Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
File:                     34352e3136382e31322e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier:          wD84RS46nLLLegVb/GfW+RZCpNYM6fTrGr7kCNx7DQo=
Subject key identifier:   C0:D4:37:10:8B:2E:95:70:9F:FA:6D:90:1E:02:38:BE:B5:22:9E:EB
Certificate issuer:       /CN=15D66C82385E07A46724C3074293F737D556F1B3
Certificate serial:       2A98A9C8B2ECE4E0353A7A4E9376EF1D3C08A158
Authority key identifier: 15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
Signing time:             Thu 14 Dec 2023 13:31:30 +0000
ROA not before:           Thu 14 Dec 2023 13:26:30 +0000
ROA not after:            Thu 12 Dec 2024 13:31:30 +0000
asID:                     268035
IP address blocks:        45.168.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:a9:c8:b2:ec:e4:e0:35:3a:7a:4e:93:76:ef:1d:3c:08:a1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D66C82385E07A46724C3074293F737D556F1B3
        Validity
            Not Before: Dec 14 13:26:30 2023 GMT
            Not After : Dec 12 13:31:30 2024 GMT
        Subject: CN=C0D437108B2E95709FFA6D901E0238BEB5229EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:01:22:4d:60:39:d6:af:2e:35:03:0b:2a:
                    eb:6b:6a:38:94:1d:fc:72:1a:95:a0:d0:fb:1c:bc:
                    56:3a:12:e1:33:8a:6e:7e:85:9b:a3:8d:e2:c3:08:
                    47:b2:09:6e:78:12:b5:76:9f:e4:01:8a:f1:f2:8b:
                    88:39:e1:c5:9c:dd:35:4f:7c:0f:0f:3d:7a:8d:c5:
                    2f:66:94:b3:61:e3:00:15:43:22:31:cf:ec:ef:46:
                    f6:f2:8c:12:be:56:68:6d:ef:6a:c0:a3:c9:1d:2e:
                    24:16:4f:88:b7:de:d7:23:26:f6:99:d5:7b:cd:74:
                    4f:7c:1c:aa:ed:3d:28:ea:02:35:a5:bc:36:a6:c9:
                    b7:4e:ba:37:1d:b8:54:07:24:2f:b0:e1:4b:60:70:
                    50:05:71:c4:19:02:1f:a8:40:55:bc:6c:f8:d6:24:
                    95:39:25:e9:93:05:73:e6:c9:35:82:d9:c7:88:19:
                    39:10:f6:f3:5e:dd:c8:5e:db:42:f4:5f:fa:37:46:
                    a0:f6:b9:57:97:dd:d0:22:1e:35:0b:70:ff:55:b2:
                    c9:d8:b1:8b:21:6c:bf:c1:42:ec:61:55:35:f4:42:
                    46:e3:54:ae:ac:a8:aa:24:a1:16:56:e5:b7:6d:5c:
                    3e:47:da:fc:72:45:81:5b:ef:4c:f3:47:30:e5:28:
                    24:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D4:37:10:8B:2E:95:70:9F:FA:6D:90:1E:02:38:BE:B5:22:9E:EB
            X509v3 Authority Key Identifier:
                keyid:15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:74:74:07:84:d4:16:46:fe:36:85:49:75:d3:ad:78:22:d4:
         be:b2:e8:a6:20:78:4a:0d:f9:af:57:b8:ce:c7:af:83:1a:cb:
         cb:7c:0a:ef:38:fb:57:57:1d:f5:c9:34:c6:2c:f2:f3:be:d6:
         6f:30:03:64:ff:08:7a:19:18:12:9e:ce:fa:22:ba:8d:7e:05:
         61:de:4f:cf:f2:de:a0:24:f3:bb:8a:63:bd:45:8d:8f:10:2f:
         b7:74:f6:84:82:1d:13:74:c6:79:69:ad:3d:3c:2d:45:00:63:
         55:ae:7f:f1:d0:af:df:b2:6f:6f:28:57:b9:f0:f6:8c:d1:c6:
         8a:44:57:72:6f:c6:aa:69:2e:8e:f1:07:23:a0:82:78:a4:4f:
         f1:d5:e1:36:d4:0b:fd:83:23:f2:09:4a:c8:60:05:b5:e9:91:
         4f:32:8f:60:68:40:c2:5e:de:40:9d:ca:f8:f8:e3:0c:2f:3c:
         dd:27:34:a2:0a:f3:03:32:82:f1:9c:07:06:da:79:76:3b:7a:
         2a:4b:d5:78:0e:d0:2a:b5:9e:49:7b:a3:76:e1:c9:7f:54:08:
         1d:aa:33:8a:c3:ef:ab:be:d2:f2:43:0b:4f:3f:30:cc:b9:2a:
         64:eb:cb:87:0a:06:ef:bf:32:cb:05:e6:09:0d:49:cb:cb:94:
         7e:39:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org