Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa
File:                     34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (raw, json)
Hash identifier:          HjyBtQIbsPSaax9ps1H0KfDFRFBlVnQ6MKTHUQHzDmU=
Subject key identifier:   70:FD:EE:69:F6:40:55:A5:A4:A0:E4:86:AF:97:CB:33:9D:31:26:3E
Certificate issuer:       /CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
Certificate serial:       12F7336935A7244A46B210B0B50D9BE560227A6D
Authority key identifier: E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa
Signing time:             Wed 04 Oct 2023 14:24:06 +0000
ROA not before:           Wed 04 Oct 2023 14:19:06 +0000
ROA not after:            Wed 02 Oct 2024 14:24:06 +0000
asID:                     268913
IP address blocks:        45.175.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f7:33:69:35:a7:24:4a:46:b2:10:b0:b5:0d:9b:e5:60:22:7a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
        Validity
            Not Before: Oct  4 14:19:06 2023 GMT
            Not After : Oct  2 14:24:06 2024 GMT
        Subject: CN=70FDEE69F64055A5A4A0E486AF97CB339D31263E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:e3:4d:dd:99:31:72:fb:e9:27:f8:28:5f:
                    34:cc:cc:e1:4f:61:f1:34:b8:f8:1d:8a:d0:59:79:
                    48:10:f9:c2:cf:f5:a2:43:35:d9:49:7c:0e:e4:d9:
                    d0:25:4f:0d:2f:c9:21:cb:47:8e:82:d3:ad:02:ff:
                    4a:8a:67:0f:e7:c2:5f:e0:d2:81:75:d7:9f:2e:9c:
                    56:cd:9a:73:54:53:2f:62:4d:9d:2a:69:da:25:63:
                    73:b3:4e:79:67:68:69:74:f2:d8:4f:8a:8b:5b:ac:
                    c8:42:7b:65:b7:c5:59:f5:54:49:d8:86:16:51:7d:
                    a3:72:5c:2f:41:9a:6e:a8:ab:80:f5:56:b0:9a:d5:
                    40:4d:69:42:79:6e:59:ea:2e:b8:3c:fb:f1:27:4f:
                    33:6c:ad:b3:5a:59:b8:fb:20:74:b1:3e:1d:dc:40:
                    45:4f:2f:b3:a7:46:64:09:3a:57:25:51:8f:6d:8e:
                    de:b2:f0:e5:0b:e0:e7:c7:af:a0:be:ad:fe:12:ec:
                    80:18:30:33:5d:47:77:ef:1f:67:a6:cf:80:4a:43:
                    df:59:69:f7:a7:9d:be:77:cb:76:65:19:7a:05:94:
                    01:73:f6:a4:85:cf:29:2e:30:83:0d:df:f0:a7:04:
                    44:e2:be:65:fc:f6:1e:21:49:ac:a5:e7:e7:07:78:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FD:EE:69:F6:40:55:A5:A4:A0:E4:86:AF:97:CB:33:9D:31:26:3E
            X509v3 Authority Key Identifier:
                keyid:E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:41:5f:f1:bf:ea:ec:b1:12:d1:f4:68:f2:ac:a2:58:2e:1e:
         58:41:b1:50:08:2e:d4:db:61:3e:42:49:0b:bc:1d:30:21:0c:
         3f:66:3a:2a:97:04:6a:5c:f9:b1:74:a4:c0:86:1f:f6:fe:5d:
         e2:b4:5f:d5:ef:16:56:bc:ac:e0:4a:21:50:fe:35:c0:1f:e6:
         07:f7:51:be:34:08:4e:ac:69:02:0a:d1:ad:0e:e5:f6:a4:b4:
         ef:24:94:91:13:02:a9:6d:38:10:9b:cc:b0:98:31:0f:5b:00:
         84:94:bc:fd:76:ac:bd:89:a9:fa:ba:ec:94:ba:2a:70:87:95:
         d6:0e:db:a3:2b:da:58:d7:63:c2:84:fb:ad:f9:4f:51:30:0f:
         66:f3:08:46:8c:f2:d0:00:83:ca:30:13:44:61:2e:d3:45:8e:
         fc:b5:b9:ec:94:9e:e2:22:89:7d:e7:ab:20:7c:49:81:66:b3:
         08:3d:a9:4e:1c:b8:87:62:77:1b:98:3a:de:9f:83:52:55:52:
         71:e2:c1:83:0f:6e:42:88:dd:1e:51:1c:72:c8:55:0d:d0:d0:
         c1:16:75:bf:a5:08:18:35:40:9d:87:e1:98:ca:aa:e1:1b:95:
         a8:17:1a:ed:90:b1:d8:91:9a:62:a7:ee:54:32:a5:42:ff:09:
         f4:d8:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org