Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
File:                     34352e3137332e37382e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier:          3PPiLvMasYva2LUYV+AAVHdu5oPf/VqvwNUz8JGGfS8=
Subject key identifier:   3B:5F:F5:20:62:8F:99:22:83:84:F1:3C:90:55:B7:B9:89:D1:73:55
Certificate issuer:       /CN=314CC58029D80C55F7FCC7D6D34604096BE000E9
Certificate serial:       021D30FB30B4588706B7FC650C6897BA4E462EB0
Authority key identifier: 31:4C:C5:80:29:D8:0C:55:F7:FC:C7:D6:D3:46:04:09:6B:E0:00:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
Signing time:             Fri 27 Oct 2023 13:08:48 +0000
ROA not before:           Fri 27 Oct 2023 13:03:48 +0000
ROA not after:            Fri 25 Oct 2024 13:08:48 +0000
asID:                     268801
IP address blocks:        45.173.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1d:30:fb:30:b4:58:87:06:b7:fc:65:0c:68:97:ba:4e:46:2e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314CC58029D80C55F7FCC7D6D34604096BE000E9
        Validity
            Not Before: Oct 27 13:03:48 2023 GMT
            Not After : Oct 25 13:08:48 2024 GMT
        Subject: CN=3B5FF520628F99228384F13C9055B7B989D17355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:c0:4b:36:38:9b:91:ae:c2:bc:9e:b3:cb:
                    02:29:b0:5d:eb:93:14:cb:69:8a:5b:8e:bf:1c:dc:
                    da:96:5b:99:11:d4:70:8d:3d:08:16:64:d3:bc:98:
                    f3:7f:18:c4:bb:df:3e:cc:b4:78:48:a2:17:d8:62:
                    bb:7e:2b:e8:5c:f0:67:74:08:e4:5f:99:d4:5b:8f:
                    29:1f:ea:b6:f7:86:37:9a:94:25:15:f1:1a:b7:39:
                    71:e4:13:71:8e:02:8b:cb:69:33:97:3b:af:19:ee:
                    4f:bd:0b:21:1b:f8:76:bd:93:a1:eb:db:73:f6:7c:
                    fc:13:15:a7:39:51:b0:20:71:94:aa:a0:32:e9:9d:
                    9b:89:e2:cb:0f:20:b1:68:f1:38:e0:33:db:22:8b:
                    d0:ee:6e:e5:26:f8:1a:b0:93:62:a3:17:aa:29:52:
                    9d:8c:84:7a:3a:ee:22:b7:76:d0:86:0e:46:2c:76:
                    fe:c0:53:b0:1b:44:73:51:0a:39:12:36:a9:83:77:
                    a3:73:11:84:89:2c:1c:fe:72:65:3c:ac:0a:4c:e2:
                    b7:7a:14:56:d2:cc:e3:c1:41:60:57:af:f3:13:50:
                    30:47:57:a0:47:c7:82:98:d6:05:0b:17:4d:a3:25:
                    08:12:3c:8d:12:74:db:ee:c0:93:93:38:2d:ac:51:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5F:F5:20:62:8F:99:22:83:84:F1:3C:90:55:B7:B9:89:D1:73:55
            X509v3 Authority Key Identifier:
                keyid:31:4C:C5:80:29:D8:0C:55:F7:FC:C7:D6:D3:46:04:09:6B:E0:00:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:95:ef:64:5f:43:89:84:41:fd:c0:2b:98:5c:e7:8a:cf:4d:
         66:08:ff:1c:72:8c:55:e1:be:88:51:e2:47:1e:85:09:fd:73:
         38:37:b0:c7:b9:af:bf:a1:a1:ed:ec:dc:9a:6e:14:fb:ee:eb:
         72:5b:88:f4:34:dc:13:0f:16:80:c6:ee:d1:0d:3b:ac:d6:d0:
         87:76:70:c1:c3:43:a7:2a:cd:d4:b6:69:c0:ad:15:6a:64:da:
         a5:f1:26:9e:60:bd:3f:9c:92:40:a9:7e:ab:4b:2a:b6:a8:7b:
         5c:ce:bf:e1:c6:53:4b:bc:e4:84:fc:e1:f8:04:6d:e9:62:5a:
         a3:c4:0c:f6:b9:91:84:b5:fb:50:55:12:8e:0d:19:e1:ef:8b:
         bb:1b:c4:c2:58:d3:0a:76:6a:fc:a4:e4:09:4a:af:3a:9c:84:
         84:27:51:14:78:e2:64:b6:80:bd:53:bb:19:8c:e9:fb:c3:b9:
         8c:07:8a:61:2d:ba:02:9f:e5:3a:66:48:de:cc:10:c3:12:27:
         b1:a5:c2:1c:ea:7f:9d:c8:b4:0e:19:23:8f:49:be:c9:34:40:
         75:28:a5:04:de:d7:58:4f:a4:7f:c2:bb:1a:4f:14:cc:61:01:
         3b:c4:67:3a:cf:87:f3:a9:94:9c:84:c5:8f:c7:d1:95:d4:6e:
         83:1b:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org