Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131342e302f32332d3233203d3e20323639313139.roa
File:                     34352e3137392e3131342e302f32332d3233203d3e20323639313139.roa (raw, json)
Hash identifier:          kMOyo4RSq80Z2ErB/EJvKFyD3QND+M9LArcMuLbkErs=
Subject key identifier:   68:F2:12:55:C2:7C:43:98:35:67:86:55:F7:67:3F:0B:A5:5F:2E:38
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       237BEB831357C616D23A553E85CA2C7F775E4579
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131342e302f32332d3233203d3e20323639313139.roa
Signing time:             Fri 22 Mar 2024 17:00:00 +0000
ROA not before:           Fri 22 Mar 2024 16:55:00 +0000
ROA not after:            Sat 22 Mar 2025 17:00:00 +0000
asID:                     269119
IP address blocks:        45.179.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7b:eb:83:13:57:c6:16:d2:3a:55:3e:85:ca:2c:7f:77:5e:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: Mar 22 16:55:00 2024 GMT
            Not After : Mar 22 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1a:33:0a:1c:bb:ef:1d:7f:12:ae:64:ee:b6:
                    d8:1b:33:9b:c1:c2:3e:37:e0:33:85:ea:0f:8e:24:
                    c6:c1:23:21:98:97:ea:75:3b:aa:30:c1:e9:4b:65:
                    16:5f:cd:6b:85:b7:56:4c:0c:6b:07:31:bb:ba:fe:
                    80:b8:28:84:8c:79:30:34:9f:22:4c:a9:93:e0:d2:
                    aa:21:20:21:29:b2:e3:19:f3:6b:79:75:40:d9:76:
                    93:68:1f:4d:5d:28:a0:0a:60:f8:cf:df:50:3b:e8:
                    88:3a:51:6c:36:fe:af:67:e4:f9:f6:e1:45:ba:52:
                    8c:99:5f:e9:f9:ad:55:66:b1:df:86:ec:02:f3:5a:
                    e3:8b:b7:15:10:74:e4:35:9f:d3:d5:4c:fd:38:05:
                    43:02:1a:7f:87:1a:90:c4:c4:aa:97:8e:92:85:e7:
                    dd:47:9a:3f:e4:55:77:60:ba:fe:e7:ff:5f:1c:89:
                    49:ec:51:3e:08:49:5c:0e:de:a2:35:1a:27:99:95:
                    15:38:23:19:86:40:82:5d:85:84:16:19:19:51:4a:
                    93:7c:8d:f3:1e:74:2d:ca:1b:35:49:0e:a2:e8:7b:
                    99:6b:e7:8f:53:cc:4b:79:9a:d0:74:f0:a4:fb:04:
                    75:63:4b:d0:76:80:9f:ef:94:64:09:3e:7d:0f:17:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F2:12:55:C2:7C:43:98:35:67:86:55:F7:67:3F:0B:A5:5F:2E:38
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131342e302f32332d3233203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:51:f2:f7:1d:c1:8f:4b:05:15:7d:15:f6:b3:0f:e0:04:88:
         59:2e:0f:e6:b6:a3:50:d2:0c:4d:1f:8a:83:12:54:9e:11:e0:
         5b:ea:75:b5:ee:26:b1:21:ec:40:ed:f7:f6:11:85:1a:c3:ed:
         89:14:4e:c8:95:95:ff:cd:c7:af:6d:e9:b6:61:5f:51:c3:17:
         b6:1a:1c:2e:51:ae:2a:e0:fb:c2:99:72:23:7d:2a:ee:bc:b3:
         c5:44:f0:bf:38:c2:20:b9:eb:ed:b1:8e:ed:47:43:ef:e8:28:
         fa:9c:d7:97:3e:55:06:fe:9c:85:6b:45:d2:cf:52:e8:b9:4e:
         fd:21:ad:96:67:14:25:04:82:0a:e9:61:79:ce:37:16:f0:a0:
         fc:3f:3c:9d:d8:2c:b0:af:49:c9:52:e0:e7:31:9c:1e:af:d6:
         88:a9:ba:e7:93:c1:9e:3f:4e:4f:78:b0:fb:ab:83:4c:13:42:
         11:a9:ff:71:c3:cb:5c:68:bc:5e:cb:bc:7b:69:0b:90:17:46:
         bb:a6:5a:12:f7:b0:ac:fb:28:c3:01:6a:4e:2f:18:00:1e:b2:
         4b:35:fd:6e:e3:5e:62:4c:3a:a4:0c:71:77:6b:1e:e7:56:e5:
         aa:24:01:18:2c:fe:ae:42:63:c5:7a:f7:74:70:ae:5c:8f:80:
         d9:da:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org