Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31302e302f32342d3234203d3e20323639353633.roa
File:                     34352e3138392e31302e302f32342d3234203d3e20323639353633.roa (raw, json)
Hash identifier:          xVztmFUnQz1gth4uYF9CwYds6fH39fzy6b3DLx+DLGk=
Subject key identifier:   67:5B:45:67:09:FC:41:96:60:C7:28:99:96:5B:57:5E:45:98:6B:C1
Certificate issuer:       /CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Certificate serial:       4F18E91A9DFF95DD53DCE2F23276E3572BD562EC
Authority key identifier: 9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31302e302f32342d3234203d3e20323639353633.roa
Signing time:             Tue 02 Jan 2024 16:29:45 +0000
ROA not before:           Tue 02 Jan 2024 16:24:45 +0000
ROA not after:            Tue 31 Dec 2024 16:29:45 +0000
asID:                     269563
IP address blocks:        45.189.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:18:e9:1a:9d:ff:95:dd:53:dc:e2:f2:32:76:e3:57:2b:d5:62:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
        Validity
            Not Before: Jan  2 16:24:45 2024 GMT
            Not After : Dec 31 16:29:45 2024 GMT
        Subject: CN=675B456709FC419660C72899965B575E45986BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:f8:16:30:6a:34:32:a8:ba:df:1b:47:7c:
                    a5:de:fe:e8:2f:e7:0f:26:05:82:15:1d:dc:8e:67:
                    fe:a2:a6:0b:a5:b3:6a:c5:f6:01:8a:74:8b:22:c1:
                    0d:09:8e:eb:22:bf:e7:fc:00:81:e7:6e:59:01:c1:
                    b5:d8:d6:8d:6f:da:15:59:59:8b:16:8c:92:cd:c5:
                    4f:30:4f:85:f7:f0:14:21:90:83:00:cf:29:48:8c:
                    1a:2f:6d:f0:b6:b3:a3:43:54:d8:72:d5:64:5d:34:
                    b0:ec:52:51:93:39:c2:52:ff:fb:a2:a5:b8:16:b9:
                    6a:77:4a:b4:29:8c:f0:4e:78:ae:59:4c:ef:0f:1a:
                    ea:2d:3e:d3:08:1a:57:f0:fd:b0:90:e8:ed:7a:2b:
                    70:65:07:45:a6:46:97:35:eb:bf:4b:ac:0b:02:e2:
                    94:7b:1b:14:51:0b:a5:12:39:a5:b6:59:08:34:d9:
                    67:a5:8d:e0:5f:eb:e3:51:99:17:ac:f9:c8:f7:d2:
                    9e:37:8d:79:d6:d8:26:f2:b7:fa:1a:c9:42:69:b6:
                    50:aa:de:73:01:00:e0:cb:98:e5:16:9e:9c:14:ad:
                    eb:a7:3d:a3:74:f5:0d:67:27:7e:27:dc:7b:61:c3:
                    57:9d:66:c7:68:4d:eb:cc:88:09:ed:4b:2d:e4:9b:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5B:45:67:09:FC:41:96:60:C7:28:99:96:5B:57:5E:45:98:6B:C1
            X509v3 Authority Key Identifier:
                keyid:9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31302e302f32342d3234203d3e20323639353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:29:1b:16:6e:df:dc:40:47:86:89:25:e3:03:bf:47:17:
         ae:aa:d8:6e:99:e2:f4:36:53:c1:86:37:3c:b6:f0:85:7f:ba:
         a4:02:69:87:97:3d:87:7e:13:fa:4b:41:dc:8a:2d:85:e3:de:
         25:a8:bf:8b:09:41:ca:f2:09:5a:f3:14:eb:27:e2:c9:d6:b3:
         c6:d5:f2:84:2e:50:fb:b8:8e:ff:ad:89:24:77:f6:a8:a4:5b:
         ce:ba:5b:72:4a:0e:76:61:63:31:86:54:85:14:91:6b:10:18:
         a2:bf:58:bd:2d:86:01:d9:70:bb:08:88:fc:e8:ce:3a:21:ad:
         19:8f:48:43:c5:bb:d7:43:81:d4:d5:b2:89:b3:5c:65:52:22:
         bf:78:01:1c:9e:69:ef:76:e8:90:f0:a3:64:ca:54:4e:66:32:
         98:a5:d4:9d:56:3d:60:a5:54:03:01:5d:7d:26:2b:52:fd:7e:
         2f:c4:ce:fa:99:f7:24:07:54:a0:66:66:4e:ae:18:a4:bd:61:
         8a:c4:b1:f8:a6:72:eb:41:1e:69:47:95:c0:89:d6:59:89:59:
         d3:82:53:68:43:1f:20:db:49:98:a4:04:47:8d:19:a6:db:1b:
         68:04:9e:e8:7b:2d:be:06:2e:4d:57:41:17:55:dc:16:c0:2c:
         9f:57:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org