Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323033.roa
File:                     34352e3139312e3230342e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          xlfRXpvMB05tzs309XvHs5FKHMCsY0dzkKakU9nr/EM=
Subject key identifier:   91:AC:3F:DF:64:36:43:7F:49:8E:32:63:3D:79:57:39:B4:05:18:D1
Certificate issuer:       /CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
Certificate serial:       7FE1828125D5FFC6B941E8C8EAC2D880377147E8
Authority key identifier: EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323033.roa
Signing time:             Wed 29 Nov 2023 10:55:35 +0000
ROA not before:           Wed 29 Nov 2023 10:50:35 +0000
ROA not after:            Wed 27 Nov 2024 10:55:35 +0000
asID:                     203
IP address blocks:        45.191.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e1:82:81:25:d5:ff:c6:b9:41:e8:c8:ea:c2:d8:80:37:71:47:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
        Validity
            Not Before: Nov 29 10:50:35 2023 GMT
            Not After : Nov 27 10:55:35 2024 GMT
        Subject: CN=91AC3FDF6436437F498E32633D795739B40518D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:87:4e:d5:1f:90:c9:81:f6:7b:10:65:08:
                    bc:34:8e:a4:71:7c:74:af:ef:f5:3e:f4:c7:1e:c4:
                    8c:74:75:d7:ac:92:34:f1:dc:0d:dc:e5:5e:48:bf:
                    ef:46:db:e8:f9:06:fe:c6:9d:b0:0a:11:23:c0:bd:
                    32:9b:30:a1:7a:4e:c0:ea:6c:ac:f2:81:ac:d5:18:
                    1e:90:c0:0e:66:3c:a2:0e:3f:23:99:69:6e:b5:3c:
                    63:8f:fe:d7:ff:ab:41:7f:15:b6:4d:85:1a:a1:45:
                    fe:ba:9a:39:3d:6d:bd:ed:ec:2f:61:00:13:af:ee:
                    d1:25:2a:b7:f3:ac:cf:63:07:54:37:67:04:cb:68:
                    88:c4:4a:13:f5:2e:51:31:62:87:4c:8e:67:8e:a4:
                    52:dc:55:d4:c4:23:36:0f:15:da:9b:44:e6:00:21:
                    60:2f:95:c9:34:52:c2:43:5f:fa:eb:24:e9:6f:8d:
                    5c:78:c3:1f:c1:7e:97:10:bc:f4:c7:51:72:8e:e6:
                    3e:a6:40:21:6b:68:5a:c4:30:f8:a8:a4:f8:33:ca:
                    6f:47:4f:46:b6:34:c7:7c:2c:62:28:a9:20:40:ce:
                    47:5d:82:86:e2:c8:49:70:d8:d8:af:1b:39:10:3b:
                    b3:d4:3c:86:b4:47:85:57:dc:4a:2b:1c:85:72:55:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AC:3F:DF:64:36:43:7F:49:8E:32:63:3D:79:57:39:B4:05:18:D1
            X509v3 Authority Key Identifier:
                keyid:EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:78:f6:15:ef:3a:9e:bd:68:1f:10:d7:da:08:17:0a:63:f0:
         1c:aa:80:50:c4:f2:29:74:4a:ee:0d:ab:97:80:17:15:90:a2:
         a8:d4:cf:eb:1c:1e:39:2d:e0:fe:d7:1b:b7:f5:ea:1c:7f:99:
         44:98:64:f4:75:44:de:d2:bb:7d:9e:18:2a:6a:32:fc:2f:e7:
         62:42:14:26:4d:7f:9a:ea:8d:9e:ff:3e:47:32:f8:8a:f2:c6:
         db:77:c7:e6:3a:1f:a9:cb:68:4c:84:ae:50:f2:fa:2a:2f:c6:
         f5:a0:64:22:4d:c4:1f:da:78:11:76:5d:92:af:77:65:f9:34:
         f8:f8:d5:04:ef:b8:82:1b:3a:00:9a:ca:6e:1d:e1:19:8c:4f:
         22:d2:a9:ce:ac:19:0d:75:1f:b2:ea:32:f9:31:92:b6:63:d2:
         3a:79:d4:37:38:95:a5:b1:7e:ac:d5:14:29:fe:26:2d:26:84:
         84:da:25:a2:30:ec:0b:26:8b:13:ec:a6:50:94:1e:9a:fc:81:
         aa:5b:8a:76:86:70:b0:80:24:5c:dd:30:e3:eb:c9:e2:27:46:
         00:aa:93:62:87:51:1e:7a:8e:65:15:37:48:8d:34:43:38:49:
         66:fd:c4:a3:ba:99:41:e3:ad:9c:f9:b6:97:73:f4:a6:4e:f4:
         e9:35:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org