Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131312e302f32342d3234203d3e20323639343633.roa
File:                     34352e3138372e3131312e302f32342d3234203d3e20323639343633.roa (raw, json)
Hash identifier:          PasC0iyGPwynOnzSQr0hpiNTXPW1HzkjqpbRb7tV/44=
Subject key identifier:   AF:54:8B:AC:89:6C:CC:8D:27:B1:1B:51:5D:1A:A0:8F:04:87:76:E8
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       27BBE1F2293CF1431381B89729B52DD668C6DFA1
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131312e302f32342d3234203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:27 +0000
ROA not before:           Thu 03 Nov 2022 18:38:27 +0000
ROA not after:            Thu 02 Nov 2023 18:43:27 +0000
asID:                     269463
IP address blocks:        45.187.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bb:e1:f2:29:3c:f1:43:13:81:b8:97:29:b5:2d:d6:68:c6:df:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:27 2022 GMT
            Not After : Nov  2 18:43:27 2023 GMT
        Subject: CN=AF548BAC896CCC8D27B11B515D1AA08F048776E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:b1:07:04:1d:ce:b6:c0:83:6f:4e:36:f7:
                    50:5b:f2:c6:fc:d6:31:53:7a:c1:09:95:6a:fe:4f:
                    bc:3f:8c:32:80:6e:c4:6d:63:6a:61:ca:28:5d:14:
                    0e:9e:ac:fb:7d:4a:25:23:6a:1b:8a:4a:8b:6a:7d:
                    40:b4:70:b3:9e:44:bd:4d:4e:08:73:6f:e6:f8:70:
                    62:06:c7:0f:b2:e6:52:7f:a8:50:da:9b:d2:0d:d8:
                    27:a5:93:e5:67:dd:ce:80:22:8f:66:96:3b:be:a6:
                    62:44:0c:a7:ab:e3:c4:9f:9a:4d:63:9d:0f:0f:4f:
                    93:a1:fa:48:1c:c5:f7:e8:22:fd:89:9e:2b:d0:f6:
                    53:ce:e2:3d:1e:45:3c:61:44:e1:ca:eb:8c:39:4a:
                    25:09:89:f1:73:09:98:63:f0:94:19:29:5f:70:53:
                    3e:68:fe:dd:b6:00:eb:6d:64:2a:e1:31:93:49:e2:
                    b5:4c:99:a7:ec:ff:30:46:e9:e8:0d:6f:58:46:8f:
                    5d:dd:2d:ed:2e:fe:8f:96:7b:5b:cf:06:3a:16:a7:
                    cf:c5:09:7a:68:f4:41:31:6a:c3:cd:70:6d:d9:c0:
                    bc:aa:ab:a6:77:05:fc:7a:c8:b2:20:38:fa:4b:44:
                    84:51:67:f6:64:91:55:a6:f8:85:f7:80:8b:17:88:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:54:8B:AC:89:6C:CC:8D:27:B1:1B:51:5D:1A:A0:8F:04:87:76:E8
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131312e302f32342d3234203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:56:90:39:df:ed:e7:cf:31:87:c1:6e:1e:59:e6:5c:f5:a1:
         0c:fc:ca:c7:8f:55:42:62:20:32:38:3f:86:8e:59:77:c0:d7:
         36:7f:a3:6a:ab:3b:a1:25:f8:63:9e:45:57:0f:ad:a0:4e:b2:
         ee:f9:00:04:b5:56:77:ca:9b:db:13:0e:80:f1:e0:1f:c9:b2:
         78:2a:95:0a:cd:c1:c0:a2:57:93:59:b1:73:7a:97:6f:49:c7:
         c6:c4:4f:ef:60:e3:30:39:8c:be:c3:0f:30:61:44:ca:38:32:
         c4:b8:73:2e:0f:ab:32:72:b8:1c:fb:cb:24:d1:67:36:53:fd:
         31:4b:66:a7:33:28:2b:97:0e:6a:5b:35:8d:a0:3c:ff:97:07:
         57:5a:0d:82:f6:bc:6e:bd:0c:7a:57:cb:63:5f:46:50:64:c6:
         db:ff:cb:3d:58:2f:52:dd:72:d0:ce:f9:12:34:10:8b:37:f3:
         9b:fe:e7:0e:0d:57:44:77:b3:89:0d:c1:a1:cb:7f:28:5f:52:
         47:dd:cc:8e:df:a6:d7:7a:87:b8:e0:d0:70:c9:a3:a9:3d:99:
         63:6a:8f:8f:da:1a:7e:1b:ae:33:3c:2b:d0:74:d4:b1:fe:ea:
         9e:1a:8f:3e:08:7b:0a:cc:80:2b:8f:7e:9f:10:2e:fa:b4:f2:
         64:09:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org