Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132342e302f32342d3234203d3e20323637333734.roa
File:                     34352e3233342e3132342e302f32342d3234203d3e20323637333734.roa (raw, json)
Hash identifier:          D5Gi2WDZgN6eoieaIr5AfRlo1qXdo/cxEGxjsEtvrNs=
Subject key identifier:   91:CC:11:DC:5F:56:A9:CA:FA:06:90:20:BD:B1:F1:30:7B:FA:0A:03
Certificate issuer:       /CN=2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101
Certificate serial:       104A9F49415261DFEE187444F6A980B4E7EFFCE8
Authority key identifier: 2E:19:BD:9B:5A:5B:4C:20:BD:30:13:3E:7A:5F:5D:14:EF:7E:51:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132342e302f32342d3234203d3e20323637333734.roa
Signing time:             Thu 04 Apr 2024 11:25:29 +0000
ROA not before:           Thu 04 Apr 2024 11:20:29 +0000
ROA not after:            Thu 03 Apr 2025 11:25:29 +0000
asID:                     267374
IP address blocks:        45.234.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4a:9f:49:41:52:61:df:ee:18:74:44:f6:a9:80:b4:e7:ef:fc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101
        Validity
            Not Before: Apr  4 11:20:29 2024 GMT
            Not After : Apr  3 11:25:29 2025 GMT
        Subject: CN=91CC11DC5F56A9CAFA069020BDB1F1307BFA0A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e1:c3:1b:ae:be:aa:e2:f0:47:07:54:8e:65:
                    fa:70:e3:48:67:56:dc:22:04:08:e6:23:b5:9d:c8:
                    38:8e:56:71:5f:e6:ed:5b:2f:27:a3:4c:ea:d7:47:
                    50:94:a5:f5:82:e4:30:3f:8c:9a:98:57:ce:16:42:
                    6e:a3:6f:44:53:a7:c6:c9:70:75:24:40:c5:c0:92:
                    e9:84:33:6a:08:44:59:04:a1:9b:a5:d3:5e:7a:ba:
                    fe:db:f8:11:c7:a9:02:8f:c0:57:84:df:3a:10:94:
                    bc:23:14:6a:48:e4:ad:82:a4:97:6c:f7:df:be:78:
                    5a:44:8b:0f:c3:e9:af:84:cf:c0:99:01:16:e8:da:
                    dc:d3:05:18:5d:53:7a:07:78:a1:2c:cf:27:36:d9:
                    c8:ef:66:67:26:16:6e:c2:0d:d1:86:63:76:6b:5c:
                    59:93:7b:8f:d2:42:c9:54:ca:61:a6:39:9a:6c:d5:
                    5b:a2:bf:f8:3d:8e:d1:76:e8:60:89:5b:18:56:e4:
                    6a:da:51:ff:4a:13:01:3b:c7:d5:7c:b2:d4:fc:37:
                    9c:c6:e7:2f:f9:67:79:97:90:91:0e:07:ae:e7:a0:
                    d3:83:09:ef:3e:44:af:6b:bc:36:b2:c1:74:3c:98:
                    06:08:2e:70:2d:ad:86:61:84:c4:60:a1:71:92:eb:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CC:11:DC:5F:56:A9:CA:FA:06:90:20:BD:B1:F1:30:7B:FA:0A:03
            X509v3 Authority Key Identifier:
                keyid:2E:19:BD:9B:5A:5B:4C:20:BD:30:13:3E:7A:5F:5D:14:EF:7E:51:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E19BD9B5A5B4C20BD30133E7A5F5D14EF7E5101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/1/34352e3233342e3132342e302f32342d3234203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:0e:ab:df:66:b2:40:7f:2a:61:95:72:3a:da:ae:55:7a:
         6e:7b:eb:da:cd:ca:26:71:7c:fc:55:55:3c:fa:b1:e6:ca:43:
         b6:84:e6:dd:6b:ee:fc:76:f9:62:1a:95:3c:eb:b1:b8:6e:7c:
         c5:19:07:69:0c:f7:1d:a9:2c:29:d5:8c:54:6b:65:a7:0e:c9:
         3b:29:4d:2a:07:cb:23:27:e4:e9:49:07:1a:2c:f6:a3:a4:d1:
         aa:ae:8a:2f:58:a2:c0:3f:f0:29:96:90:0e:19:ef:3c:a7:71:
         78:6e:2d:b6:09:aa:73:27:f8:eb:24:45:e9:56:de:9c:58:36:
         f7:bf:ed:a7:98:1e:11:5c:79:0c:ea:7e:aa:7e:d3:c4:a4:45:
         66:2b:63:50:39:b2:15:b1:6a:3f:00:94:bc:ea:74:49:d7:de:
         24:1f:a2:2a:96:22:af:51:56:ec:74:c3:31:58:12:87:99:0f:
         8e:a2:0e:73:14:53:49:fb:76:5c:a2:09:69:0e:10:2d:44:81:
         c1:d1:c7:50:04:b8:93:a0:99:9c:49:f5:48:88:51:09:01:00:
         32:b5:78:38:8a:86:0f:40:58:97:09:a0:ad:5e:ca:1f:b7:d6:
         c9:60:fe:1f:6a:18:68:bb:d0:4c:c3:a0:39:88:90:1c:9c:0a:
         b0:46:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org