Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32332d3233203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32332d3233203d3e20323639313735.roa (raw, json)
Hash identifier:          YXHE8HKBS/bwetApiuNhybc+CDWBNcWVDlXQiLFhjuU=
Subject key identifier:   0B:D7:D8:D7:29:93:9E:63:D7:3E:13:D4:98:22:BD:F2:5A:34:6E:C8
Certificate issuer:       /CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
Certificate serial:       2B60B73CC790A6F077899E742D8C1AE3FD62321B
Authority key identifier: E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32332d3233203d3e20323639313735.roa
Signing time:             Mon 26 Feb 2024 14:57:52 +0000
ROA not before:           Mon 26 Feb 2024 14:52:52 +0000
ROA not after:            Mon 24 Feb 2025 14:57:52 +0000
asID:                     269175
IP address blocks:        45.181.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:60:b7:3c:c7:90:a6:f0:77:89:9e:74:2d:8c:1a:e3:fd:62:32:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
        Validity
            Not Before: Feb 26 14:52:52 2024 GMT
            Not After : Feb 24 14:57:52 2025 GMT
        Subject: CN=0BD7D8D729939E63D73E13D49822BDF25A346EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:31:b2:27:f0:db:ef:49:7c:73:85:d0:f8:
                    db:ed:56:3a:41:de:3f:72:80:bb:6a:04:57:81:07:
                    02:39:1d:74:da:25:c9:be:35:40:02:92:33:aa:cc:
                    cc:78:ff:64:19:13:a9:5b:e1:94:cc:8b:cd:14:6e:
                    dc:3d:b4:39:d1:d9:3e:30:07:ea:5b:df:7e:43:bf:
                    40:2e:89:82:ad:99:bb:f5:b4:60:0c:33:e4:4c:a6:
                    67:a4:b0:e7:e3:62:94:32:92:a0:50:d8:12:27:7e:
                    d2:b4:3b:39:b0:f1:72:ad:aa:c3:66:50:60:2d:37:
                    23:b7:5a:c3:bb:f1:9e:d2:c1:ef:a4:5b:26:2f:43:
                    2e:d1:fc:80:4d:c0:dd:a8:09:2a:32:1c:db:4a:51:
                    05:eb:46:2d:d9:98:7e:62:84:bf:14:38:17:94:d4:
                    47:d9:25:10:28:f5:78:67:6f:f6:c5:c1:04:68:66:
                    2b:a2:ea:ec:4e:4b:fb:ed:0e:cb:96:71:b7:d8:7b:
                    dd:a8:bc:0c:fe:f9:1a:5b:e1:66:78:d2:26:7f:db:
                    6d:b0:0f:92:32:3f:27:96:96:74:31:d2:35:d2:4c:
                    75:39:eb:ef:9c:b2:b0:17:b5:13:54:f7:1e:37:7e:
                    0a:1d:c5:18:17:d4:88:86:0c:ee:13:aa:bf:b5:0b:
                    33:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D7:D8:D7:29:93:9E:63:D7:3E:13:D4:98:22:BD:F2:5A:34:6E:C8
            X509v3 Authority Key Identifier:
                keyid:E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32332d3233203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:12:c6:dc:2e:d2:b5:99:c8:3c:97:25:7d:a5:ea:92:88:c4:
         99:82:8a:4a:3c:bf:9f:92:f7:5f:9f:91:1e:39:b0:70:e9:ac:
         16:40:b7:ad:26:05:ad:97:a5:cf:8e:db:cd:e6:52:ed:36:0a:
         7f:dd:72:ec:71:17:a1:2d:66:b7:bc:c6:66:59:86:e3:bd:fc:
         22:25:6d:00:9a:59:7c:a1:51:58:b9:e0:17:d4:48:60:7a:cb:
         5a:32:a2:de:95:13:17:fa:8d:f0:4e:10:91:55:e8:6e:cb:30:
         ef:43:bb:23:db:c0:04:7e:bb:e2:1c:3d:02:d2:34:80:e9:30:
         ed:85:18:27:fd:32:0d:e3:a2:4a:1a:6b:09:c2:f4:ee:e8:70:
         e2:71:0c:32:c4:d1:41:60:1d:5d:94:cd:23:f0:4c:92:96:c6:
         bb:23:76:b0:7a:f6:1e:39:f9:64:1c:44:0d:63:7f:cf:fb:22:
         e8:6b:ea:1c:bb:eb:d6:2e:30:02:e6:c6:c6:ef:99:0c:f2:5b:
         55:e8:3a:29:d3:e4:a2:b9:b8:8e:aa:59:8d:3b:41:ca:a1:bc:
         75:95:d1:7d:51:b4:02:c1:21:fe:a6:e9:e8:a1:20:52:8c:3c:
         9f:11:e6:f2:46:66:79:17:97:0b:0a:5a:b5:8f:a0:d0:50:f9:
         9d:5e:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org