Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233362e302f32342d3234203d3e20323639313533.roa
File:                     34352e3138302e3233362e302f32342d3234203d3e20323639313533.roa (raw, json)
Hash identifier:          dNI3fgMG7pl1nbdT2JGYHy+WfvVBBNFDFYv0gP9ewUE=
Subject key identifier:   75:47:13:6D:02:6C:F9:DD:87:7C:03:C3:58:84:56:C2:BE:9A:4B:5A
Certificate issuer:       /CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
Certificate serial:       558DF3FBD0D2566A47F4B7E908877CCE157E1C71
Authority key identifier: 3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233362e302f32342d3234203d3e20323639313533.roa
Signing time:             Sun 27 Aug 2023 15:29:46 +0000
ROA not before:           Sun 27 Aug 2023 15:24:46 +0000
ROA not after:            Sun 25 Aug 2024 15:29:46 +0000
asID:                     269153
IP address blocks:        45.180.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8d:f3:fb:d0:d2:56:6a:47:f4:b7:e9:08:87:7c:ce:15:7e:1c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
        Validity
            Not Before: Aug 27 15:24:46 2023 GMT
            Not After : Aug 25 15:29:46 2024 GMT
        Subject: CN=7547136D026CF9DD877C03C3588456C2BE9A4B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:a5:05:75:56:77:88:d1:69:3a:f9:07:8f:
                    ea:63:d8:ec:76:ef:34:8f:20:aa:b4:5e:56:be:7d:
                    80:b4:c9:bb:54:db:bb:41:40:ad:d6:48:6f:6e:0a:
                    aa:87:33:47:7c:03:74:67:3e:e9:6b:4a:3b:e9:b6:
                    8a:06:66:39:c2:d8:00:3c:a8:65:de:a8:38:03:9a:
                    9e:5a:d8:ad:68:56:df:9c:c7:2e:d9:81:56:b5:93:
                    d5:f0:ae:0c:af:19:32:1d:8a:b3:bb:83:7c:1b:f8:
                    3a:79:7e:87:88:ce:ef:1c:64:45:48:fb:c9:58:61:
                    aa:36:ab:83:1f:38:b2:d5:9e:f2:d7:e9:66:68:56:
                    f8:29:bf:6f:59:7d:e7:fe:13:99:12:cf:02:73:7c:
                    a5:92:66:f6:c2:cc:72:cd:23:85:8e:ab:77:d8:81:
                    ab:20:98:b0:f2:a1:a7:96:b3:bc:8c:0c:ce:56:f3:
                    1b:97:4d:35:dc:65:6a:de:53:a4:cd:34:be:0b:d6:
                    15:c1:71:23:9c:20:c9:c0:a8:8b:e4:4d:0e:d5:94:
                    7d:bf:01:3a:86:f1:ea:b8:e4:15:8f:f7:ff:3b:5a:
                    ec:c2:e3:5e:68:43:d5:79:06:29:80:c4:81:c4:4d:
                    30:21:11:37:f1:95:a4:eb:2c:8d:64:93:a3:f9:15:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:13:6D:02:6C:F9:DD:87:7C:03:C3:58:84:56:C2:BE:9A:4B:5A
            X509v3 Authority Key Identifier:
                keyid:3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233362e302f32342d3234203d3e20323639313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:70:76:cd:59:13:29:4b:86:d1:51:bb:b5:c0:c2:0a:c4:f3:
         14:61:0f:e1:b7:e5:5f:ce:65:0c:1f:21:06:9e:b8:dd:e3:40:
         8b:15:6d:b1:dd:c3:0f:82:db:ce:97:11:aa:44:eb:82:de:58:
         f8:29:c1:b1:88:b0:a8:f6:4c:39:e3:c7:9e:e5:7e:7f:ab:58:
         d6:50:0a:70:c1:f1:e9:90:11:c2:d2:5e:0e:c3:78:b1:cb:4c:
         45:2e:75:76:89:71:1c:27:8e:31:ca:b9:66:6d:63:d6:d0:4e:
         f2:25:14:b1:e1:8d:04:4d:52:0a:3f:33:75:7a:39:86:e4:5f:
         d1:5f:a2:ac:fa:7b:75:a1:15:ce:cf:e4:26:28:94:d6:e2:70:
         53:54:39:73:1c:09:c9:55:78:dd:07:64:c7:89:c8:14:1a:9f:
         22:1a:cb:3a:0e:a2:d1:4b:67:99:c9:90:a9:a6:24:b0:c8:e8:
         4d:70:29:6f:c7:66:01:c7:50:82:13:95:2e:5e:22:65:28:8e:
         e9:44:d3:86:76:54:ac:60:3c:29:a9:44:95:67:42:1f:6f:84:
         f6:9e:6d:c2:e4:da:7c:ec:6a:70:31:4b:4b:56:86:46:4c:a5:
         bf:43:65:b2:a1:78:62:cb:83:25:97:b5:96:eb:0e:20:a8:4c:
         78:22:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 06:00:07 2024 by rpki-client on console-ams.rpki-client.org