Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32342d3234203d3e20323639343633.roa
File:                     34352e3138372e3130382e302f32342d3234203d3e20323639343633.roa (raw, json)
Hash identifier:          spaB7kPJM0SpD3KNjVaU64LF9P6THgDQ/+n7ECfSbOU=
Subject key identifier:   C8:BC:9F:3E:E7:7B:46:C2:60:60:B6:D0:CD:E2:2F:84:6A:21:D7:8E
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       6ECB6D455A6B1969775DAE3D6AD4555C7F5D1E65
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32342d3234203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:31 +0000
ROA not before:           Thu 03 Nov 2022 18:38:31 +0000
ROA not after:            Thu 02 Nov 2023 18:43:31 +0000
asID:                     269463
IP address blocks:        45.187.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cb:6d:45:5a:6b:19:69:77:5d:ae:3d:6a:d4:55:5c:7f:5d:1e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:31 2022 GMT
            Not After : Nov  2 18:43:31 2023 GMT
        Subject: CN=C8BC9F3EE77B46C26060B6D0CDE22F846A21D78E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:2f:de:a1:4c:c0:71:10:08:97:47:39:5f:
                    07:b6:5a:82:e3:01:21:50:39:ff:9f:a8:34:75:95:
                    cf:e2:2f:3c:b9:5b:7b:80:99:23:23:08:90:88:c6:
                    c3:65:d4:57:c1:04:67:99:a8:84:e3:be:3a:1a:da:
                    00:19:56:1e:07:a5:df:87:8c:20:15:f0:ad:62:0a:
                    35:b8:99:72:a6:94:5f:2c:9b:b5:1a:54:72:c7:ef:
                    b8:59:22:99:26:c3:b3:d2:7d:4c:e1:47:45:2d:88:
                    ff:57:16:d0:8e:30:c5:5e:73:fd:c3:c1:13:e3:09:
                    84:03:de:89:a0:3b:98:5b:b5:c2:2b:94:b0:64:44:
                    f0:b1:07:a6:b9:fb:8c:e0:81:81:58:50:9d:03:25:
                    21:d3:97:b7:6e:ca:a1:d4:49:e9:ff:9c:51:d5:98:
                    be:63:7b:f6:e7:e1:d8:83:d8:13:39:3d:e4:e4:24:
                    6d:4e:40:ea:96:a6:6c:49:a6:a2:41:1f:cc:e0:fd:
                    b5:08:0c:2a:9e:a4:57:8b:9b:d0:d8:0d:ca:b8:2b:
                    b7:ce:b0:bd:e2:95:10:b3:93:5a:04:90:23:30:b2:
                    94:d4:8b:c2:16:8a:c1:73:27:65:6d:cc:29:72:d2:
                    97:db:4d:9f:14:b3:81:5f:bc:6d:39:e9:fd:e8:f5:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BC:9F:3E:E7:7B:46:C2:60:60:B6:D0:CD:E2:2F:84:6A:21:D7:8E
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32342d3234203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d1:6d:14:da:27:44:e0:bc:a0:52:09:ab:a6:13:9a:cd:a1:
         ce:c7:73:8e:02:0e:c3:41:ab:5d:49:78:f5:cd:87:32:e2:97:
         3b:dc:e9:c9:2b:41:c7:83:e2:b0:af:a4:5c:24:94:7b:72:79:
         0f:42:ef:ba:b8:b4:11:bd:7a:e4:6d:cd:9d:ce:de:70:7d:b5:
         67:b4:12:3b:09:dd:d4:91:15:7e:3c:fa:c6:76:80:90:bd:c0:
         a8:e8:80:80:d4:83:a9:08:51:a6:f0:f3:59:6d:de:f9:2f:51:
         da:d8:1f:74:97:3e:1e:1e:15:98:41:fb:60:ec:16:9c:ca:f4:
         c1:91:7a:b5:84:3b:8a:93:f7:9f:b2:f3:36:25:fb:3b:66:fc:
         08:af:6f:f4:a1:e6:21:a5:c8:2a:5f:8c:3a:e0:d5:f6:26:8e:
         36:76:3d:24:70:de:13:63:22:25:97:78:64:0e:c3:1f:2e:6a:
         6f:78:9a:43:e9:57:3e:12:79:09:8b:a0:5a:b1:42:f3:b7:b0:
         65:72:36:f6:8a:44:94:12:60:37:45:39:80:cd:bc:f6:28:7a:
         49:53:bf:a4:97:01:a7:4a:0e:29:b8:1f:fa:5a:56:56:dc:c5:
         27:2a:42:9d:12:e9:9b:19:fe:42:a6:e1:ad:6e:11:0d:dd:ad:
         d7:67:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org