Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136342e302f32332d3233203d3e20323730323337.roa
File:                     34352e3138392e3136342e302f32332d3233203d3e20323730323337.roa (raw, json)
Hash identifier:          yR+MFrQcJL7j5vXwa/dX5IZfmfpqM9dZjqg7xGMx2cw=
Subject key identifier:   27:0B:DD:E2:55:CA:19:13:E6:71:18:6C:64:4D:F6:C6:5C:10:2E:FD
Certificate issuer:       /CN=8BD58EAA788072D3207F242B97B2464A28E29772
Certificate serial:       3561481C92BD206599273E848CD51656A69EDA40
Authority key identifier: 8B:D5:8E:AA:78:80:72:D3:20:7F:24:2B:97:B2:46:4A:28:E2:97:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD58EAA788072D3207F242B97B2464A28E29772.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136342e302f32332d3233203d3e20323730323337.roa
Signing time:             Thu 04 Apr 2024 02:54:44 +0000
ROA not before:           Thu 04 Apr 2024 02:49:44 +0000
ROA not after:            Thu 03 Apr 2025 02:54:44 +0000
asID:                     270237
IP address blocks:        45.189.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:61:48:1c:92:bd:20:65:99:27:3e:84:8c:d5:16:56:a6:9e:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD58EAA788072D3207F242B97B2464A28E29772
        Validity
            Not Before: Apr  4 02:49:44 2024 GMT
            Not After : Apr  3 02:54:44 2025 GMT
        Subject: CN=270BDDE255CA1913E671186C644DF6C65C102EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:1e:5a:b5:4f:7b:74:64:10:df:fc:c5:8f:
                    b9:93:ff:d9:f0:04:ff:b1:64:48:dc:13:9d:8d:a7:
                    c9:59:f0:db:6f:e5:9b:70:3d:d9:17:80:04:e1:75:
                    b4:40:93:04:79:65:94:6c:04:05:86:9e:fd:a0:33:
                    e9:c5:2c:d3:a4:34:ef:6c:38:5c:fb:89:98:8f:83:
                    2c:98:f4:5d:8a:4e:03:30:ca:ea:e2:0d:d2:54:f5:
                    d3:99:df:d9:22:c1:e3:2f:7d:db:20:e4:c5:14:18:
                    f7:0a:dc:04:d6:99:36:71:7b:66:eb:a4:47:9a:60:
                    4d:28:e6:f2:bd:14:30:85:64:ee:72:d5:25:7f:f9:
                    b5:23:12:78:eb:07:a3:30:2e:e2:82:8c:2b:47:59:
                    3f:d9:eb:5f:f8:53:05:22:15:b3:e4:39:33:d1:85:
                    aa:9b:7d:d3:bd:28:59:97:01:03:12:8d:92:d2:54:
                    9b:66:10:d4:1b:7f:b4:09:9c:55:3a:b6:fa:08:0e:
                    85:be:4c:4c:7b:69:ea:6b:f6:7d:34:e5:9c:d7:22:
                    f7:fe:e4:0b:36:b8:ad:26:b0:7a:b7:7b:7a:6a:78:
                    38:e6:08:ac:02:43:88:8c:f2:d9:18:51:4f:1f:e7:
                    14:a1:41:dd:b4:61:ad:6b:4b:83:7e:38:67:84:16:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0B:DD:E2:55:CA:19:13:E6:71:18:6C:64:4D:F6:C6:5C:10:2E:FD
            X509v3 Authority Key Identifier:
                keyid:8B:D5:8E:AA:78:80:72:D3:20:7F:24:2B:97:B2:46:4A:28:E2:97:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/8BD58EAA788072D3207F242B97B2464A28E29772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD58EAA788072D3207F242B97B2464A28E29772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/1/34352e3138392e3136342e302f32332d3233203d3e20323730323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:76:1b:f2:29:eb:6f:90:83:ee:7a:0d:50:17:72:27:75:a1:
         c5:c0:60:5e:9b:40:0d:22:1a:64:da:43:29:9b:d7:a6:ce:b0:
         c7:94:8e:db:35:c8:26:c7:a0:91:71:79:06:c5:c9:2f:89:f8:
         18:cb:e7:15:85:fe:7c:08:45:26:8e:77:ec:6f:d6:8b:5e:e2:
         82:32:e0:fe:05:48:9a:50:9d:52:74:38:61:b4:15:d4:90:8a:
         97:74:d5:9a:de:93:90:05:11:1d:55:62:c4:70:a2:a4:b9:3e:
         5b:e7:6f:d3:48:d4:ce:53:3e:89:26:94:d2:c6:8b:bc:d6:cf:
         f5:08:38:20:6f:01:03:09:6e:61:1e:15:53:49:38:f4:b3:28:
         9f:93:ea:5f:53:b8:9d:0d:67:15:76:d1:68:dd:26:4e:9b:77:
         6a:5a:b3:9d:06:d9:73:47:b1:41:1c:42:a1:98:dd:57:18:02:
         bc:f4:a8:93:11:45:99:aa:7a:33:62:8f:e4:e8:47:09:8b:59:
         24:5c:e5:f6:c6:24:90:32:dc:29:f6:77:8d:de:0d:d4:58:b7:
         89:09:a2:ea:b7:fe:76:bb:ad:2d:61:77:e8:46:eb:4d:bd:a7:
         dc:61:c9:22:f3:c3:9d:65:bc:66:5a:7e:98:83:2c:5a:4a:24:
         39:90:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org