:f0:6b:
                    a4:25:04:a6:30:1c:f0:50:1c:a7:66:7b:fc:02:1a:
                    3b:d2:7b:8b:65:11:db:88:a8:a6:42:5d:e8:83:f1:
                    15:c2:53:e4:3a:54:4b:9b:c4:ca:03:34:7d:87:e5:
                    ab:f0:0f:7e:a5:2e:ed:4e:c4:f8:f4:ea:63:94:8b:
                    d3:57:90:b9:a0:af:ef:c5:b4:8c:0d:fc:58:4a:99:
                    c1:97:4c:84:9f:82:93:d3:74:8a:1f:3f:d8:ed:07:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:72:AD:F4:61:E2:38:06:A2:F9:BC:B2:56:79:C6:7A:47:FA:54:9B
            X509v3 Authority Key Identifier:
                keyid:E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e38382e302f32322d3232203d3e20323638303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:d0:f5:54:64:ae:82:17:18:c4:46:20:50:40:72:26:8e:
         c8:52:52:f3:4f:fc:12:f5:32:e3:25:d1:e5:d1:84:81:7e:2f:
         92:cd:2a:6b:22:83:a3:6f:ed:1f:db:5f:55:63:3c:97:99:01:
         dc:28:c2:8f:85:ee:c6:86:2e:e4:ff:61:94:46:07:16:33:4a:
         b8:9e:d9:05:7d:d8:f1:50:e7:5d:94:4b:ff:03:1e:7c:5a:5f:
         8e:9a:2a:4b:9e:b9:7b:cb:6f:c4:62:67:48:05:e6:32:f3:06:
         26:a1:fc:30:a1:c9:7d:af:e6:01:8a:a5:b6:6f:9d:95:c9:0d:
         83:09:1d:a1:e5:9f:9a:46:e2:99:d7:87:5a:cb:29:6f:12:9d:
         1e:96:67:71:bb:87:33:08:a9:5c:f9:3b:07:72:da:e6:b0:11:
         ab:83:96:de:4f:1f:b0:a3:d1:e3:5c:b5:cb:ed:14:7d:03:72:
         db:21:db:28:af:81:2b:15:06:cf:e9:a1:a6:44:86:1a:0c:54:
         21:a8:6c:78:4f:77:57:8d:09:30:1d:12:98:06:64:eb:4c:fe:
         67:dd:d0:d4:00:cb:ed:45:f7:fc:f8:ba:e7:3e:08:39:01:41:
         82:46:15:72:55:fa:cc:b0:32:e2:5a:ad:26:cc:31:69:0d:c9:
         51:af:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org