Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32332d3233203d3e20323638303830.roa
File:                     34352e3136392e342e302f32332d3233203d3e20323638303830.roa (raw, json)
Hash identifier:          jdslBMKho2D+Iaw+fLESOzOJR5oywcdQq3gRBOnI+vQ=
Subject key identifier:   73:CE:B8:22:83:57:33:9E:A1:AF:57:6F:24:96:80:16:0B:F7:2B:58
Certificate issuer:       /CN=948C896D290E6239EA096A0CBBD8BA824D37E909
Certificate serial:       6D8C22E685157ADE10FA8543EDA98EF75A03C099
Authority key identifier: 94:8C:89:6D:29:0E:62:39:EA:09:6A:0C:BB:D8:BA:82:4D:37:E9:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/948C896D290E6239EA096A0CBBD8BA824D37E909.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32332d3233203d3e20323638303830.roa
Signing time:             Thu 09 Nov 2023 14:14:18 +0000
ROA not before:           Thu 09 Nov 2023 14:09:18 +0000
ROA not after:            Thu 07 Nov 2024 14:14:18 +0000
asID:                     268080
IP address blocks:        45.169.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8c:22:e6:85:15:7a:de:10:fa:85:43:ed:a9:8e:f7:5a:03:c0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948C896D290E6239EA096A0CBBD8BA824D37E909
        Validity
            Not Before: Nov  9 14:09:18 2023 GMT
            Not After : Nov  7 14:14:18 2024 GMT
        Subject: CN=73CEB8228357339EA1AF576F249680160BF72B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:60:4b:93:d5:ab:f0:98:b2:bb:06:24:78:
                    a6:3e:e0:43:49:1b:bf:a7:b3:10:35:8b:5d:f5:0f:
                    56:1e:64:f3:1a:c7:5b:59:a4:31:a9:f2:ba:0b:e5:
                    18:ce:ed:f8:f2:9c:85:2b:22:ed:56:0c:f9:88:f0:
                    50:7a:32:a6:64:af:a8:82:df:01:fc:6e:52:c8:fd:
                    76:b3:26:53:84:c5:99:c8:46:f2:e9:1d:aa:b5:e8:
                    26:d3:c9:0c:aa:a9:e2:28:0c:89:df:c6:43:55:a0:
                    a1:00:3f:84:95:84:26:bc:d1:4e:29:95:b4:1e:ac:
                    83:cb:53:00:84:7b:d2:6b:21:30:58:2a:1c:89:ac:
                    18:3f:ba:24:78:0e:dd:a6:1e:98:38:98:89:bb:11:
                    ca:18:97:e0:f4:63:0c:58:94:e0:c7:43:ea:fc:b1:
                    a7:c3:eb:9d:de:a5:ed:4c:a7:04:5e:72:30:cc:5c:
                    ed:9a:f2:74:45:b3:e6:e5:4d:68:20:f4:a5:10:5b:
                    80:8d:99:1e:de:c0:ee:b2:23:b5:88:b6:76:6b:33:
                    6e:e8:1c:3e:7d:6d:db:76:74:92:c0:f2:07:09:81:
                    60:9a:3c:82:69:b4:2b:0c:bc:5f:b3:08:fd:ab:94:
                    36:8f:c7:fd:75:a5:8a:3c:06:aa:59:91:af:fc:32:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CE:B8:22:83:57:33:9E:A1:AF:57:6F:24:96:80:16:0B:F7:2B:58
            X509v3 Authority Key Identifier:
                keyid:94:8C:89:6D:29:0E:62:39:EA:09:6A:0C:BB:D8:BA:82:4D:37:E9:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/948C896D290E6239EA096A0CBBD8BA824D37E909.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/948C896D290E6239EA096A0CBBD8BA824D37E909.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32332d3233203d3e20323638303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:1b:ea:1a:6a:6f:b6:36:17:30:5d:e7:7e:f4:27:7d:55:13:
         e7:f3:34:13:dc:b4:7f:22:43:85:da:98:00:ea:9a:ca:ae:4f:
         2a:1e:cc:87:d0:a9:9b:5f:b4:74:c8:27:19:6f:5c:a6:60:ab:
         ce:1e:0a:ab:e3:9b:f7:08:5d:c8:67:6a:a6:cf:b3:a3:af:b6:
         fa:e7:4e:89:ea:06:83:63:a4:9d:3b:9d:b6:0f:d2:d4:c9:66:
         8b:5e:47:dc:05:5a:92:ef:23:50:d5:0b:28:2c:b6:a9:2a:49:
         93:a5:32:7b:5e:36:66:3c:f6:ec:b7:b4:f1:49:8b:73:7a:e1:
         e4:ff:70:8b:d0:59:6d:2d:36:75:73:d9:22:d6:8b:82:18:dd:
         92:a2:35:fa:d1:b1:be:07:a9:03:48:3f:d3:bc:5a:10:1d:f5:
         d4:a6:e5:9b:a0:83:35:f6:8e:42:4d:41:5f:29:f1:fd:9c:ea:
         6e:07:74:ca:6f:00:2c:b3:5f:e9:6f:24:58:bd:ba:ee:32:83:
         0d:a0:8f:13:1d:e1:d7:79:03:25:25:37:6c:f9:5b:f5:2a:fb:
         f3:7a:82:d7:ff:7a:07:fa:6a:7c:9f:70:a4:c4:b1:c9:c4:82:
         cd:c3:bb:58:36:e7:6a:98:74:d7:6a:2b:f6:0d:67:62:18:21:
         7b:d6:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org