Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
File:                     34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa (raw, json)
Hash identifier:          jYJnl5hrvG+R+MH9iXMpBjcXj7Or3Iw9hln/LZYIncU=
Subject key identifier:   01:5E:29:78:DA:9E:D0:30:2B:57:5B:7E:C6:A4:26:D5:54:35:57:C6
Certificate issuer:       /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial:       41E96FE601BBFA8C679E55454EDA0C799A7AE04B
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
Signing time:             Fri 10 Nov 2023 19:00:00 +0000
ROA not before:           Fri 10 Nov 2023 18:55:00 +0000
ROA not after:            Fri 08 Nov 2024 19:00:00 +0000
asID:                     268092
IP address blocks:        45.168.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e9:6f:e6:01:bb:fa:8c:67:9e:55:45:4e:da:0c:79:9a:7a:e0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
        Validity
            Not Before: Nov 10 18:55:00 2023 GMT
            Not After : Nov  8 19:00:00 2024 GMT
        Subject: CN=015E2978DA9ED0302B575B7EC6A426D5543557C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:83:4b:b2:ae:bf:a1:63:8f:0a:f9:92:0f:
                    32:f9:ae:db:e2:08:11:a7:a6:33:57:84:80:5a:76:
                    bc:f7:a7:4d:1a:cd:7b:85:fa:36:b7:04:59:1e:a1:
                    b1:2c:83:21:8f:79:16:49:29:8b:81:75:cc:1d:b3:
                    18:68:22:f9:fa:29:c6:82:f8:bb:48:ef:10:f6:7f:
                    46:78:b3:a3:bb:39:d1:ef:cc:e1:fd:a5:24:a0:53:
                    ce:33:35:c3:84:20:88:96:7f:fb:b9:4f:17:72:9b:
                    fc:20:e4:41:ae:7f:5b:82:0c:98:2f:b7:10:b8:33:
                    9a:f9:be:82:91:08:eb:a3:34:2f:28:6d:e4:23:47:
                    6c:21:e6:a1:93:94:d5:02:69:b2:a3:6a:7a:c4:af:
                    14:43:ba:14:02:0d:2e:40:80:78:c7:f1:fb:c1:b3:
                    02:73:21:78:6d:74:8c:26:74:02:b9:7a:ee:07:b6:
                    92:03:66:45:b9:4b:17:2d:36:2c:ef:f4:b6:a0:51:
                    96:8b:e7:2d:5d:b1:67:61:1a:8b:c6:9f:60:b3:57:
                    2e:38:63:eb:07:c1:21:a1:7a:66:d8:ff:d7:3f:4c:
                    88:75:8b:e8:78:13:0d:0c:42:84:c9:ac:67:9e:24:
                    66:21:c9:9f:f6:1b:1a:c2:8d:38:3b:d7:47:1d:be:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:29:78:DA:9E:D0:30:2B:57:5B:7E:C6:A4:26:D5:54:35:57:C6
            X509v3 Authority Key Identifier:
                keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:26:15:c1:53:1c:00:02:b4:f8:e9:28:9e:eb:bf:e9:54:2f:
         ab:7d:2d:49:6b:e6:61:2c:ca:ab:c2:c3:7a:02:c1:e7:e3:cb:
         75:56:2e:11:67:ef:2f:49:6c:86:83:31:b3:59:48:2d:a7:b4:
         6b:ad:9d:61:99:21:1f:46:03:96:eb:8f:7d:56:f8:08:42:e3:
         ab:8d:01:84:87:32:b1:16:1b:b5:55:26:97:c8:f4:16:25:aa:
         c6:72:53:45:f8:b6:44:fe:e8:97:16:f8:2a:0a:e3:b1:2e:8e:
         86:8f:46:23:f4:91:eb:77:64:92:a4:36:0d:41:86:80:f6:78:
         6f:ea:36:fb:b3:95:7d:d3:fe:0a:02:85:b0:2d:71:6e:c3:09:
         68:4e:19:00:20:45:3a:25:f6:f5:a3:05:25:a8:dd:df:8e:b8:
         c4:80:d4:21:8b:ac:0c:a0:85:15:b7:5f:59:e7:94:25:58:df:
         63:66:90:61:e1:fb:93:c6:18:ce:b5:9f:b9:5d:1b:53:51:30:
         61:03:45:34:5b:8f:44:e1:a2:4f:17:a7:73:cf:98:4e:04:b5:
         91:ed:22:74:ef:9c:92:2a:cc:86:75:c5:76:85:d2:74:12:a7:
         90:e9:4b:1d:43:12:52:b5:99:af:84:91:ab:04:9f:9f:3f:29:
         49:13:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org