Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32332d3233203d3e20323638343430.roa
File:                     34352e3136312e32322e302f32332d3233203d3e20323638343430.roa (raw, json)
Hash identifier:          73kC7p04VcOy71vqNMTXSteBKWGpNZs0qH9203tgkXA=
Subject key identifier:   14:14:C2:BF:0E:3F:A5:3B:4C:00:62:A4:9C:EE:C9:BD:0A:4C:CE:36
Certificate issuer:       /CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
Certificate serial:       5AF288082CFFF92FD55CF83148D3A8D35F010EEE
Authority key identifier: C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32332d3233203d3e20323638343430.roa
Signing time:             Mon 18 Dec 2023 19:05:06 +0000
ROA not before:           Mon 18 Dec 2023 19:00:06 +0000
ROA not after:            Mon 16 Dec 2024 19:05:06 +0000
asID:                     268440
IP address blocks:        45.161.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f2:88:08:2c:ff:f9:2f:d5:5c:f8:31:48:d3:a8:d3:5f:01:0e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
        Validity
            Not Before: Dec 18 19:00:06 2023 GMT
            Not After : Dec 16 19:05:06 2024 GMT
        Subject: CN=1414C2BF0E3FA53B4C0062A49CEEC9BD0A4CCE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:33:d2:99:cc:c9:e2:4e:b6:45:bc:8e:43:
                    98:39:c8:f3:f7:a1:6b:65:61:91:96:f6:e3:94:c5:
                    9d:bd:1d:fb:18:db:0b:64:ee:4f:e0:80:91:bc:bc:
                    22:4b:23:c8:05:19:14:7f:dc:01:a5:98:44:1b:00:
                    b3:f9:94:20:19:65:d8:e2:27:6a:40:87:5e:33:dd:
                    72:29:43:bd:f2:c2:49:f5:2f:08:31:58:60:5e:d0:
                    7e:76:61:b1:20:04:00:df:79:9d:87:0e:b2:48:c6:
                    d6:38:58:ff:f7:df:c2:95:9c:92:8e:b3:ba:c9:5e:
                    a7:e7:58:cd:15:71:76:c0:3a:bd:aa:65:e8:6e:5f:
                    cf:d4:51:3e:d0:27:8a:7f:0f:3b:b9:f9:a8:ec:d4:
                    99:4f:d0:1f:22:57:40:c5:9c:96:17:01:4f:9e:35:
                    d0:fb:64:b2:fa:2a:52:db:10:ad:c0:1e:f1:e4:9a:
                    34:ce:0d:b0:b4:69:f8:19:4d:0b:f5:6a:44:ca:b9:
                    99:c8:b5:66:1c:20:69:32:36:47:65:9c:81:c3:f0:
                    3b:80:28:50:39:0f:61:b4:63:af:4c:9b:d4:c3:e8:
                    ae:99:74:95:0b:42:2c:ba:8a:c0:9c:5d:5a:5f:09:
                    9f:22:01:bd:18:94:bd:54:29:55:26:8c:ef:b1:3d:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:14:C2:BF:0E:3F:A5:3B:4C:00:62:A4:9C:EE:C9:BD:0A:4C:CE:36
            X509v3 Authority Key Identifier:
                keyid:C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32332d3233203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:ad:84:50:7d:c2:cc:6b:1d:55:56:0e:f5:c4:7d:04:ca:
         6c:fd:d1:ee:07:2b:c4:89:38:95:f8:00:10:3b:4f:80:a4:0a:
         c4:2f:4c:c2:04:5f:cf:a5:3b:74:83:e7:7f:81:59:78:d7:ad:
         5d:80:86:1a:0f:9c:32:5f:f4:ad:1b:8f:04:ab:88:7d:9d:45:
         88:48:21:50:a2:44:87:80:7c:0c:34:1a:07:2c:c3:7d:a6:3e:
         b8:00:8f:a2:f8:57:37:67:30:1f:e5:0e:e7:e3:e0:7d:97:79:
         8e:84:74:49:57:a2:6f:bd:19:e0:7f:53:1b:dd:01:73:af:d2:
         cf:cb:22:0b:42:d1:16:96:f3:c5:81:77:ed:e3:a9:0b:82:67:
         07:6c:9d:69:65:5e:68:a5:c8:51:73:25:47:3b:09:38:b6:cb:
         69:2e:2b:ce:fb:b1:e5:83:fa:c6:7e:4d:02:c6:55:21:f3:f5:
         c3:b7:7d:fb:c5:40:30:53:f9:4e:b5:5a:ab:b2:26:66:1a:3f:
         0e:4d:97:f8:c2:89:c3:83:1b:50:b0:94:ab:60:cc:cd:8e:b9:
         b5:2b:a5:93:3b:70:cd:24:2e:5f:ac:19:ad:63:88:8d:23:a5:
         2c:21:2b:e7:e4:51:4e:b7:31:89:ca:f6:61:db:e5:9b:47:03:
         07:c5:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org