Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233352e3138322e302f32342d3234203d3e20323638313932.roa
File:                     34352e3233352e3138322e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          U2q1DxMhNrTBkT1XOvMyUvCPSHFUxn2ceIgh8sxDpuE=
Subject key identifier:   1D:90:7B:90:41:5C:79:E8:24:85:AE:AC:73:B1:1A:27:44:CA:45:52
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       07029CE97F9E5E09CDA2B9F3195708E24CD76061
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233352e3138322e302f32342d3234203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:34 +0000
ROA not before:           Mon 14 Aug 2023 15:53:34 +0000
ROA not after:            Mon 12 Aug 2024 15:58:34 +0000
asID:                     268192
IP address blocks:        45.235.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:02:9c:e9:7f:9e:5e:09:cd:a2:b9:f3:19:57:08:e2:4c:d7:60:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:34 2023 GMT
            Not After : Aug 12 15:58:34 2024 GMT
        Subject: CN=1D907B90415C79E82485AEAC73B11A2744CA4552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:7a:64:0d:e4:83:ed:2f:fd:36:15:9d:1b:
                    09:75:63:23:49:96:77:2b:dd:fd:1f:90:e7:77:bc:
                    1f:66:62:c7:be:5b:40:1b:5c:59:49:22:af:85:5c:
                    5f:21:20:cd:65:e0:54:25:ac:17:46:dd:45:77:23:
                    20:a5:6f:2f:c6:2f:ef:9d:4b:e8:55:49:ec:c1:90:
                    5e:27:21:36:3f:f8:37:25:e6:aa:b1:df:29:50:51:
                    22:ac:b8:9f:c7:7a:a0:12:d1:ac:61:75:62:77:7c:
                    4b:2b:62:5d:dc:21:14:66:6e:6f:fe:a0:99:f6:bb:
                    00:11:67:ef:3c:b5:47:57:95:27:25:f9:3d:58:1b:
                    d2:14:25:b9:e7:e7:64:30:d1:2c:72:4b:f8:96:ff:
                    74:18:8f:6e:b8:be:11:76:ca:a6:53:0c:ab:a0:b1:
                    40:d4:7f:67:b3:fd:31:8f:8e:4f:04:59:da:f9:15:
                    68:28:fd:7c:d7:27:32:f4:f8:5b:f7:f2:84:59:66:
                    04:a8:3d:c0:55:74:f4:7a:ef:21:3b:6f:f4:1c:da:
                    64:16:09:fe:69:e8:f2:91:f9:5a:8f:7f:4a:97:3b:
                    59:b7:ed:d4:ba:17:dc:36:7f:4c:34:30:8f:1e:22:
                    76:59:08:ac:d0:93:7e:1c:e0:75:ef:c7:c9:93:5e:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:90:7B:90:41:5C:79:E8:24:85:AE:AC:73:B1:1A:27:44:CA:45:52
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233352e3138322e302f32342d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:3a:b9:3e:f9:3a:fe:03:38:a4:cb:75:c1:c4:aa:82:fa:9a:
         75:9e:ae:b6:be:8b:42:aa:ec:aa:15:5c:e4:c7:84:26:53:d2:
         da:ca:2c:2a:ce:d7:2c:2e:37:b6:31:ff:52:39:d1:19:a6:c6:
         98:5a:3c:31:13:97:6c:f6:5d:0f:33:5c:60:cd:52:0b:b5:9c:
         b6:b8:3e:ab:3a:33:63:ea:de:07:b5:7d:82:6b:0d:1e:b9:f7:
         42:23:a4:af:5b:b6:04:e6:e9:02:33:aa:1c:0d:1a:dc:ef:c0:
         b2:19:2c:33:18:10:47:7a:83:d9:71:31:4e:ba:d8:ab:13:80:
         38:2c:45:f1:ca:1e:db:eb:13:db:73:a2:8c:10:36:60:9d:a2:
         08:26:dc:51:4f:c8:96:bc:80:48:cb:9d:65:3d:c9:5d:aa:8b:
         1c:d8:e6:cf:ad:02:e3:c2:c1:83:71:7e:50:f1:eb:93:a1:e5:
         f1:db:32:0e:f6:93:d2:b8:ad:2a:6b:e0:cd:aa:80:8f:01:ae:
         f3:ca:fc:62:99:19:0a:22:7f:84:09:07:c2:4f:63:fd:72:ea:
         fb:f2:3a:7a:b8:e8:2e:6a:77:5c:5d:84:62:ae:ce:65:b8:8c:
         3d:e4:4d:6d:c2:ff:01:06:21:b7:3c:e1:6a:e5:96:fd:ab:14:
         0a:0f:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org