Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32332e302f32342d3234203d3e20323638343337.roa
File:                     34352e3136302e32332e302f32342d3234203d3e20323638343337.roa (raw, json)
Hash identifier:          fe2su+Nd9xHTg2J77XvVR3FGvHGXQs02KlGDbgdALXo=
Subject key identifier:   31:65:29:B5:48:8B:7F:01:04:DC:99:17:1F:F3:FD:46:7E:74:AB:E1
Certificate issuer:       /CN=92014ED18F77F0D942921A5E834CE76EC5930713
Certificate serial:       685855DD941045F0C818802D68564F6E0B7A3F91
Authority key identifier: 92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32332e302f32342d3234203d3e20323638343337.roa
Signing time:             Tue 21 Mar 2023 13:00:00 +0000
ROA not before:           Tue 21 Mar 2023 12:55:00 +0000
ROA not after:            Tue 19 Mar 2024 13:00:00 +0000
asID:                     268437
IP address blocks:        45.160.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:58:55:dd:94:10:45:f0:c8:18:80:2d:68:56:4f:6e:0b:7a:3f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92014ED18F77F0D942921A5E834CE76EC5930713
        Validity
            Not Before: Mar 21 12:55:00 2023 GMT
            Not After : Mar 19 13:00:00 2024 GMT
        Subject: CN=316529B5488B7F0104DC99171FF3FD467E74ABE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:f5:e7:fc:5b:d8:f6:c2:6f:a4:0c:0e:5c:
                    36:51:e7:77:10:1a:33:1b:37:5f:80:9e:85:ef:a5:
                    c6:ec:d7:46:53:0a:54:54:9c:df:02:86:dc:12:af:
                    b7:9e:8f:70:26:65:80:e2:12:de:8f:36:7e:90:d9:
                    6d:64:ea:00:33:e5:6a:90:cb:c4:6e:a3:2e:bd:2a:
                    33:a5:d6:5e:b7:16:9d:85:c3:c8:3e:e4:d7:7e:a2:
                    b9:0b:58:cf:21:5b:f0:a8:09:3d:0a:d9:4e:db:b8:
                    d4:e7:18:36:86:2a:76:de:dd:20:31:3c:91:6c:d4:
                    04:c3:7e:4b:9a:fa:ba:4f:98:eb:0c:c4:d9:51:44:
                    76:69:d6:9a:17:74:a0:7e:4f:83:e1:27:89:31:ec:
                    65:11:b1:2d:d8:2a:a3:3d:3c:e6:ff:e8:2d:e3:00:
                    8e:49:5a:68:91:df:11:ec:26:b2:6b:6e:6e:b9:ef:
                    d9:7d:46:0b:fe:da:8a:50:30:3c:06:85:c8:a4:d8:
                    f8:41:ad:23:6d:6b:ae:1b:62:1b:31:4a:1c:d6:49:
                    b1:a5:76:8a:7b:f8:c8:aa:4c:ac:eb:59:db:45:db:
                    00:87:c5:62:20:0c:48:60:51:12:22:aa:15:78:e8:
                    2c:70:54:24:1f:10:bb:84:d1:54:1a:50:e0:e0:e3:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:65:29:B5:48:8B:7F:01:04:DC:99:17:1F:F3:FD:46:7E:74:AB:E1
            X509v3 Authority Key Identifier:
                keyid:92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/92014ED18F77F0D942921A5E834CE76EC5930713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32332e302f32342d3234203d3e20323638343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:3f:c7:51:98:55:28:9f:33:9c:52:c7:30:a5:5c:41:4c:
         fa:58:50:cd:fb:9d:f4:a1:97:e4:27:a5:30:99:b1:f1:f1:67:
         be:fc:12:81:7b:ed:98:0e:3f:73:81:0e:0f:59:c5:02:19:f4:
         40:a2:a9:7e:41:61:64:63:cb:61:84:41:9d:44:ff:aa:78:2f:
         00:19:24:32:3b:2d:c2:3c:ee:29:a3:4f:d1:7d:4c:ee:1a:82:
         e6:af:64:18:9d:e5:20:80:c6:aa:bc:fc:e8:0b:ac:67:e4:5c:
         f7:ea:62:97:42:97:04:b4:3a:32:3b:b3:6a:ae:44:05:97:a4:
         ef:77:b0:75:57:66:c8:56:bd:fb:e3:d3:a6:82:fd:7f:5f:43:
         a5:71:f9:8b:65:38:ff:3a:74:61:a9:0c:fe:cc:dc:c2:f1:3b:
         1e:1e:25:f6:d9:c8:c3:13:e6:89:1f:a6:ac:5b:67:ce:1d:2b:
         90:bf:67:8c:1b:5e:96:e6:a6:c2:9d:00:9b:61:61:5e:ed:54:
         d8:2d:26:25:9c:12:93:68:ec:84:8c:71:3b:e2:3b:ad:94:65:
         b2:c7:16:ad:7c:cb:f6:be:07:4d:fe:de:a9:49:e4:d1:dc:bc:
         c5:89:35:6e:0a:d2:73:a2:8c:c4:9c:fe:e3:85:ea:b1:1a:80:
         9f:ba:13:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org