Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33392e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33392e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          zkNIkLL3xJXYgrR42iGUQvW7hNZhExxWtm9ACPZ80Y8=
Subject key identifier:   D6:DB:A5:D8:44:8B:DD:97:84:39:1D:50:03:E7:5B:1B:AD:FA:B6:31
Certificate issuer:       /CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
Certificate serial:       3D9D3E621966F927BF7DB324C053DE3EF77AF09E
Authority key identifier: D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33392e302f32342d3234203d3e20323638373930.roa
Signing time:             Wed 02 Aug 2023 01:06:01 +0000
ROA not before:           Wed 02 Aug 2023 01:01:01 +0000
ROA not after:            Wed 31 Jul 2024 01:06:01 +0000
asID:                     268790
IP address blocks:        45.173.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9d:3e:62:19:66:f9:27:bf:7d:b3:24:c0:53:de:3e:f7:7a:f0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
        Validity
            Not Before: Aug  2 01:01:01 2023 GMT
            Not After : Jul 31 01:06:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:75:15:0e:22:7e:90:e8:7d:92:00:73:18:
                    d0:3c:db:e6:ae:e9:bc:61:07:01:46:c3:70:d8:45:
                    2a:9f:34:31:59:b3:e3:37:84:83:bb:0b:78:08:65:
                    e6:da:28:95:09:ac:12:89:14:cd:f6:12:ac:de:20:
                    03:1a:61:8c:90:08:aa:e7:46:6f:ba:77:39:cd:70:
                    45:0c:3e:9b:d9:f7:2f:29:fe:3b:d9:0d:ed:7d:3c:
                    e3:eb:4a:21:af:3a:c7:fd:e6:a5:b0:73:7f:34:3f:
                    d2:a2:aa:66:19:27:e9:4f:06:87:b5:51:cb:49:72:
                    c3:3f:75:98:58:e1:79:d4:03:de:ae:6d:11:5d:31:
                    00:cc:94:66:53:74:f8:fa:ac:42:a9:b3:42:cf:75:
                    c7:10:de:43:7a:4c:33:55:77:66:9a:d9:82:9c:b6:
                    c0:96:ee:56:da:4e:a8:ee:b4:b7:13:6f:d9:60:89:
                    b2:7d:67:d7:f5:b3:8e:c3:c0:02:fa:0c:60:b2:f3:
                    80:bd:4e:e8:7c:18:4c:dc:49:7a:ed:63:3e:4c:f1:
                    aa:78:73:88:a1:9b:25:79:7f:26:3f:9e:48:ee:ab:
                    9e:58:80:3b:18:1c:45:5c:82:35:8d:23:41:31:6f:
                    ab:15:39:b1:57:66:e3:1f:66:fb:33:79:c9:b6:60:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DB:A5:D8:44:8B:DD:97:84:39:1D:50:03:E7:5B:1B:AD:FA:B6:31
            X509v3 Authority Key Identifier:
                keyid:D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33392e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:fa:65:28:e3:76:75:ee:53:63:ae:2a:f2:98:a9:94:a9:88:
         7a:d8:f6:c9:85:ef:2d:51:0a:fd:47:9e:0c:24:41:d4:20:8e:
         64:c5:17:f3:e7:32:51:47:40:15:ce:a4:74:39:81:a0:88:4b:
         c4:9c:09:cd:24:36:d1:33:9e:ce:e1:1a:39:42:8e:8a:b4:55:
         d3:75:84:bc:19:89:90:1c:03:fe:13:dc:70:ae:e2:bf:82:65:
         7c:d0:5a:f9:27:d0:6b:c4:f8:fc:36:1f:0e:04:e3:15:49:e6:
         88:87:64:ad:6f:e7:24:82:2f:b1:68:d1:2c:63:f1:d5:3f:87:
         e8:7d:1a:ef:4f:f9:a1:e2:7e:5d:be:f8:79:4d:08:44:72:29:
         4c:67:a0:ad:b6:be:af:73:b1:40:9b:39:8d:9a:fd:06:1a:4c:
         21:f4:d9:91:c8:de:75:06:76:13:0c:dc:ad:b7:e8:09:4b:4d:
         80:0e:32:43:97:c5:cb:6a:c9:3d:52:cb:00:e5:75:f6:e4:04:
         b6:b5:db:0b:9f:d2:94:dd:6c:fe:0d:8b:65:58:7a:ca:72:a4:
         8f:c3:da:c4:aa:e6:83:b5:99:01:3f:f9:5f:07:cf:a9:5a:38:
         f6:c4:60:bc:9e:b2:4b:4c:b6:eb:a2:09:62:89:2e:b0:b3:46:
         cc:05:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org