Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137352e302f32342d3234203d3e20323636353931.roa
File:                     34352e372e3137352e302f32342d3234203d3e20323636353931.roa (raw, json)
Hash identifier:          Oj7iGM/Y2mNJ+azF4uDrQVtJrPHRZAau6KauJXfbpnM=
Subject key identifier:   94:CE:4D:AE:B4:65:48:AA:D5:BE:53:B7:C2:C5:5F:1C:28:97:CB:D4
Certificate issuer:       /CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
Certificate serial:       6853444D33006CD48E2F979D15972A675A93A691
Authority key identifier: DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137352e302f32342d3234203d3e20323636353931.roa
Signing time:             Tue 17 Oct 2023 17:41:50 +0000
ROA not before:           Tue 17 Oct 2023 17:36:50 +0000
ROA not after:            Tue 15 Oct 2024 17:41:50 +0000
asID:                     266591
IP address blocks:        45.7.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:44:4d:33:00:6c:d4:8e:2f:97:9d:15:97:2a:67:5a:93:a6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
        Validity
            Not Before: Oct 17 17:36:50 2023 GMT
            Not After : Oct 15 17:41:50 2024 GMT
        Subject: CN=94CE4DAEB46548AAD5BE53B7C2C55F1C2897CBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:d9:d8:38:6e:e3:3b:aa:42:d0:ed:32:5b:
                    87:77:29:bf:80:64:2b:cd:01:64:eb:cc:7d:1c:05:
                    7d:e8:2c:a8:35:a7:d9:c2:97:cc:ef:03:eb:07:ca:
                    0d:cd:27:d3:0a:ad:46:c9:66:fc:eb:00:1e:2b:48:
                    60:b8:d5:75:d4:33:bd:71:06:72:b2:16:9e:a2:ed:
                    1a:00:e2:a3:55:56:66:11:3d:bc:e3:b5:78:e5:9f:
                    70:28:12:05:7d:c9:3f:68:73:25:e7:c7:a0:9b:e3:
                    c6:e3:76:5e:fc:89:b5:b7:5a:ab:7d:5c:02:3c:9f:
                    11:2e:4e:a0:4b:19:a0:a4:c2:a0:41:33:48:ee:42:
                    d3:3f:3f:96:82:99:3c:66:18:47:1f:91:cf:4b:7e:
                    cb:46:af:75:5c:d7:05:42:42:a6:68:8d:17:68:b9:
                    10:85:d0:7f:c7:a8:8d:61:9f:26:74:fa:d6:f8:7f:
                    e3:65:c2:8d:e0:4d:06:07:21:f3:60:88:96:63:2b:
                    ff:af:77:9e:f4:0b:95:6a:11:cc:ea:6a:99:f4:28:
                    0a:2c:3a:45:f1:f9:90:77:38:bb:eb:1b:a5:5b:61:
                    66:f5:67:e2:2d:3e:3f:f9:78:47:0a:d0:55:f1:c0:
                    1b:c4:52:a3:ba:2a:ab:a9:e2:af:ef:88:1a:0d:14:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CE:4D:AE:B4:65:48:AA:D5:BE:53:B7:C2:C5:5F:1C:28:97:CB:D4
            X509v3 Authority Key Identifier:
                keyid:DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137352e302f32342d3234203d3e20323636353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:eb:e3:2c:5e:df:e7:1a:88:ad:b2:5e:78:11:c0:a5:98:
         52:1b:89:8d:62:db:0b:09:18:8b:8b:9b:c0:5d:5a:4d:30:05:
         53:4e:87:96:59:2c:33:53:80:ef:29:87:33:88:4c:4f:44:74:
         56:f6:a9:ed:5b:2b:44:99:10:e0:5e:5b:1e:f3:9c:22:9d:86:
         e9:1f:d5:af:68:b2:26:70:38:38:af:5f:f6:f5:33:df:38:90:
         01:8d:b5:60:79:70:b3:e1:27:6e:9f:b3:d1:ff:fd:e8:d2:96:
         96:88:c2:91:58:cc:2f:b2:b9:b4:34:94:73:cf:c5:a2:93:d2:
         1e:2a:44:5a:cf:cb:3b:18:da:5b:7f:14:ad:bc:bd:88:f3:dd:
         27:97:6a:01:61:e3:3b:e7:21:d8:35:7d:31:15:16:24:dc:f6:
         de:92:9e:2b:0e:8c:98:e6:20:c3:a1:df:b5:21:07:40:3a:28:
         42:ed:ab:18:fd:fe:32:c8:5c:38:c9:a1:8a:36:b6:a6:8b:cc:
         33:35:11:4b:1a:e2:7d:cb:ab:d0:87:89:d4:53:54:61:d6:3e:
         ef:e0:fb:36:49:d9:00:7e:a1:a6:e5:e3:b4:77:58:87:e1:7b:
         5b:d6:26:1b:87:4a:bd:c9:2f:ae:f9:12:5b:20:ae:78:d1:aa:
         47:48:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org