Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeayFVvqCdpDRcrNGhBMjpQxVtGhiQBEo9BiKyVHTZcm/0/34352e37312e39322e302f32322d3234203d3e20323637363036.roa
File:                     34352e37312e39322e302f32322d3234203d3e20323637363036.roa (raw, json)
Hash identifier:          M3BpR28/jBLV6c0aQRUFnqFuCf1uUDeCwX72CZzXVm0=
Subject key identifier:   D6:C6:60:1C:F1:0B:14:FA:A0:52:8F:FD:91:2C:8F:62:A7:D5:F4:0D
Certificate issuer:       /CN=FEB6A689B23892BECB5B001298CD63B788E192A8
Certificate serial:       5EF70609F14AE1FA8508686189DC8B5CB94A5387
Authority key identifier: FE:B6:A6:89:B2:38:92:BE:CB:5B:00:12:98:CD:63:B7:88:E1:92:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEB6A689B23892BECB5B001298CD63B788E192A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeayFVvqCdpDRcrNGhBMjpQxVtGhiQBEo9BiKyVHTZcm/0/34352e37312e39322e302f32322d3234203d3e20323637363036.roa
Signing time:             Sat 02 Sep 2023 22:00:00 +0000
ROA not before:           Sat 02 Sep 2023 21:55:00 +0000
ROA not after:            Mon 02 Sep 2024 22:00:00 +0000
asID:                     267606
IP address blocks:        45.71.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f7:06:09:f1:4a:e1:fa:85:08:68:61:89:dc:8b:5c:b9:4a:53:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEB6A689B23892BECB5B001298CD63B788E192A8
        Validity
            Not Before: Sep  2 21:55:00 2023 GMT
            Not After : Sep  2 22:00:00 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:bb:10:b0:ed:b7:e7:39:43:2b:ec:e9:7a:
                    11:7e:d0:79:30:e1:f7:94:28:58:f3:90:09:8a:30:
                    a3:bc:d3:05:09:2c:14:40:3b:48:dd:ce:f0:a5:bb:
                    6f:bf:fe:59:e5:49:0c:42:c5:a3:1b:b9:65:e3:1c:
                    b8:33:57:b5:07:ed:6c:d8:fc:56:cf:d1:9f:9d:91:
                    e8:ad:d9:05:c0:67:98:00:44:f4:65:2d:7a:d7:bf:
                    1e:24:16:d3:ca:b9:1d:94:f8:c7:8a:0e:ea:5a:d0:
                    ce:7b:ed:c1:9f:72:30:84:18:89:18:7e:a5:45:de:
                    d7:ee:f3:80:96:63:9c:49:42:ec:45:88:c9:ba:ef:
                    20:40:2a:7a:22:d5:92:9a:70:ac:9b:8c:d1:3d:60:
                    bc:8c:ca:27:68:2f:e4:a8:bd:4f:a0:4c:71:4d:da:
                    c2:58:38:a7:ec:1f:b8:61:1d:fa:00:d7:be:b6:ee:
                    9b:c9:4b:e8:39:af:52:e2:6c:55:01:2c:b5:6f:9e:
                    a3:ec:eb:84:92:82:8e:cf:b1:8f:81:eb:52:58:71:
                    7a:f0:09:70:18:70:d9:35:7a:3c:17:ba:b8:1c:2f:
                    3d:0e:24:51:ad:b6:4b:65:47:c7:da:68:c7:00:10:
                    19:c5:b9:d7:d2:ab:f2:fe:ca:5a:01:3f:8d:c8:b8:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C6:60:1C:F1:0B:14:FA:A0:52:8F:FD:91:2C:8F:62:A7:D5:F4:0D
            X509v3 Authority Key Identifier:
                keyid:FE:B6:A6:89:B2:38:92:BE:CB:5B:00:12:98:CD:63:B7:88:E1:92:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeayFVvqCdpDRcrNGhBMjpQxVtGhiQBEo9BiKyVHTZcm/0/FEB6A689B23892BECB5B001298CD63B788E192A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEB6A689B23892BECB5B001298CD63B788E192A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeayFVvqCdpDRcrNGhBMjpQxVtGhiQBEo9BiKyVHTZcm/0/34352e37312e39322e302f32322d3234203d3e20323637363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:a2:f6:6f:1c:7b:ed:a0:f5:8a:2e:ec:7d:2a:2d:08:00:54:
         da:c2:87:44:19:b3:c8:4f:b7:f5:d4:4e:73:0a:bd:d5:44:9e:
         7d:d5:97:1c:c0:65:5e:4b:d6:b0:07:6b:17:ec:8f:d6:54:9e:
         65:3f:75:0b:d6:0c:2a:7a:84:94:43:df:fd:57:da:fe:be:45:
         e7:71:59:d4:a6:42:d1:8b:8f:d5:6c:69:fc:61:8a:30:46:48:
         b9:97:2b:8b:1a:ad:e1:3a:20:7a:07:83:29:2b:75:11:5a:76:
         40:36:ec:28:16:26:a5:ab:6e:3e:e6:3c:3a:d5:9a:85:dc:aa:
         22:3a:17:14:c7:a9:a5:4e:f4:17:70:1a:4c:6c:5b:9c:04:4d:
         5d:08:5f:0a:42:d6:b1:27:8f:07:d9:cf:53:1c:b6:ef:5e:8b:
         6a:b7:51:50:aa:07:19:c4:a0:f1:72:04:9c:d9:50:41:3c:a6:
         e4:bd:cc:a6:d6:a3:51:e5:10:d1:24:e9:76:3d:e0:4a:9b:95:
         f6:70:2a:44:8d:68:50:10:49:93:b8:81:ab:ae:73:8d:16:39:
         07:42:de:13:93:d8:fa:75:02:da:70:ff:60:e3:56:75:cc:ba:
         5a:23:70:56:b8:54:13:98:31:7a:13:24:e4:75:50:0a:41:05:
         22:76:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org