Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/34352e3233302e3235322e302f32332d3233203d3e20323637313831.roa
File:                     34352e3233302e3235322e302f32332d3233203d3e20323637313831.roa (raw, json)
Hash identifier:          yhL4VnthchqORXFbK8rKeR8AHKjGc9vahtwiyS5w9Jw=
Subject key identifier:   F0:F0:40:30:D2:7B:BF:F6:93:20:9D:08:57:71:18:7D:BB:C8:B3:18
Certificate issuer:       /CN=E8600CA4798A70EA54DA70A6ABD324A4AEFFB518
Certificate serial:       0BE415EA9003F5F9E8FEB12A964CAA0BBB5C9603
Authority key identifier: E8:60:0C:A4:79:8A:70:EA:54:DA:70:A6:AB:D3:24:A4:AE:FF:B5:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/34352e3233302e3235322e302f32332d3233203d3e20323637313831.roa
Signing time:             Tue 18 Jan 2022 13:45:42 +0000
ROA not before:           Tue 18 Jan 2022 13:40:42 +0000
ROA not after:            Tue 17 Jan 2023 13:45:42 +0000
asID:                     267181
IP address blocks:        45.230.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e4:15:ea:90:03:f5:f9:e8:fe:b1:2a:96:4c:aa:0b:bb:5c:96:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8600CA4798A70EA54DA70A6ABD324A4AEFFB518
        Validity
            Not Before: Jan 18 13:40:42 2022 GMT
            Not After : Jan 17 13:45:42 2023 GMT
        Subject: CN=F0F04030D27BBFF693209D085771187DBBC8B318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:60:fb:38:3b:e9:6f:9e:50:fc:4c:61:6c:
                    7c:a2:24:82:05:64:70:41:a9:ec:83:33:87:b2:b3:
                    f6:a6:a3:38:47:15:87:fb:88:15:2e:bd:26:d4:9c:
                    24:96:ae:b5:6d:79:e1:e4:51:f6:6f:03:73:ee:b3:
                    cb:95:65:35:a4:eb:9f:ea:d6:3d:14:c9:71:35:c3:
                    4d:b2:5a:90:cc:35:60:5a:f3:8c:b5:94:9d:c2:52:
                    4e:be:da:f3:f7:37:18:1d:98:87:d9:29:72:16:25:
                    ad:e7:1b:00:ef:56:c9:61:9e:db:e3:91:c9:2a:e2:
                    54:b8:0a:6c:9c:27:71:c9:a5:c8:3f:a9:2e:d5:40:
                    d8:d2:ff:8d:b3:d1:ff:97:e3:b0:7c:d1:20:03:bb:
                    b1:2f:af:ba:69:8a:42:a0:ce:6c:71:0d:a1:74:b2:
                    58:1f:81:ca:9f:42:7b:40:9f:9c:04:7a:f5:5c:90:
                    68:6f:99:28:b7:29:4d:23:88:cb:86:85:81:f3:54:
                    e5:6e:e1:c7:34:54:55:02:af:d1:49:e8:fa:72:77:
                    93:1c:dc:c5:ea:53:45:da:26:e1:b7:00:58:9b:eb:
                    15:c7:85:e7:eb:e8:da:cf:11:34:1c:89:d9:21:87:
                    5b:30:9c:71:ec:d9:67:57:42:fe:b2:5f:14:bb:2c:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:40:30:D2:7B:BF:F6:93:20:9D:08:57:71:18:7D:BB:C8:B3:18
            X509v3 Authority Key Identifier:
                keyid:E8:60:0C:A4:79:8A:70:EA:54:DA:70:A6:AB:D3:24:A4:AE:FF:B5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/34352e3233302e3235322e302f32332d3233203d3e20323637313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:84:63:94:e5:95:0b:b2:23:c8:f9:e0:e1:87:ee:f4:f9:92:
         64:a9:79:8c:cf:6c:e3:3b:92:cc:bb:9f:b5:a5:4b:1d:d3:75:
         1d:44:ad:38:29:6e:70:de:1c:18:2d:50:2a:1c:80:16:e2:79:
         7f:17:5a:7b:57:96:69:0e:04:77:d8:75:f8:55:a1:b3:8b:7e:
         3b:55:83:e9:ef:f6:f9:b4:18:65:b6:fd:41:f0:14:9c:74:72:
         2d:6c:58:41:66:9b:82:67:34:09:b5:7e:91:5d:d9:22:4c:7a:
         f3:a4:51:5b:bd:43:fe:07:bf:de:82:a3:e5:b5:a6:0d:5a:84:
         6d:c3:58:9d:b1:c5:dc:b7:62:16:16:19:78:b0:ed:d2:5e:20:
         43:cc:b0:3a:2f:9b:08:9d:76:c6:87:8a:b6:f4:81:8f:57:04:
         73:0a:46:58:e5:b8:4b:05:bd:ee:21:d6:4a:1e:01:82:4d:15:
         e7:5a:62:d5:58:36:b2:4d:33:7c:f7:c2:c0:dd:ad:ed:63:24:
         b4:0e:1b:4f:cf:b7:70:35:f1:a8:a0:e0:d2:fd:b4:3b:3c:f0:
         19:8a:59:bf:d6:6e:e3:92:27:ba:f3:24:3f:6d:b3:60:bd:f4:
         0d:cd:61:94:e5:70:12:cf:28:24:89:94:3d:06:c6:c0:05:35:
         fc:80:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org