Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131302e302f32332d3233203d3e20323639343633.roa
File:                     34352e3138372e3131302e302f32332d3233203d3e20323639343633.roa (raw, json)
Hash identifier:          dlJCaSQZVFIeoiZn6DV+ZToJ2/LJfQO5yfCtHr2s0vk=
Subject key identifier:   24:EB:12:3F:45:BD:FE:24:0C:8C:BE:39:C9:F4:29:BC:49:BF:F5:B1
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       37CE1D919380F8A021FC658979A008C9B56DDBF6
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131302e302f32332d3233203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:26 +0000
ROA not before:           Thu 03 Nov 2022 18:38:26 +0000
ROA not after:            Thu 02 Nov 2023 18:43:26 +0000
asID:                     269463
IP address blocks:        45.187.110.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ce:1d:91:93:80:f8:a0:21:fc:65:89:79:a0:08:c9:b5:6d:db:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:26 2022 GMT
            Not After : Nov  2 18:43:26 2023 GMT
        Subject: CN=24EB123F45BDFE240C8CBE39C9F429BC49BFF5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:c9:de:e1:c9:64:db:d9:fe:aa:28:49:cf:
                    21:43:e3:3a:de:69:ed:e7:90:28:87:91:56:53:da:
                    49:44:8e:e1:e7:85:af:ca:6b:79:25:39:61:ca:8d:
                    a9:dd:55:11:0a:51:5b:03:3f:c2:15:81:a6:18:ea:
                    ad:9d:94:11:76:88:78:b6:4e:05:96:11:6d:1b:d0:
                    31:51:19:42:1d:4b:60:98:c1:9b:2a:58:00:74:38:
                    b8:6d:bb:4e:78:a6:4e:7a:1f:23:c4:75:c7:37:36:
                    b3:da:80:5a:f1:69:f9:6e:6a:41:2f:38:ec:ea:e0:
                    0a:5f:59:88:f8:4b:86:8e:41:62:ac:17:ef:fa:ae:
                    88:a7:28:db:57:bd:e2:9b:eb:ce:da:34:f7:eb:d1:
                    27:56:42:5d:60:a3:17:1c:a3:29:dd:0a:de:69:f6:
                    65:25:54:31:71:08:fc:04:c5:e8:13:24:e8:7c:3a:
                    16:3f:bb:6f:df:34:28:e9:e1:5b:58:ea:72:f1:53:
                    7d:12:39:02:42:d5:a3:86:ae:46:3e:d2:f5:c8:bb:
                    27:e2:14:c5:da:fb:35:7e:5e:d7:84:66:ce:20:3a:
                    98:a3:a7:4a:87:d1:2f:d3:a6:03:24:7e:b1:05:4d:
                    35:8c:dc:ac:e7:1d:36:8e:32:bd:dd:d5:f2:77:03:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EB:12:3F:45:BD:FE:24:0C:8C:BE:39:C9:F4:29:BC:49:BF:F5:B1
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131302e302f32332d3233203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:bf:18:9c:d3:45:a4:40:a9:c9:91:77:5e:d1:d0:e5:d8:67:
         c8:b1:55:bf:54:d9:c2:fb:c4:55:43:07:7e:4f:ec:b7:50:e8:
         c8:91:21:81:cf:5f:c2:58:7b:ec:b9:0c:ab:24:44:b3:90:ec:
         46:6f:3d:b6:31:a0:6f:4f:6e:f4:6d:77:e7:8c:3b:62:88:b1:
         00:17:f8:cd:74:ba:cf:c1:d6:0b:35:24:78:74:c9:c2:36:f7:
         a9:98:b7:82:dc:01:ee:57:e8:38:1f:78:d0:48:43:0b:07:0d:
         c3:89:61:86:66:09:e2:74:59:3b:05:0a:3e:e1:fd:30:1b:55:
         c5:8c:6b:e3:f1:d6:70:e6:7b:0f:36:b2:63:9d:f8:70:ac:24:
         cd:2d:e5:3f:fe:b6:95:04:58:24:b8:21:39:02:d4:5c:a7:8a:
         ec:4b:a0:0a:0a:98:2a:7d:70:5c:ac:f3:3f:fc:6b:6f:a7:97:
         e9:c7:4d:fe:8b:b5:2c:f7:50:a4:e2:8a:75:ce:e7:21:61:8a:
         cb:38:8d:89:28:84:4d:a8:8d:0a:97:c8:1a:5d:e6:8f:34:27:
         f9:db:13:05:8d:0e:8f:3f:9b:a8:70:d8:c3:14:86:68:f7:0e:
         95:75:33:46:e1:5b:22:8c:9e:2f:4d:0c:19:3d:09:1b:60:a1:
         b7:50:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org