Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa
File:                     34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (raw, json)
Hash identifier:          jUSSJyREuo8hvqoN0q7bw5l81056tFyvCMAgKHRL6Tw=
Subject key identifier:   42:5F:EA:46:84:B4:CB:4A:22:F9:B0:2F:08:04:15:47:0D:81:5B:89
Certificate issuer:       /CN=928AC495DA09D88A3B9ECB22758AFD89A7AA482F
Certificate serial:       72C302312D970B16A1C956D11C897794D99DC020
Authority key identifier: 92:8A:C4:95:DA:09:D8:8A:3B:9E:CB:22:75:8A:FD:89:A7:AA:48:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa
Signing time:             Wed 29 Nov 2023 22:18:36 +0000
ROA not before:           Wed 29 Nov 2023 22:13:36 +0000
ROA not after:            Wed 27 Nov 2024 22:18:36 +0000
asID:                     268533
IP address blocks:        45.162.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c3:02:31:2d:97:0b:16:a1:c9:56:d1:1c:89:77:94:d9:9d:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928AC495DA09D88A3B9ECB22758AFD89A7AA482F
        Validity
            Not Before: Nov 29 22:13:36 2023 GMT
            Not After : Nov 27 22:18:36 2024 GMT
        Subject: CN=425FEA4684B4CB4A22F9B02F080415470D815B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:27:19:9a:bf:f1:a2:56:29:e0:89:a0:79:
                    0c:4b:26:eb:b5:e9:66:0b:33:97:db:ff:01:5a:75:
                    a4:b1:12:e8:d8:e1:58:06:b2:fc:97:d3:8b:4c:75:
                    ba:24:0c:03:35:90:b0:f7:91:9e:f2:e6:d2:47:c1:
                    76:bc:ed:d1:7e:01:bd:2e:4b:da:4d:4b:08:a4:66:
                    e7:2a:fb:1f:43:02:87:95:f3:dc:65:eb:6b:ab:d5:
                    5f:8a:83:a2:4d:c0:b3:1b:4d:ff:df:ad:df:e7:b7:
                    50:11:be:96:20:36:91:a2:ab:5f:10:b0:a0:e5:fa:
                    b8:92:23:8f:74:99:b2:67:9c:c2:8b:2e:28:c7:12:
                    d2:d3:da:80:0a:d0:2d:2d:b0:e4:44:29:36:23:e6:
                    e2:83:39:23:ac:ff:b6:2d:b5:c8:d7:1a:34:9f:fc:
                    00:99:25:38:f8:f4:63:9b:a6:24:98:1a:82:66:49:
                    b8:b1:b7:ad:1f:1d:5b:a6:b4:db:aa:80:72:bf:c2:
                    57:67:d0:50:e5:7f:44:bf:27:77:1a:68:cf:9e:8c:
                    0d:f4:ba:72:1e:2f:ea:a3:aa:f1:ba:82:e3:6b:05:
                    2e:bb:46:30:9a:0f:c0:d3:15:ac:c7:68:ac:2d:db:
                    dc:4f:02:cd:5a:9a:da:32:54:59:29:1a:2b:51:1e:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5F:EA:46:84:B4:CB:4A:22:F9:B0:2F:08:04:15:47:0D:81:5B:89
            X509v3 Authority Key Identifier:
                keyid:92:8A:C4:95:DA:09:D8:8A:3B:9E:CB:22:75:8A:FD:89:A7:AA:48:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:e9:50:d5:98:eb:1c:62:e9:cb:65:39:5c:2f:c0:ea:bc:29:
         85:ff:f2:ca:6a:07:92:f4:9f:2a:ae:c0:3f:4d:a2:04:9b:00:
         b9:f9:51:82:a2:68:3e:26:ec:4b:73:ea:68:0a:b2:b2:c0:ed:
         aa:bc:47:46:13:d3:c5:6d:0b:04:1e:6e:71:80:7d:b1:83:a4:
         ee:70:63:fb:5b:de:50:4b:3b:f0:a0:c9:c2:78:ba:8c:2a:e6:
         03:67:23:50:7e:d8:d0:3c:5d:54:ec:31:dc:23:d2:26:cf:ad:
         3e:11:71:65:42:d4:69:66:50:75:12:3b:6f:c2:d8:8f:0e:70:
         3c:e4:3e:1a:58:0e:b2:10:08:08:c0:6c:70:69:d1:fe:1a:7f:
         50:45:38:17:58:52:a7:20:5f:ad:03:b7:a8:1c:92:fa:24:95:
         30:f1:27:cf:04:ca:d7:eb:4e:b2:27:84:69:4a:06:9a:d5:b8:
         cb:c3:d3:f1:80:2b:d5:0d:42:a0:f6:ad:cf:73:50:1d:a5:0a:
         c5:ca:ee:c2:43:ea:98:85:ed:6d:80:51:de:44:6c:76:ed:e7:
         06:da:b1:d0:c2:d0:ed:49:2a:44:68:1c:79:e3:12:37:08:3f:
         32:c5:45:5b:57:da:9e:90:c8:ea:03:f0:40:b2:e8:27:64:a0:
         4b:7d:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org