Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132342e302f32332d3233203d3e20323637333734.roa
File:                     34352e3233342e3132342e302f32332d3233203d3e20323637333734.roa (raw, json)
Hash identifier:          KVOVNc5rl6iwsMZP21/Ay67KKeiFh9d5qmp51Igi19Y=
Subject key identifier:   AA:9C:13:E9:38:D5:84:EB:91:09:32:05:E2:C3:36:6C:07:88:1B:58
Certificate issuer:       /CN=2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101
Certificate serial:       7F1F5014546EF25215536373A110BC1CEA079028
Authority key identifier: 2E:19:BD:9B:5A:5B:4C:20:BD:30:13:3E:7A:5F:5D:14:EF:7E:51:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132342e302f32332d3233203d3e20323637333734.roa
Signing time:             Thu 04 Apr 2024 11:25:29 +0000
ROA not before:           Thu 04 Apr 2024 11:20:29 +0000
ROA not after:            Thu 03 Apr 2025 11:25:29 +0000
asID:                     267374
IP address blocks:        45.234.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1f:50:14:54:6e:f2:52:15:53:63:73:a1:10:bc:1c:ea:07:90:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101
        Validity
            Not Before: Apr  4 11:20:29 2024 GMT
            Not After : Apr  3 11:25:29 2025 GMT
        Subject: CN=AA9C13E938D584EB91093205E2C3366C07881B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:b5:01:3d:6c:14:6d:23:e2:c9:59:bd:99:
                    ce:58:b9:6a:e4:94:98:9a:ed:ec:f7:25:d7:85:a1:
                    99:30:fb:09:c6:b2:29:e2:9e:2a:40:0c:11:4c:2b:
                    a1:22:56:60:71:e6:ef:56:15:99:35:6f:7a:24:d0:
                    56:33:13:73:33:d8:f4:04:bb:21:5f:c2:e1:39:d1:
                    05:73:17:d4:5c:21:02:9b:e6:c7:d4:bc:51:66:4f:
                    b9:80:ce:eb:34:8e:e8:6f:59:81:93:66:1f:1d:08:
                    73:0a:4c:f3:6e:53:dd:92:bf:5a:e1:13:25:7e:f3:
                    ad:f2:85:a7:0c:3d:99:81:d1:b7:a6:dc:4f:3c:0a:
                    cc:28:97:07:bc:fc:a9:a7:52:c3:e3:be:32:7b:1e:
                    b3:73:a3:40:55:31:08:9f:48:6b:f5:74:af:5e:46:
                    38:af:a7:78:5d:dc:14:0e:cf:53:7c:ac:02:e5:6d:
                    ee:d2:71:3b:cc:23:4d:2d:54:f7:b3:fd:f1:ac:5e:
                    f9:e3:ff:7c:61:6d:9a:d3:af:64:c2:7b:2a:81:cb:
                    37:ac:80:21:e5:56:4d:3f:e0:cb:c6:72:11:9b:c5:
                    2b:7b:f8:39:f9:09:6e:c6:1e:e1:04:98:2b:02:f6:
                    ca:d2:22:06:3f:f5:dc:68:6c:71:1c:54:2f:cf:48:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9C:13:E9:38:D5:84:EB:91:09:32:05:E2:C3:36:6C:07:88:1B:58
            X509v3 Authority Key Identifier:
                keyid:2E:19:BD:9B:5A:5B:4C:20:BD:30:13:3E:7A:5F:5D:14:EF:7E:51:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132342e302f32332d3233203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:8c:a9:ea:f6:97:19:5c:d7:10:73:fe:8f:87:a2:4e:72:
         3a:8d:57:a6:a0:18:21:ec:d9:5d:35:cb:03:ed:20:9b:27:3d:
         56:14:8c:a5:6f:dd:45:94:d1:21:e5:67:fb:8f:08:70:7f:00:
         50:d1:b5:c6:2f:e4:b6:4b:68:01:d4:9c:7e:82:e1:59:c3:fe:
         1f:b5:8c:bd:c4:fa:34:34:dd:4f:e3:0f:fc:d3:52:e5:3d:6e:
         d9:b6:32:b1:db:02:13:e0:e9:35:68:06:35:a9:8d:ce:67:07:
         3b:6b:bc:d2:8a:7e:f4:e2:e8:4b:a4:1f:09:c1:c2:4b:a0:14:
         c4:f2:de:98:e6:63:b7:9a:2c:a2:b6:cc:c7:7a:b1:5d:09:18:
         79:a0:80:64:13:fc:21:79:66:74:ba:78:01:1b:68:9f:8b:b9:
         a8:43:8f:f3:e9:32:51:dd:36:16:04:40:90:5b:b9:c3:bd:17:
         7b:2c:2d:8c:b2:e6:48:61:dc:3e:63:16:1a:5d:2f:c2:15:85:
         fa:15:3f:e6:b8:5b:3a:d5:a1:73:b3:5a:cc:c4:fa:1e:5f:47:
         08:38:42:dc:c6:a8:ff:11:0d:cf:e3:f2:ee:7d:0f:69:d9:aa:
         99:47:f8:58:cd:d3:19:e9:ec:4d:f1:7b:f8:ec:81:fc:3e:47:
         7d:b4:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org