Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/34352e3137352e3131362e302f32322d3332203d3e20323632373737.roa
File:                     34352e3137352e3131362e302f32322d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          5b1/GJ0Ts6YU7tKmMOXCTpcssw8gcl9IIj5PPyRbLRg=
Subject key identifier:   0F:B7:4B:2C:56:9D:C6:B2:0E:97:B3:A8:9D:8F:3C:91:64:A4:C3:CD
Certificate issuer:       /CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
Certificate serial:       3F61F6A22F8C057EA598884DB30EFA92F43E9CC0
Authority key identifier: 03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/34352e3137352e3131362e302f32322d3332203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 16:33:10 +0000
ROA not before:           Mon 22 May 2023 16:28:10 +0000
ROA not after:            Mon 20 May 2024 16:33:10 +0000
asID:                     262777
IP address blocks:        45.175.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:61:f6:a2:2f:8c:05:7e:a5:98:88:4d:b3:0e:fa:92:f4:3e:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
        Validity
            Not Before: May 22 16:28:10 2023 GMT
            Not After : May 20 16:33:10 2024 GMT
        Subject: CN=0FB74B2C569DC6B20E97B3A89D8F3C9164A4C3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:8a:37:41:44:b5:38:bc:a6:78:d1:60:e5:
                    9b:61:31:b7:fa:30:2c:cc:2b:d6:65:e6:75:b0:2e:
                    aa:3e:3e:60:bf:9a:27:d9:d6:86:5a:8a:41:4e:17:
                    da:a8:82:73:84:e5:f9:2f:44:b2:6b:f5:f6:ee:67:
                    22:0f:a1:80:db:e0:7f:8e:3f:bf:82:39:8a:20:dc:
                    5f:d9:77:21:23:50:1d:64:83:46:b8:d4:83:3d:1b:
                    c7:44:2d:99:f6:96:e6:fa:ea:90:f5:35:0d:7f:26:
                    db:22:f0:96:b2:8a:04:02:ef:0c:72:b6:77:6e:b6:
                    c0:f3:39:ee:69:d5:c2:8e:2d:58:33:91:93:41:aa:
                    83:db:e3:9b:8c:c3:ae:67:69:51:96:2e:a6:30:4d:
                    d2:e0:37:5f:2a:79:c4:d8:1d:52:e2:19:1c:38:f7:
                    35:44:06:34:ea:49:a0:4d:8d:e4:34:de:43:59:4f:
                    f9:89:ac:85:d5:05:29:9a:cf:4a:a5:a0:c0:52:6c:
                    c9:15:20:1a:d0:ee:07:7f:43:68:e2:bb:eb:39:7f:
                    2b:8c:9a:05:e9:2a:f4:ed:8f:d2:68:91:da:a7:4b:
                    ab:f1:d9:3d:8f:1a:48:bd:2e:b7:43:ac:3e:52:44:
                    c3:43:df:60:c2:34:3e:0d:4f:50:18:15:4f:43:22:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B7:4B:2C:56:9D:C6:B2:0E:97:B3:A8:9D:8F:3C:91:64:A4:C3:CD
            X509v3 Authority Key Identifier:
                keyid:03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/03EC8988694A8AF5CA30CF11A817D548CF1FA024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/34352e3137352e3131362e302f32322d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:f0:c6:07:e7:93:a6:a8:71:50:57:fc:3c:55:6b:a3:76:21:
         f0:90:62:8e:78:c3:1b:0d:a6:05:04:2a:d8:ee:09:e5:e0:e7:
         98:84:9a:39:1f:85:e6:3b:e2:f9:94:ca:82:c8:6e:64:98:2d:
         76:f3:d9:22:13:42:9e:8c:26:d9:33:94:20:a9:d7:c7:f5:ee:
         cd:4e:e9:67:24:61:f8:3e:0c:29:39:f4:30:5d:9e:ca:1a:e8:
         23:4b:cb:8f:8f:fd:03:95:71:7f:4d:6d:23:b4:90:2e:0a:0d:
         b9:b3:1a:14:bb:79:db:cb:9f:6b:b8:b2:ce:16:b2:c3:fd:3b:
         46:00:62:d8:d0:33:43:49:4e:a2:b0:a3:16:40:40:34:8a:42:
         33:64:3c:63:40:cf:ff:43:1d:55:33:a4:1a:14:fc:38:f1:30:
         fc:9e:2b:60:01:a0:a4:a2:d8:8b:88:d5:0e:15:15:2d:92:e9:
         d7:82:56:9c:b0:e9:10:02:2b:d4:08:7d:cf:a3:4a:8c:23:58:
         6d:33:a9:7a:54:e2:89:ee:2e:dc:30:95:12:d2:e9:69:02:18:
         88:3f:b0:97:9c:25:e9:86:ba:25:72:71:cc:28:c4:b2:c1:39:
         60:39:fb:dd:d1:10:90:92:e8:fe:6d:75:64:e6:cc:17:46:a8:
         85:00:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org