Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32322e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          5xc202yC44nx8I/q9TBUuDv57UOlPWASW4ULr4zul38=
Subject key identifier:   F2:98:F1:2D:F7:EB:01:67:7C:DF:A1:73:DB:07:4F:DF:AF:3B:5C:0E
Certificate issuer:       /CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
Certificate serial:       0E53C013C6E6CDF33C6B5CC15FB1726FD6E7F9FB
Authority key identifier: C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
Signing time:             Mon 18 Dec 2023 19:05:06 +0000
ROA not before:           Mon 18 Dec 2023 19:00:06 +0000
ROA not after:            Mon 16 Dec 2024 19:05:06 +0000
asID:                     268440
IP address blocks:        45.161.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:53:c0:13:c6:e6:cd:f3:3c:6b:5c:c1:5f:b1:72:6f:d6:e7:f9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
        Validity
            Not Before: Dec 18 19:00:06 2023 GMT
            Not After : Dec 16 19:05:06 2024 GMT
        Subject: CN=F298F12DF7EB01677CDFA173DB074FDFAF3B5C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:25:23:92:41:f5:b9:0f:58:27:3f:8c:bb:
                    96:de:10:19:0f:06:ad:af:f3:38:6a:3d:c1:26:ca:
                    d1:80:18:c3:80:f0:4b:4c:ff:cb:1b:d7:6b:7f:73:
                    fc:bf:f6:57:35:43:40:c4:f2:82:a0:e0:a6:21:fa:
                    56:cf:9b:ae:67:f3:be:e4:ab:1d:42:a9:59:da:8c:
                    e3:a5:8f:a0:45:5d:1b:c2:bd:0d:0f:c9:fa:31:e4:
                    5b:c9:4f:52:78:d1:75:72:30:4c:cd:ee:5a:74:93:
                    58:70:60:2d:69:54:18:48:01:c5:ea:a7:1e:48:36:
                    6b:fe:35:46:bd:33:87:cf:fe:ed:e7:10:81:b8:a2:
                    f9:3a:8d:11:fc:64:47:a6:12:d8:e7:d6:52:c1:7b:
                    3e:9e:8d:b6:63:e0:46:91:13:aa:26:71:93:c9:eb:
                    ae:1d:2d:73:9c:dc:20:42:5e:0c:5c:2c:b0:95:7c:
                    cb:ae:eb:05:99:fb:e9:e2:49:a7:b7:30:79:15:3b:
                    22:a1:c3:e9:54:c4:2f:1a:56:8b:d9:f1:af:3e:b5:
                    46:40:18:de:bc:2e:bf:be:dc:56:b2:1c:80:2f:4c:
                    e6:b8:dd:bb:0c:19:ff:68:1d:ba:63:f6:0a:3e:f6:
                    a7:bb:6e:7d:54:f5:6b:be:dd:19:2f:79:8c:b5:be:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:98:F1:2D:F7:EB:01:67:7C:DF:A1:73:DB:07:4F:DF:AF:3B:5C:0E
            X509v3 Authority Key Identifier:
                keyid:C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:30:ab:a8:63:ca:be:90:cf:64:3f:d7:36:81:33:4d:32:87:
         fe:c1:39:85:dd:62:b4:19:5d:c1:de:1e:a9:c1:58:ac:bb:3d:
         d5:17:72:e1:36:20:5e:79:3d:2a:f6:20:e6:b9:f1:b7:9d:54:
         31:34:0c:19:c6:b8:1b:5e:e1:72:8b:09:98:41:25:7f:09:17:
         f4:fe:73:f2:93:f7:75:8b:02:4f:da:01:c2:ce:cd:cd:d4:cd:
         ad:c6:b8:48:0f:91:89:cd:1c:a3:df:7b:fb:95:a2:ca:c6:75:
         03:25:89:1a:7c:b5:78:60:1b:f8:91:c5:23:8a:aa:c9:9c:4a:
         04:ce:63:c6:8f:1a:29:d5:41:4f:e8:37:ff:bb:09:74:1a:10:
         53:06:42:2a:b0:b3:f2:2c:71:53:89:70:b3:38:90:06:66:a1:
         80:7d:b8:1e:f8:f6:1f:ac:db:65:3d:0a:ac:05:5c:65:29:b0:
         84:41:03:30:bf:21:7d:c1:77:5e:7d:88:8e:42:9b:c3:ca:cc:
         48:dc:d7:ad:e9:b2:6c:1c:ec:d5:d2:ed:c5:68:62:51:17:f7:
         79:43:71:f7:69:7c:d0:ce:51:cb:85:7a:18:e8:9a:b9:de:f1:
         ab:41:ec:54:c8:9e:83:c3:32:bd:70:10:04:5e:44:1a:0a:8a:
         70:8b:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org