Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3232203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32322d3232203d3e20323639313735.roa (raw, json)
Hash identifier:          c2dxdF52aGkob4QoLc6szKEGLDGOcgHrRQ/171qguaM=
Subject key identifier:   1D:EF:33:A7:EB:84:5B:9C:ED:CB:B1:CF:71:F6:AB:B1:08:7B:33:AA
Certificate issuer:       /CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
Certificate serial:       7831B3C82EFA02E32B6D40CD2D258246C4BBA40F
Authority key identifier: E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3232203d3e20323639313735.roa
Signing time:             Mon 26 Feb 2024 14:57:46 +0000
ROA not before:           Mon 26 Feb 2024 14:52:46 +0000
ROA not after:            Mon 24 Feb 2025 14:57:46 +0000
asID:                     269175
IP address blocks:        45.181.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:31:b3:c8:2e:fa:02:e3:2b:6d:40:cd:2d:25:82:46:c4:bb:a4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
        Validity
            Not Before: Feb 26 14:52:46 2024 GMT
            Not After : Feb 24 14:57:46 2025 GMT
        Subject: CN=1DEF33A7EB845B9CEDCBB1CF71F6ABB1087B33AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7d:c9:a1:8e:1a:6c:b2:4e:bf:9a:4f:2e:c7:
                    6e:dc:2c:dd:c9:87:ed:b3:b2:0c:05:e8:23:43:f8:
                    a7:87:5a:74:3e:1f:1d:cd:1c:d4:f5:68:89:7b:9e:
                    e4:98:6e:53:4f:76:c2:5c:2b:4f:42:08:83:c5:17:
                    37:12:70:04:eb:62:4c:8b:1c:c1:e5:35:fc:a1:61:
                    c3:c8:cf:5e:fb:3e:85:76:a1:df:36:ae:13:6c:9a:
                    27:8d:7b:67:f9:fc:ba:66:70:ed:96:3a:2f:75:ad:
                    af:c7:2a:b9:94:29:7d:99:5f:a5:71:95:23:89:36:
                    fd:90:4b:5a:1c:8c:fe:80:c1:32:8f:39:dd:3f:af:
                    af:fc:68:8d:34:a6:15:cb:8a:4b:a6:6c:d8:66:bc:
                    0d:dd:63:d9:dd:8a:5d:39:af:cb:bf:ec:60:67:b4:
                    0f:74:9b:d0:79:b4:09:c7:08:05:46:83:bc:a7:70:
                    d1:ac:1c:b9:b2:05:e2:d1:91:ca:68:ca:48:2a:63:
                    8a:81:7c:08:26:33:1c:c9:5e:23:19:ef:6e:50:cf:
                    91:ee:0f:4e:3c:ca:64:b1:77:20:0c:60:11:a3:7e:
                    47:9f:70:71:d0:c8:03:56:78:bc:de:15:bc:de:c1:
                    4d:8f:8a:f0:19:35:c9:41:39:6b:eb:0b:15:a1:69:
                    23:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EF:33:A7:EB:84:5B:9C:ED:CB:B1:CF:71:F6:AB:B1:08:7B:33:AA
            X509v3 Authority Key Identifier:
                keyid:E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3232203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:d0:a3:fb:2b:e8:80:7d:73:13:51:40:1b:b9:d4:5b:f1:d4:
         90:b1:21:8d:04:03:b7:46:cd:3f:07:01:60:af:e6:72:93:7c:
         20:f4:3f:a3:a5:14:5c:b1:96:64:20:b5:46:ac:4f:17:3b:67:
         1f:e3:03:63:0d:ef:43:b2:75:58:7b:b4:44:70:63:90:3b:6c:
         a2:d8:23:4f:a7:19:d5:4e:b9:c6:b6:89:a8:49:21:ce:a7:d2:
         39:7c:a3:02:7c:2a:dc:4a:39:37:4a:4e:77:1c:79:94:19:b8:
         6f:6c:84:ca:6c:0a:cb:ec:5e:3b:da:a3:f2:9f:8a:eb:51:29:
         a2:c8:7a:96:1f:a1:b3:ea:75:a1:d7:bd:67:35:57:0d:c8:73:
         54:77:20:d3:2d:39:71:e3:e5:42:2b:fa:0d:ce:09:91:f1:63:
         83:21:b3:20:65:71:f7:be:c4:08:16:3d:44:44:33:75:58:0c:
         59:68:0a:65:ac:ef:c7:d5:49:70:f9:fe:de:ad:55:8e:03:14:
         31:06:51:e7:73:60:c9:bb:0a:c0:c4:2b:8f:a0:cb:cd:c8:38:
         56:1c:e5:64:96:16:80:c4:9b:9f:05:01:fb:25:b2:9b:87:8a:
         a6:87:60:c4:a6:ab:75:1f:b0:45:ab:91:6b:2a:f4:5c:85:8e:
         f4:1f:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org