Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32322d3232203d3e20323639313631.roa
File:                     34352e3138312e33362e302f32322d3232203d3e20323639313631.roa (raw, json)
Hash identifier:          WNcQmSvSaAT8+Pyt1xTOvKTx0dzlOi13AyWuJSfKaOY=
Subject key identifier:   15:48:05:B4:4B:0D:DA:39:73:39:DE:A4:87:7D:B6:4B:61:8E:B1:B9
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       0CC6CCF988ED1B04289951E63B137D9A0D4A9463
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32322d3232203d3e20323639313631.roa
Signing time:             Thu 17 Aug 2023 04:09:31 +0000
ROA not before:           Thu 17 Aug 2023 04:04:31 +0000
ROA not after:            Thu 15 Aug 2024 04:09:31 +0000
asID:                     269161
IP address blocks:        45.181.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c6:cc:f9:88:ed:1b:04:28:99:51:e6:3b:13:7d:9a:0d:4a:94:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Aug 17 04:04:31 2023 GMT
            Not After : Aug 15 04:09:31 2024 GMT
        Subject: CN=154805B44B0DDA397339DEA4877DB64B618EB1B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:f3:da:0c:4b:0a:b4:24:fc:c9:71:d8:d4:
                    48:28:9f:74:e0:ab:e0:e9:cf:d2:32:1c:56:23:9f:
                    4b:b7:5c:33:14:17:e3:14:bc:0d:51:67:98:71:c4:
                    1c:03:20:cd:8b:90:bd:05:2e:91:5a:66:23:fc:b8:
                    92:f0:31:44:76:7f:76:0a:60:50:f1:e2:cd:0f:e5:
                    e4:1f:ca:a8:51:d7:dd:b6:af:91:6b:a7:44:1d:0a:
                    fd:89:0f:5a:4d:06:5a:68:1e:8f:7c:6f:35:5a:16:
                    c4:92:eb:af:97:13:51:fa:fe:a9:bb:7d:da:05:3d:
                    1c:4f:26:bc:64:8f:da:16:78:b6:7d:b9:ac:6a:83:
                    81:7f:cc:bf:82:57:fd:5a:6d:49:0b:49:b4:dd:7c:
                    22:13:a0:e8:96:79:78:87:68:3e:5e:38:fe:02:fd:
                    8f:d3:7f:74:dd:a8:3d:10:62:8d:d0:e7:e3:64:f4:
                    ec:2e:9b:bf:bd:cb:6a:1f:82:2d:9e:f6:0a:b2:a3:
                    d8:33:eb:61:e0:6f:76:29:cb:02:46:74:43:74:83:
                    18:cf:d3:3f:51:a2:1a:d0:d9:77:38:e1:78:27:6b:
                    ff:52:c0:c2:95:28:a3:c0:ed:93:88:d4:39:e4:f6:
                    60:af:36:b2:f1:d7:2d:6a:c6:5d:3b:5d:c2:cd:46:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:05:B4:4B:0D:DA:39:73:39:DE:A4:87:7D:B6:4B:61:8E:B1:B9
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32322d3232203d3e20323639313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:f5:a7:34:10:47:ea:8d:07:73:00:cb:f7:cd:ce:f7:1c:39:
         72:c1:57:16:38:6c:83:db:2f:b1:96:99:43:d3:a2:56:59:5c:
         c3:e2:8f:5f:f6:11:32:de:cf:08:a9:1a:72:9f:e6:24:46:12:
         63:09:8f:8f:ab:d6:07:5f:cb:7b:b3:3e:76:be:c0:bc:93:f3:
         45:fa:74:7b:fc:f9:0a:ab:8a:3a:29:bc:ca:7d:ea:37:ac:ee:
         73:8e:4e:29:13:c8:d1:2e:cc:09:77:ec:6a:b5:90:3e:ea:cf:
         78:a5:71:e5:48:d7:f9:ab:23:6d:09:a1:46:b4:97:d8:0f:e8:
         99:6d:13:01:82:e9:5d:97:dc:a0:8e:60:2a:e2:d6:78:15:53:
         90:e1:c4:37:b6:b1:67:8a:69:62:66:c1:a4:14:c9:07:9c:e4:
         8d:50:f6:f8:3e:19:f3:10:cd:21:e1:e7:6e:3c:b6:de:03:98:
         61:ec:c1:56:75:1b:d2:c9:02:fc:97:28:80:fd:ad:0c:d9:0a:
         d1:39:3d:ea:95:07:0c:7b:fd:ce:ae:49:8d:49:e1:27:00:5b:
         47:c2:bd:0e:9e:6e:56:7a:e7:49:d6:ff:9d:b9:e6:0e:5f:4d:
         5a:ea:1c:25:7d:59:8f:79:e4:5f:cb:ee:2a:15:0b:fc:ec:cb:
         1b:d0:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org