Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa
File:                     34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa (raw, json)
Hash identifier:          jyoyfyDhB35Ixi4iVTv7dG6hVt/9JZPUTVV7QbEil4w=
Subject key identifier:   9C:E6:5A:9D:74:05:50:32:70:3D:0B:9C:45:12:32:46:60:F2:F8:B2
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       30D608FDD5279358204824174206104D1371EE03
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa
Signing time:             Thu 29 Jun 2023 17:00:50 +0000
ROA not before:           Thu 29 Jun 2023 16:55:50 +0000
ROA not after:            Thu 27 Jun 2024 17:00:50 +0000
asID:                     269597
IP address blocks:        45.189.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d6:08:fd:d5:27:93:58:20:48:24:17:42:06:10:4d:13:71:ee:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Jun 29 16:55:50 2023 GMT
            Not After : Jun 27 17:00:50 2024 GMT
        Subject: CN=9CE65A9D74055032703D0B9C4512324660F2F8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:31:83:81:df:9e:6d:a3:78:6e:c6:85:d0:
                    6b:f4:79:58:1e:41:1c:0b:39:62:3b:36:93:2b:f1:
                    58:79:1e:a7:9e:f7:ec:28:39:95:48:6b:6c:f0:3e:
                    f8:d8:08:1a:6f:b9:9a:fc:e7:f6:76:f2:33:6a:55:
                    cc:ae:18:7a:cf:f6:43:c4:4a:0c:84:05:e9:86:fe:
                    6f:8e:62:d2:00:38:63:9b:bb:42:c2:0b:03:41:c1:
                    73:63:c6:0b:89:a0:a8:f4:7d:33:3f:5c:15:54:9b:
                    24:58:a2:93:ea:1e:85:b8:b9:f9:91:35:9e:8c:6d:
                    3a:4e:a3:02:68:fc:34:96:d4:ae:73:ff:57:3a:6f:
                    b5:6a:5b:c5:0e:14:1d:9e:38:5a:65:aa:6b:85:ed:
                    ce:33:9d:69:bd:42:43:b0:1b:8d:99:55:2e:6a:5a:
                    8d:01:a8:52:79:df:11:bb:77:e6:9f:6d:5c:40:3d:
                    08:d6:6b:30:fe:d8:5c:77:82:3e:63:e1:46:5c:72:
                    63:e9:c2:20:9e:45:13:df:12:f5:7b:ed:17:b6:fb:
                    5b:33:e7:7f:f7:97:22:fb:78:bc:27:22:bb:6c:6b:
                    6a:69:b8:e5:da:b6:d2:45:8d:a4:ab:33:59:ac:44:
                    e0:6f:6b:c0:31:4f:2f:6f:4e:e0:04:c2:fb:fd:fd:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E6:5A:9D:74:05:50:32:70:3D:0B:9C:45:12:32:46:60:F2:F8:B2
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:c1:2e:a7:c7:9e:cd:3b:84:ce:33:fb:0e:a3:d6:8f:2b:5e:
         ff:82:bf:08:0e:58:1c:5b:22:38:d2:9e:af:52:60:88:27:6c:
         07:c4:91:ff:60:de:f6:dc:7c:21:cc:cf:90:f6:11:70:fa:f1:
         16:a6:b4:e8:ba:9d:12:0e:fb:f7:08:9c:e5:aa:f0:a3:f3:7c:
         99:eb:4c:8f:50:a9:96:28:f1:02:88:40:af:b3:93:ba:70:09:
         37:48:98:49:a8:44:bf:9c:c3:10:79:47:7d:93:27:7c:b7:b2:
         2d:b2:5f:44:2c:97:c1:bb:42:7e:8e:7b:e9:c1:aa:d1:e9:2b:
         2e:21:fc:cc:f6:32:66:f4:ee:88:21:9a:77:c9:4d:48:92:73:
         08:03:e1:fb:03:86:ae:54:a0:e0:1e:61:75:58:26:3c:c0:6a:
         98:bb:70:58:84:10:37:7a:f2:9a:2f:47:e8:86:66:0c:73:b8:
         66:c2:84:2d:a3:74:c8:d7:95:7d:37:10:ef:8f:56:8e:ad:23:
         c6:b2:fd:9e:9d:ad:c6:b8:c0:a6:ec:be:2f:da:ce:ca:3e:8b:
         95:2b:f5:a5:01:bd:18:a1:74:52:ba:12:62:c1:4f:f7:a5:fb:
         57:34:3f:05:40:c8:98:d0:c9:5e:ca:44:20:2a:c8:c1:5e:17:
         ab:77:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org