Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232322e302f32342d3234203d3e20323638303932.roa
File:                     34352e3136382e3232322e302f32342d3234203d3e20323638303932.roa (raw, json)
Hash identifier:          Dur9hw+iZW9utjRC+QZ4V74MLuIyNPU9gYicssUL3XU=
Subject key identifier:   EB:18:01:99:27:BB:64:75:D4:75:70:30:20:9D:CE:6B:16:D0:EF:20
Certificate issuer:       /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial:       19C516091BB4507E572CB3075597C39739F548F5
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232322e302f32342d3234203d3e20323638303932.roa
Signing time:             Fri 10 Nov 2023 19:00:00 +0000
ROA not before:           Fri 10 Nov 2023 18:55:00 +0000
ROA not after:            Fri 08 Nov 2024 19:00:00 +0000
asID:                     268092
IP address blocks:        45.168.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c5:16:09:1b:b4:50:7e:57:2c:b3:07:55:97:c3:97:39:f5:48:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
        Validity
            Not Before: Nov 10 18:55:00 2023 GMT
            Not After : Nov  8 19:00:00 2024 GMT
        Subject: CN=EB18019927BB6475D4757030209DCE6B16D0EF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:cb:5d:16:0f:ae:e4:1e:30:df:e3:37:bd:
                    83:af:69:64:a6:b5:97:f4:9f:cb:f5:15:2e:27:c6:
                    a4:1a:aa:c2:7f:7d:26:81:53:e2:d6:e9:93:71:5d:
                    06:08:9a:7c:f4:7e:26:ad:6d:c9:9e:82:b5:6a:9a:
                    84:fc:48:fa:c0:63:c0:c5:b8:91:06:74:47:ec:a7:
                    06:da:56:e6:9e:8d:21:23:5b:d0:e3:0e:46:6f:48:
                    71:b9:1f:e9:42:05:df:78:e1:be:75:64:71:e2:5f:
                    6c:b0:62:8e:57:6d:08:86:9b:7c:31:a2:2d:e1:c6:
                    55:3b:87:89:9b:d3:64:f9:1b:72:2e:94:df:8f:21:
                    eb:cd:a2:db:18:ae:93:98:d7:41:b4:17:3f:f2:2d:
                    63:f2:b0:aa:c0:72:64:2b:29:28:c5:77:81:87:db:
                    82:60:59:eb:d0:56:80:95:b8:73:b9:b7:95:a6:6e:
                    32:39:83:d9:c4:41:d3:42:c3:01:05:5f:90:c2:59:
                    77:ff:c8:03:16:79:d2:da:3d:99:11:18:fb:c3:0e:
                    54:9c:4b:1c:ec:31:58:00:0d:c1:61:2c:b3:b5:e2:
                    bf:f7:2f:71:aa:fe:5a:10:4c:0c:78:34:a6:f2:2f:
                    90:07:4a:af:05:a5:6f:72:4c:b5:13:0c:4e:01:c4:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:18:01:99:27:BB:64:75:D4:75:70:30:20:9D:CE:6B:16:D0:EF:20
            X509v3 Authority Key Identifier:
                keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232322e302f32342d3234203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:57:d8:83:71:7d:fe:bb:81:58:37:10:fd:17:de:ec:32:
         c3:97:62:1e:5d:32:73:ae:9c:58:ff:7e:62:0c:01:72:13:5a:
         ac:8b:f5:fe:0e:37:6a:e2:a0:ec:85:22:ab:cf:60:fa:a4:57:
         a8:f3:ec:9f:f3:33:6a:9d:a6:54:21:ea:6e:ab:c2:cc:e4:00:
         b9:18:4c:cc:d1:c4:14:7a:5d:ab:93:1e:1b:02:eb:f2:1c:53:
         71:a6:aa:04:51:87:a1:21:7c:5a:78:93:56:5d:2c:4f:a5:c3:
         91:40:92:7b:6e:6f:b7:f8:fe:8f:d5:76:97:41:aa:a1:dd:5a:
         0e:30:3c:8a:cd:82:73:20:2c:a6:2e:2e:9e:ea:4e:cc:a7:03:
         3a:74:59:dc:1a:af:f4:74:d3:d3:c6:07:4f:19:36:ab:4c:4b:
         47:7f:5d:78:70:4d:bf:22:a1:f6:5d:4c:81:81:6d:36:56:f7:
         09:78:7a:4c:5b:11:f2:62:30:01:75:5b:96:c8:46:2c:06:60:
         e5:7f:ff:c3:e9:05:56:98:e7:73:a9:bf:7d:cb:69:7e:22:d5:
         91:8f:25:ee:c2:c2:eb:a3:86:a2:da:9b:7b:98:25:41:3a:f5:
         ba:6f:76:42:ea:48:83:19:6e:ce:29:42:a7:2f:89:92:b2:98:
         f1:90:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org