Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32322d3332203d3e20323638303437.roa
File:                     34352e3136382e342e302f32322d3332203d3e20323638303437.roa (raw, json)
Hash identifier:          JxMQWxKVVeGGo1vxc71JwWRh6dkysmeRrzLg7ZsVkkw=
Subject key identifier:   E6:26:D1:87:DF:E3:15:A9:94:03:1B:A5:80:7E:5E:9D:71:A4:D7:52
Certificate issuer:       /CN=F823386AC48637BE842A386FA21174E8A1497D56
Certificate serial:       737433E3A92F99DE89237DA27C4F78F5D2B7DFFE
Authority key identifier: F8:23:38:6A:C4:86:37:BE:84:2A:38:6F:A2:11:74:E8:A1:49:7D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F823386AC48637BE842A386FA21174E8A1497D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32322d3332203d3e20323638303437.roa
Signing time:             Mon 13 Nov 2023 20:43:31 +0000
ROA not before:           Mon 13 Nov 2023 20:38:31 +0000
ROA not after:            Mon 11 Nov 2024 20:43:31 +0000
asID:                     268047
IP address blocks:        45.168.4.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:74:33:e3:a9:2f:99:de:89:23:7d:a2:7c:4f:78:f5:d2:b7:df:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F823386AC48637BE842A386FA21174E8A1497D56
        Validity
            Not Before: Nov 13 20:38:31 2023 GMT
            Not After : Nov 11 20:43:31 2024 GMT
        Subject: CN=E626D187DFE315A994031BA5807E5E9D71A4D752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:49:ad:4b:bf:d7:d6:b9:60:a1:90:f7:de:
                    65:7d:da:2c:c6:81:db:04:eb:17:c4:63:3e:05:3b:
                    00:84:40:23:f9:6b:e0:71:dc:b3:d0:db:00:7f:4d:
                    6f:cd:dd:41:77:33:70:c4:59:d2:3f:46:8f:72:b8:
                    ee:6e:45:e6:23:ea:69:58:75:fb:54:0b:5a:c8:a1:
                    5d:4e:14:8b:6b:1e:61:77:99:70:84:3c:df:1f:82:
                    8b:2a:2b:c1:1a:44:d9:fa:01:3d:78:97:42:14:b5:
                    eb:dd:4a:c3:3c:c9:54:ce:f8:73:ab:fb:35:59:c0:
                    c5:0d:4b:1e:76:d4:d0:c3:cd:6d:8b:c4:ed:d4:19:
                    14:5b:16:94:7b:bd:1a:15:ba:67:32:78:78:8d:17:
                    15:81:87:86:b2:ad:fe:b5:22:02:55:16:96:50:45:
                    8f:0c:d5:5d:96:89:7f:c9:12:72:13:51:28:9f:ab:
                    5c:2e:9a:f6:2d:49:12:e5:53:94:ba:43:86:e8:26:
                    70:51:89:de:e0:7e:d1:8e:24:a2:0f:34:b8:d2:04:
                    01:e2:f2:aa:2e:05:5d:89:3e:b9:e2:6e:f7:d3:ca:
                    10:8c:31:8a:12:22:41:29:18:86:f5:b8:36:8a:05:
                    3f:c9:09:d4:19:9c:33:0d:d1:38:7e:d2:c0:64:08:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:26:D1:87:DF:E3:15:A9:94:03:1B:A5:80:7E:5E:9D:71:A4:D7:52
            X509v3 Authority Key Identifier:
                keyid:F8:23:38:6A:C4:86:37:BE:84:2A:38:6F:A2:11:74:E8:A1:49:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/F823386AC48637BE842A386FA21174E8A1497D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F823386AC48637BE842A386FA21174E8A1497D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32322d3332203d3e20323638303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:46:e0:27:ab:96:fc:37:55:e5:c7:b5:ed:b0:4f:42:9d:
         6e:f2:a8:6e:44:1c:46:20:5c:3f:a8:1e:33:34:e8:71:0a:c2:
         d8:91:c9:2f:de:ff:c7:1b:bb:3f:eb:58:71:c5:4b:23:79:4d:
         e9:0b:ed:f0:75:ae:ed:71:ed:ba:e0:16:7f:2c:e9:55:b1:b7:
         08:a9:a6:64:5a:81:82:3e:51:20:e8:ef:ff:65:79:c7:2e:5a:
         8e:8d:68:bd:9e:b9:68:00:38:7c:be:fa:2c:34:f2:93:49:b6:
         5d:37:15:5e:9f:df:5e:29:ab:88:21:ce:05:3c:18:39:0f:4e:
         32:7e:62:30:44:da:21:c6:25:f2:4b:e8:e8:4e:b9:85:18:62:
         78:e2:a3:55:ff:b2:62:83:01:4d:ea:9c:cd:91:c4:07:0e:d3:
         c1:41:53:44:bf:63:55:54:f9:2c:c6:b6:cc:b4:5a:2a:af:8b:
         ba:a3:49:1f:28:80:6a:72:02:06:7d:7e:a1:ec:20:1d:63:79:
         e6:ee:53:d9:1b:94:60:96:d2:9c:59:e2:e1:5f:80:24:b6:72:
         5e:47:37:0c:1b:6d:e5:83:f4:25:6b:3b:2f:62:6c:98:3e:18:
         12:07:9a:0e:d6:c5:40:49:92:34:99:29:57:86:2f:b7:98:1e:
         18:eb:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org