Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130392e302f32342d3234203d3e20323731353832.roa
File:                     34352e3138372e3130392e302f32342d3234203d3e20323731353832.roa (raw, json)
Hash identifier:          R2yr+t+Qds+6Mp/7oOo2zV3GGA+4H2Hq1Xoa9UebEk8=
Subject key identifier:   ED:5F:EE:6D:12:8F:1D:34:63:AC:53:2F:27:66:E6:E7:1B:8F:39:A7
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       1F3813D2D6503CB54491551E272FF8F43AB1EDDC
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130392e302f32342d3234203d3e20323731353832.roa
Signing time:             Thu 03 Nov 2022 18:43:31 +0000
ROA not before:           Thu 03 Nov 2022 18:38:31 +0000
ROA not after:            Thu 02 Nov 2023 18:43:31 +0000
asID:                     271582
IP address blocks:        45.187.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:38:13:d2:d6:50:3c:b5:44:91:55:1e:27:2f:f8:f4:3a:b1:ed:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:31 2022 GMT
            Not After : Nov  2 18:43:31 2023 GMT
        Subject: CN=ED5FEE6D128F1D3463AC532F2766E6E71B8F39A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:dd:17:54:fb:f1:fe:43:fe:d2:fd:b6:2b:
                    82:a3:42:9b:4e:8a:70:fb:cf:2d:26:e3:ce:a9:b5:
                    e3:70:6a:ea:74:e4:ce:c0:fe:21:5f:38:ad:be:81:
                    c4:23:8b:53:68:0a:a1:ba:ba:1d:f7:f5:d6:04:e9:
                    58:6f:b1:27:31:50:b5:7b:51:24:aa:4c:e7:70:e5:
                    f8:c7:c4:b5:d8:3d:6f:e5:2c:5b:b3:ea:74:91:4c:
                    07:9b:a5:07:b8:5f:64:1c:b2:11:b7:7d:ad:9f:b1:
                    64:fb:04:2b:09:13:7e:ed:41:c0:73:f7:73:3a:ab:
                    b4:f4:5b:f0:69:4e:29:d4:bd:91:7e:90:7c:54:a9:
                    ae:17:44:0a:f1:55:da:e4:18:40:f9:fb:42:76:c6:
                    4d:41:73:6c:dc:eb:fe:37:37:61:e2:d9:ed:e6:9e:
                    07:58:85:d9:0a:aa:1b:50:2b:e0:f4:de:58:f1:55:
                    fe:82:94:b9:04:60:36:57:71:c2:af:38:bc:58:6a:
                    0a:8a:e3:83:a7:39:a0:8f:8f:66:88:ae:53:04:48:
                    4b:e6:6e:a4:88:ec:c6:58:aa:98:c2:ce:4e:c9:fe:
                    3f:6a:69:5f:a5:8a:1e:db:35:63:1f:a0:ae:38:44:
                    c2:e5:70:01:68:57:2f:d1:e5:33:5f:53:a4:62:03:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:EE:6D:12:8F:1D:34:63:AC:53:2F:27:66:E6:E7:1B:8F:39:A7
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130392e302f32342d3234203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:08:22:6c:78:34:1e:25:09:5e:7d:39:5b:7f:c1:98:90:af:
         e4:ee:1f:87:33:7a:a5:c3:8b:37:f0:07:35:c3:64:f3:5e:34:
         04:d1:4e:f8:20:16:00:3d:be:52:5a:5a:66:f8:cd:cd:83:a0:
         64:55:35:07:6e:b1:94:41:4e:01:f3:02:e0:f0:45:c9:c5:b7:
         26:c0:f1:51:fc:bb:01:95:7e:40:a7:20:7a:53:a3:c5:9a:17:
         d6:e8:e9:33:24:8a:32:6e:ba:91:5d:69:ba:65:69:a6:4e:0b:
         12:58:96:d5:e0:83:4c:7c:f4:b8:03:a5:94:b6:19:51:8b:c0:
         84:6c:9b:2a:1b:74:a4:de:b8:7e:c0:06:79:89:2e:8d:df:fd:
         2f:f1:2f:47:03:bb:86:90:6d:f6:cd:cc:82:b7:68:d5:25:43:
         aa:2a:15:24:7f:88:11:d2:87:7e:ed:5f:40:86:40:3d:ff:ae:
         4f:c7:4c:44:65:36:27:f6:07:36:a7:78:99:76:f0:dc:4b:6f:
         51:f8:b8:27:34:0a:16:41:b1:99:79:b5:e8:05:1d:45:2b:55:
         55:2f:cd:20:34:4f:b1:97:e2:ad:15:e4:09:26:c7:9a:b5:33:
         a0:66:c5:1e:73:8c:64:40:e3:0b:17:7f:07:42:f0:b1:2d:c5:
         e0:34:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org