Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa
File:                     34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (raw, json)
Hash identifier:          zy6m6KLiObxbZLy0wE7YlQwQx1xpCeqJDdyGgmkeG7k=
Subject key identifier:   AC:03:9C:60:53:27:D7:08:1A:18:7B:5B:82:E8:B8:04:9B:CA:C4:44
Certificate issuer:       /CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
Certificate serial:       45D78D6B8D0DAB31FBB2D9689A31853072CB59E4
Authority key identifier: E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa
Signing time:             Wed 04 Oct 2023 14:24:16 +0000
ROA not before:           Wed 04 Oct 2023 14:19:16 +0000
ROA not after:            Wed 02 Oct 2024 14:24:16 +0000
asID:                     268913
IP address blocks:        45.175.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d7:8d:6b:8d:0d:ab:31:fb:b2:d9:68:9a:31:85:30:72:cb:59:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
        Validity
            Not Before: Oct  4 14:19:16 2023 GMT
            Not After : Oct  2 14:24:16 2024 GMT
        Subject: CN=AC039C605327D7081A187B5B82E8B8049BCAC444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:cd:1f:ea:9f:7c:b1:28:6e:90:22:0a:b8:
                    80:f8:cd:d0:e7:3d:00:fb:ec:79:b5:ba:ad:2c:28:
                    c4:f6:c1:c6:65:4f:2e:de:06:bd:fd:0f:bb:c2:3c:
                    2b:fc:88:a2:6d:9f:31:90:bf:fb:38:6e:6a:28:e2:
                    d6:12:a1:a2:43:dc:3f:c6:b8:8b:85:ba:52:90:cb:
                    ed:4d:d4:54:1c:6b:67:b8:fa:f5:49:c0:6f:1d:d5:
                    98:29:dd:a9:d8:74:87:0b:00:33:b7:ca:13:a2:d0:
                    c9:ba:19:e9:3f:d5:14:77:7d:23:fa:f9:03:78:e2:
                    16:9c:0b:33:54:f2:13:05:79:82:46:a8:a3:d0:03:
                    2d:3d:08:45:bc:ea:00:31:22:14:9e:2c:e9:81:b1:
                    08:e8:46:37:00:6e:1e:82:de:ac:d1:c4:6f:e0:5d:
                    c7:5c:da:7d:06:57:db:1c:23:3f:dc:f0:b7:2f:73:
                    47:44:f0:0f:1f:4c:d3:c3:32:b5:a3:77:d3:a1:10:
                    54:d7:c0:42:da:c9:17:91:d2:1d:74:3d:a4:db:d9:
                    92:00:fc:5d:af:0f:7d:c7:de:ae:0e:da:67:95:67:
                    36:af:e0:b6:3b:57:b0:53:ca:51:20:e2:68:07:f5:
                    1d:9a:ee:73:df:69:c7:28:1d:fb:db:1a:cb:2b:b3:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:9C:60:53:27:D7:08:1A:18:7B:5B:82:E8:B8:04:9B:CA:C4:44
            X509v3 Authority Key Identifier:
                keyid:E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:46:a3:7f:af:c9:dd:3a:3b:81:ac:39:20:27:f6:e3:2a:
         07:19:b3:a7:7c:7e:84:1d:d6:9b:23:73:e2:d2:07:2e:e6:ce:
         d1:0d:70:5a:1d:ba:43:cd:40:b6:35:17:61:b5:0f:c6:e3:36:
         9d:ec:77:57:09:dc:e9:4e:ea:3a:86:d5:d2:91:60:4a:e9:3c:
         87:93:7c:78:9e:3e:9e:0e:f1:d0:38:72:e8:51:cf:b2:09:cc:
         8b:e1:f2:48:ad:11:47:75:9a:e5:99:e0:b0:b0:7a:ce:91:72:
         91:35:4b:5d:07:57:b8:06:13:8e:c7:be:da:dd:af:62:29:46:
         f2:fa:fb:66:c7:2b:2b:69:0e:b9:29:c3:20:38:0f:3b:89:cb:
         3a:1e:e7:56:23:82:24:14:71:97:54:2a:d3:3b:e9:81:93:6e:
         28:66:1d:64:b4:82:de:6c:fd:c3:7f:d7:d7:89:63:81:6c:d4:
         16:6b:25:e7:42:b9:6c:41:19:ef:b6:cf:7f:4a:bf:21:a6:2e:
         8f:9a:0c:59:ac:dd:03:40:7e:64:62:d6:3e:45:3a:27:16:bf:
         b2:e3:76:3e:48:f2:db:78:c4:22:12:48:da:4a:b2:ef:86:90:
         74:b3:bc:7d:38:6a:2c:07:d6:97:70:aa:d3:0d:87:09:1c:e1:
         56:9a:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org