Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3232203d3e20323639343633.roa
File:                     34352e3138372e3130382e302f32322d3232203d3e20323639343633.roa (raw, json)
Hash identifier:          ULRzRH4N7JFtGZVdzHZdpc7OKt0dviVMzioosGxaGig=
Subject key identifier:   ED:B2:EA:AE:FF:05:43:13:CE:C4:E5:F2:A7:8A:50:9D:3B:76:81:90
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       235FBFE026DF037555DF1995E5C4E651993F819A
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3232203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:35 +0000
ROA not before:           Thu 03 Nov 2022 18:38:35 +0000
ROA not after:            Thu 02 Nov 2023 18:43:35 +0000
asID:                     269463
IP address blocks:        45.187.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5f:bf:e0:26:df:03:75:55:df:19:95:e5:c4:e6:51:99:3f:81:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:35 2022 GMT
            Not After : Nov  2 18:43:35 2023 GMT
        Subject: CN=EDB2EAAEFF054313CEC4E5F2A78A509D3B768190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:eb:98:d4:ab:fb:5d:6e:98:e4:f6:c1:f5:
                    23:70:2e:ef:5b:43:a3:4d:1b:4e:b5:fe:02:1b:3c:
                    0f:3e:22:ca:bf:b4:7c:13:00:65:db:aa:59:14:0b:
                    2b:75:7d:f6:1e:67:5c:c8:a3:0a:de:44:1b:2d:d7:
                    b3:44:77:c9:38:b7:98:6c:35:17:45:a6:4b:e9:4e:
                    fe:c9:56:f9:4d:5f:34:c3:35:d4:95:93:b0:4b:68:
                    9e:76:ab:ee:e0:63:84:ab:43:41:95:b6:d9:e0:c9:
                    54:cf:a3:5b:93:31:fc:0a:a9:36:eb:28:0e:c3:14:
                    78:a3:96:74:48:0e:43:4a:f2:a1:97:8c:3d:19:cd:
                    10:c0:af:f9:15:db:a9:70:1e:06:39:33:7a:de:40:
                    80:f6:c0:5d:f1:33:7a:9f:ba:44:9b:54:fc:13:6e:
                    f7:ab:23:29:9e:10:29:fd:e0:8d:36:78:09:09:a7:
                    19:fb:da:76:1f:fd:ab:1a:a0:98:69:e2:f8:19:39:
                    cf:7d:7d:67:51:36:b2:ae:a2:7f:a0:25:0f:42:cc:
                    51:ab:fd:e8:ea:16:8f:69:0d:f7:e5:c7:2b:dd:ba:
                    17:56:8d:9c:ff:d0:f6:03:f9:f6:dd:ae:c8:99:6b:
                    25:ed:6a:36:ea:0f:a6:66:19:cd:8b:37:02:e4:7b:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B2:EA:AE:FF:05:43:13:CE:C4:E5:F2:A7:8A:50:9D:3B:76:81:90
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3232203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:2d:a4:ea:91:db:96:6c:fb:b9:84:ae:51:c3:ee:c8:51:87:
         15:04:6e:97:3f:cb:2b:cf:05:fb:84:6d:c4:91:59:a3:cc:82:
         bd:71:bb:78:b0:cb:41:b6:10:49:45:39:7e:26:0d:a1:4e:d3:
         67:d3:2b:13:f8:16:93:43:1c:06:0c:38:85:b5:ae:6f:97:74:
         a0:d9:34:c1:c0:99:d5:3d:0c:4f:69:62:0e:ec:38:7e:f7:17:
         31:1c:60:7f:98:bb:e7:de:f9:fc:e7:af:1b:0d:43:ac:02:b1:
         f4:ef:55:6d:a2:b3:2c:6b:b3:f0:c8:62:af:a2:4e:0c:80:bf:
         c7:b5:c1:ee:5a:a4:ce:23:20:c0:1b:e0:07:18:66:bb:5f:82:
         02:8f:2e:45:17:30:c9:4f:d6:b9:12:95:08:f1:50:26:e3:ce:
         ef:8b:e5:fc:fc:d2:d5:b3:74:6e:07:35:af:11:35:c6:97:fd:
         77:9d:57:d3:10:56:09:a4:26:d8:7c:a2:0f:ce:82:06:3e:1b:
         02:e6:10:e7:9a:77:4d:7f:0f:4b:af:12:0a:86:30:c9:f6:d0:
         bf:2f:b2:37:11:72:88:db:05:fd:ab:56:cb:99:0b:85:ba:e4:
         c0:7a:29:9f:46:ca:57:6c:6a:b7:9d:39:88:8c:1a:76:29:8d:
         47:a6:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org