Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131332e302f32342d3234203d3e20323639313139.roa
File:                     34352e3137392e3131332e302f32342d3234203d3e20323639313139.roa (raw, json)
Hash identifier:          DBuN/0adNy+Q9s/J17f1jPhvdaH/ZE1oaQT149l+HX0=
Subject key identifier:   24:53:E4:6B:37:EC:CE:F5:30:FD:B5:9E:A7:15:2C:E7:59:5C:67:30
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       6734F45C3A2A29CF1CF8E79336858CE406484170
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131332e302f32342d3234203d3e20323639313139.roa
Signing time:             Fri 22 Mar 2024 17:00:00 +0000
ROA not before:           Fri 22 Mar 2024 16:55:00 +0000
ROA not after:            Sat 22 Mar 2025 17:00:00 +0000
asID:                     269119
IP address blocks:        45.179.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:34:f4:5c:3a:2a:29:cf:1c:f8:e7:93:36:85:8c:e4:06:48:41:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: Mar 22 16:55:00 2024 GMT
            Not After : Mar 22 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:f6:19:b5:f5:28:82:1d:41:d1:d3:da:86:
                    80:a7:17:e1:6a:34:eb:3f:7a:7f:c8:69:06:a6:9d:
                    04:db:6a:47:41:5f:6f:ef:d3:6a:d1:ef:ff:dd:40:
                    a6:a2:04:ec:56:8c:f5:43:1b:89:af:72:4e:05:45:
                    7c:74:05:5c:77:d4:26:ec:a4:42:26:99:1d:33:22:
                    0d:5c:68:4f:ac:5c:28:fc:b3:44:95:e7:93:4c:15:
                    84:4d:b8:46:4e:95:a1:ad:fd:06:66:b7:31:49:ea:
                    71:29:38:1c:fd:db:b2:3e:00:4e:d9:46:e1:85:85:
                    eb:57:62:65:9f:f8:5d:3f:b4:54:cf:8c:71:a8:81:
                    fb:e4:bb:95:cc:c3:89:b6:2f:48:50:04:1e:09:54:
                    6b:ac:39:75:bd:16:5a:67:9d:7f:b2:c6:21:cd:92:
                    20:15:df:01:cf:06:fb:a6:be:6c:89:ff:ad:83:0b:
                    03:f3:4b:80:06:ee:c1:9c:c9:64:5b:2d:37:9d:46:
                    cb:7e:21:22:af:59:85:48:4f:25:f0:39:f2:38:f4:
                    ec:c8:38:d7:2a:ec:dc:46:08:a5:e0:a3:62:64:25:
                    b8:1e:17:cc:93:12:fe:66:1e:4b:27:39:01:9c:f0:
                    58:d8:90:14:32:dd:f9:e1:fb:1b:bc:57:da:b5:3d:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:53:E4:6B:37:EC:CE:F5:30:FD:B5:9E:A7:15:2C:E7:59:5C:67:30
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131332e302f32342d3234203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:00:76:c2:ac:48:0c:42:76:bc:a5:b9:76:8a:6e:51:f2:db:
         5f:7c:c5:ec:3a:cb:96:0e:98:54:33:cf:f6:8b:f8:bb:15:35:
         63:f2:24:4e:19:60:3e:78:f7:09:e2:ad:33:04:eb:34:75:35:
         59:ba:c1:87:54:3e:d9:8a:03:78:a8:7b:ed:1d:03:3c:28:46:
         bc:63:34:62:33:9a:c7:bf:e9:22:35:8d:09:24:e8:aa:4f:6b:
         a9:bd:3c:3f:73:8d:02:d0:1a:65:22:0a:99:c8:5b:e9:ca:c6:
         23:9d:31:92:1f:47:ff:4e:96:78:35:95:01:ed:4a:cd:ef:b3:
         17:b1:ae:24:e7:68:a3:36:f0:a7:fe:2f:07:7a:6b:9c:f6:dd:
         d5:63:80:c3:ec:4d:3b:bc:f4:2c:74:ce:df:f5:da:03:4e:5d:
         0b:5f:68:f3:38:7f:46:13:12:98:b6:f7:f4:cf:c4:11:82:68:
         5c:95:8a:98:b3:20:22:91:ff:2a:5a:75:d3:53:8d:fd:ed:fa:
         b2:0b:18:d4:01:7b:31:c3:2e:69:93:19:13:c2:46:3f:f8:5b:
         e0:ca:66:ec:fb:33:28:7a:07:12:3b:3a:5a:6a:3f:ac:0c:2f:
         b8:95:9c:76:64:8e:92:b8:39:f6:e4:05:f2:46:9e:15:8c:64:
         9b:0b:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org