Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/34352e3233352e3139322e302f32322d3332203d3e20323632373737.roa
File:                     34352e3233352e3139322e302f32322d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          BCh4m842suYqftj1DuiV/PGe24LxEGxwajYc6yQFSnI=
Subject key identifier:   26:36:70:1A:C8:DF:B9:C1:21:21:59:3D:15:7F:E2:7B:8E:AE:BF:B7
Certificate issuer:       /CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
Certificate serial:       086DC8CA62D4F206651C12705FF6A5453FD95601
Authority key identifier: 03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/34352e3233352e3139322e302f32322d3332203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 16:33:35 +0000
ROA not before:           Mon 22 May 2023 16:28:35 +0000
ROA not after:            Mon 20 May 2024 16:33:35 +0000
asID:                     262777
IP address blocks:        45.235.192.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6d:c8:ca:62:d4:f2:06:65:1c:12:70:5f:f6:a5:45:3f:d9:56:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
        Validity
            Not Before: May 22 16:28:35 2023 GMT
            Not After : May 20 16:33:35 2024 GMT
        Subject: CN=2636701AC8DFB9C12121593D157FE27B8EAEBFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:57:65:0d:90:f7:9a:b2:12:e2:26:cd:d0:e2:
                    f2:f0:a4:6d:6e:15:47:9a:d4:4c:ab:1c:18:4c:97:
                    6d:93:30:d4:63:c6:38:6d:f4:a2:44:d0:e9:70:84:
                    bf:7d:67:e0:f0:0f:f6:3a:09:d5:e6:8b:fb:34:c1:
                    0e:ec:39:2a:bd:40:ee:ca:76:32:67:24:6c:29:28:
                    99:b3:96:86:1a:62:b9:5c:66:03:51:0d:11:e7:f9:
                    40:ca:37:75:33:97:ad:85:fb:de:fe:74:8f:ac:8e:
                    a0:ac:cd:94:69:cf:e2:a5:b6:dd:5c:2d:1c:c7:6a:
                    3b:e6:7a:7a:4e:f8:c3:40:d0:be:b2:12:6e:b9:42:
                    36:70:46:66:36:98:60:4b:af:32:7e:2f:5a:c4:af:
                    6a:36:8e:40:0f:d7:7d:29:4d:01:f8:b4:9b:74:59:
                    b9:97:67:e1:b0:ee:95:c6:ec:09:ff:16:d7:87:6f:
                    e2:ae:18:99:a5:a4:10:f5:c9:da:63:25:ac:cc:45:
                    94:9f:7f:9e:2a:33:02:a3:ed:d5:de:4d:3d:a4:4d:
                    e6:32:be:d6:3b:ca:f1:c0:c6:35:7b:7d:b0:4f:13:
                    9b:75:1b:92:48:7b:cc:d8:37:55:fc:dd:ac:a7:0e:
                    26:0e:35:08:47:b1:cc:68:9b:6b:5b:fc:fb:fe:60:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:36:70:1A:C8:DF:B9:C1:21:21:59:3D:15:7F:E2:7B:8E:AE:BF:B7
            X509v3 Authority Key Identifier:
                keyid:03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/03EC8988694A8AF5CA30CF11A817D548CF1FA024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/34352e3233352e3139322e302f32322d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:96:aa:88:e6:3c:2c:fe:57:e9:5e:23:3c:92:90:d3:87:c1:
         8d:8f:42:8e:10:66:d5:84:6c:40:6f:70:d0:d8:ef:cf:6d:de:
         4d:bf:28:f9:41:30:06:52:99:04:c4:76:c3:3a:cd:85:35:cf:
         0f:7f:11:1e:c4:60:39:15:dd:95:bb:47:03:a4:22:b3:4c:de:
         7f:9a:68:73:8d:fe:8f:15:3f:c6:fb:b8:5a:71:23:69:4b:ff:
         8c:b0:b7:06:9e:d9:7b:90:7a:33:fb:e4:b7:d5:d1:e5:5c:56:
         19:68:5e:e8:54:12:51:a8:a3:4e:36:9b:81:60:fd:6d:e1:a9:
         7d:f2:18:e3:df:67:1d:e7:c6:3e:79:0f:72:03:60:19:06:7c:
         5e:a7:58:e5:8d:b6:40:63:c2:fd:3d:a0:60:0e:33:e8:bc:c9:
         7f:09:c1:ef:f2:24:df:12:7d:04:8c:d7:36:c5:73:6b:35:9f:
         cb:b5:81:4b:7c:15:08:74:80:43:77:a6:aa:64:b3:32:b5:90:
         ac:ed:df:b3:e4:07:c5:5e:8b:c7:2f:63:48:a2:5a:81:17:9c:
         f4:0d:f7:dd:0a:cd:3a:e7:7e:dd:71:c9:6c:30:a1:fb:52:dd:
         2f:f9:c0:27:12:25:6e:dd:c7:7d:38:a6:69:d3:ae:1e:7f:15:
         33:e6:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org