Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31382e302f32342d3234203d3e20323638313831.roa
File:                     34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (raw, json)
Hash identifier:          X7NkL+PQPHlcKFuoM/Rb5v7xfOTyGMmOhrzRFchshHw=
Subject key identifier:   72:E9:1C:45:E6:0A:F0:65:FA:DC:B3:8F:AF:05:7E:3F:C7:B2:78:88
Certificate issuer:       /CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
Certificate serial:       26B6C71F168A4BB2FD1A78B0147194C2521C2B54
Authority key identifier: DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31382e302f32342d3234203d3e20323638313831.roa
Signing time:             Tue 04 Jul 2023 16:11:33 +0000
ROA not before:           Tue 04 Jul 2023 16:06:33 +0000
ROA not after:            Tue 02 Jul 2024 16:11:33 +0000
asID:                     268181
IP address blocks:        45.171.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b6:c7:1f:16:8a:4b:b2:fd:1a:78:b0:14:71:94:c2:52:1c:2b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
        Validity
            Not Before: Jul  4 16:06:33 2023 GMT
            Not After : Jul  2 16:11:33 2024 GMT
        Subject: CN=72E91C45E60AF065FADCB38FAF057E3FC7B27888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:9e:6b:b2:56:b5:13:dd:eb:a3:e5:db:29:
                    31:43:70:c3:3d:78:f0:a3:fd:0a:c0:e6:36:bd:75:
                    95:78:0a:86:93:f9:d4:73:81:5a:4c:c0:85:49:f3:
                    fe:e9:a9:58:d7:a0:98:fc:19:2b:25:de:f5:39:4c:
                    64:63:08:ed:91:fd:dc:fb:bb:f5:4d:08:82:39:3e:
                    f4:ab:e5:c7:d5:a1:c3:08:34:14:2e:5a:d4:e4:d0:
                    48:a3:30:03:b3:96:e9:f1:6a:ee:3e:5d:64:3b:10:
                    d6:92:58:ae:26:ff:07:bb:63:50:3b:3e:4f:92:87:
                    58:e9:24:87:66:c0:5b:49:dc:40:16:c5:ad:73:b0:
                    0f:f4:b9:fb:00:6f:03:79:af:74:7c:85:b3:4b:ae:
                    be:20:ee:fd:33:b5:d6:84:71:62:b6:96:6e:24:ab:
                    0f:e0:a6:5a:4d:24:54:dc:d6:c2:d3:ab:5f:5b:98:
                    d3:63:06:87:53:81:97:cf:4d:b8:0d:fd:f4:c7:15:
                    74:76:b2:9b:31:f8:02:6d:8d:6e:e6:5f:ae:01:7e:
                    a0:48:e0:10:6f:10:6a:ef:df:16:f5:63:24:bd:da:
                    32:e6:f8:39:7b:ec:64:6e:02:bd:6d:8a:70:e9:c8:
                    da:ce:b5:a5:25:df:6d:4d:25:55:ee:23:1c:44:4c:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E9:1C:45:E6:0A:F0:65:FA:DC:B3:8F:AF:05:7E:3F:C7:B2:78:88
            X509v3 Authority Key Identifier:
                keyid:DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31382e302f32342d3234203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d8:9f:91:98:15:89:67:54:dc:8d:a7:31:54:f1:29:d3:ee:
         10:88:64:3a:2c:65:3a:0b:65:74:4f:9b:b0:99:34:ad:16:60:
         2b:d2:e6:32:b6:73:1b:4b:1b:4c:a7:36:5f:04:6d:07:80:51:
         ca:18:67:2c:52:68:f5:32:07:78:47:6f:7a:48:93:6c:5a:aa:
         02:d2:a1:70:62:d1:15:a8:84:00:f8:eb:d3:cc:c5:53:d1:38:
         90:7f:0c:9f:13:44:f4:a0:9e:6f:f3:09:af:32:d7:07:11:63:
         2c:dc:17:e1:eb:c1:30:e8:7f:09:80:e4:fa:5c:8c:d7:e1:53:
         1c:d1:56:b7:8e:62:aa:18:a1:89:80:b8:d9:c2:2a:e3:54:14:
         69:92:05:b8:67:dd:12:b9:d1:c8:49:37:e0:71:8b:43:a9:a4:
         01:80:0b:d3:3c:f2:38:df:f3:9f:39:bf:c6:c4:c8:d5:a3:f8:
         36:7b:df:eb:79:3d:f0:33:e7:a1:26:3b:ad:44:e5:00:3f:08:
         cf:04:25:37:56:1c:59:fa:c4:b6:2b:84:ee:af:bb:5c:5c:60:
         e5:19:92:bb:d0:b7:e3:60:45:c5:5c:45:f2:4b:62:e0:f2:ee:
         ff:84:ae:d5:aa:60:e4:1b:a4:5a:30:01:9c:74:fc:d3:2e:3e:
         43:c2:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org