Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33382e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          rAw3j839MnqjzmozgEX8sBrpT9/Pi47q6MbatpXcrnk=
Subject key identifier:   33:48:4F:36:B5:E5:03:20:FF:B4:A2:BD:06:D7:7D:17:A9:F8:FF:54
Certificate issuer:       /CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
Certificate serial:       1620E1E65AEA340D709F4DDBF9EF941D5009A358
Authority key identifier: D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
Signing time:             Wed 02 Aug 2023 01:06:00 +0000
ROA not before:           Wed 02 Aug 2023 01:01:00 +0000
ROA not after:            Wed 31 Jul 2024 01:06:00 +0000
asID:                     268790
IP address blocks:        45.173.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:20:e1:e6:5a:ea:34:0d:70:9f:4d:db:f9:ef:94:1d:50:09:a3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
        Validity
            Not Before: Aug  2 01:01:00 2023 GMT
            Not After : Jul 31 01:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:ac:c9:49:a7:79:38:c0:b6:b8:63:47:7f:
                    72:ad:a9:22:66:be:1a:62:e2:23:b4:fc:24:75:d7:
                    a1:4a:2e:dc:06:df:ab:8a:83:85:fe:ee:d9:35:cb:
                    92:70:ce:7b:21:bd:2e:e4:14:32:c8:c8:e8:e8:e9:
                    2e:ca:5a:00:bc:51:00:4f:d3:ba:d8:51:16:e4:50:
                    8e:29:c6:98:47:a1:d3:5e:f7:cf:26:75:38:b5:58:
                    86:03:76:41:75:c4:41:53:d1:4d:f1:11:59:2a:8f:
                    47:a1:49:a3:e5:20:91:10:40:be:46:e6:7c:ba:e9:
                    17:4f:51:c0:37:e5:af:20:26:40:91:10:cd:3b:f8:
                    93:58:24:60:45:ef:3b:cf:a5:d7:f0:0b:3d:df:1a:
                    42:66:70:da:19:2c:e1:90:f2:8a:ae:0e:5e:f8:1e:
                    8f:fa:ad:31:c7:34:44:41:6b:07:2b:30:f8:36:cc:
                    8a:af:c1:79:0d:ab:9a:0f:fe:97:79:40:04:1f:18:
                    3a:92:48:8c:d8:9d:47:12:23:a1:21:bd:2a:8a:ec:
                    b1:01:62:49:fb:77:3c:9f:bd:94:ec:f6:2c:9e:2a:
                    47:34:de:6e:43:7c:b9:b9:dc:bf:29:46:1d:dc:44:
                    63:b3:de:1a:e5:15:b9:07:67:92:85:52:3e:97:23:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:4F:36:B5:E5:03:20:FF:B4:A2:BD:06:D7:7D:17:A9:F8:FF:54
            X509v3 Authority Key Identifier:
                keyid:D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:47:cb:d6:01:17:31:73:1f:6e:e1:7a:72:2c:6d:09:b1:
         76:48:33:ad:4c:98:d5:a2:b7:02:a2:8f:30:22:b8:c3:2b:91:
         a4:cb:7b:b5:0f:e0:66:74:6d:49:4e:79:38:b2:03:45:d8:09:
         3c:cc:d6:43:9a:4b:40:bc:38:5e:8d:a0:a0:4d:c9:88:8e:e8:
         81:cf:1f:40:92:1d:c8:81:aa:37:84:f7:82:a6:8c:9b:25:36:
         0e:22:e3:9a:d6:84:4c:f8:9a:e9:fc:5f:38:14:f4:d2:16:9d:
         d6:51:ef:7b:08:f1:5a:1a:e3:84:01:5b:5d:18:15:10:f0:01:
         07:f5:dd:9a:0b:e2:18:45:e6:21:f9:8c:6f:08:c9:47:b1:8b:
         54:47:19:99:c4:5e:77:83:c7:3d:79:94:10:c3:10:3f:ce:41:
         8c:7f:dd:fa:77:2b:55:f1:be:d1:f4:d9:25:10:eb:30:b0:c5:
         8d:79:e9:3b:d8:34:3d:5e:98:10:8b:82:5a:f8:34:75:f0:2c:
         9c:76:29:5b:1d:fc:51:28:80:a6:de:b3:2a:2c:1b:7d:fd:04:
         9c:bc:91:c7:8f:41:56:00:e9:45:9b:05:c3:e2:33:7d:a2:2a:
         88:d6:13:e5:f1:cb:af:70:35:e1:63:b2:df:7b:d9:47:88:ce:
         3e:7f:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org