Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32332d3233203d3e20323639353937.roa
File:                     34352e3138392e3137382e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          ixaNamuBM8YsjMf9kDTzBSgo5KB4JKn+iCow7U/GmR8=
Subject key identifier:   0D:73:47:74:45:8D:86:37:44:F2:AD:62:F0:F5:16:32:2B:01:49:6D
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       6F40F11A844D55F8062A3FEF26465CBA47D9C47C
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 29 Jun 2023 17:01:04 +0000
ROA not before:           Thu 29 Jun 2023 16:56:04 +0000
ROA not after:            Thu 27 Jun 2024 17:01:04 +0000
asID:                     269597
IP address blocks:        45.189.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:40:f1:1a:84:4d:55:f8:06:2a:3f:ef:26:46:5c:ba:47:d9:c4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Jun 29 16:56:04 2023 GMT
            Not After : Jun 27 17:01:04 2024 GMT
        Subject: CN=0D734774458D863744F2AD62F0F516322B01496D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:2c:34:91:4d:c4:52:6c:70:7d:1a:ae:01:
                    46:7b:95:ef:a3:91:0b:3a:4d:b9:be:d2:48:05:8c:
                    a7:13:8a:f4:28:87:74:dc:64:91:53:7a:99:77:5e:
                    4f:dd:dc:7d:ef:86:7a:b0:a7:d1:80:ff:d2:ac:92:
                    2a:cf:01:2e:5e:8f:b1:d9:45:66:98:e8:92:2a:b0:
                    c3:1b:cb:0a:76:31:bb:a3:5d:a8:63:40:f1:9a:40:
                    cd:73:f8:d2:d8:7f:e3:a7:d9:38:67:49:7f:c6:d3:
                    05:b6:46:f5:81:39:1d:99:a7:81:38:62:4f:1d:ac:
                    fe:63:4e:22:61:af:ee:77:a5:6d:4c:52:8d:37:c4:
                    49:08:8f:dd:50:ea:0d:2e:5d:90:8b:bb:29:0a:c7:
                    e5:00:2f:f3:9a:aa:c4:11:97:d4:ef:0b:92:2f:73:
                    08:2c:7c:cf:ad:2b:2e:f3:32:f7:7e:e6:ed:7d:7d:
                    1a:95:92:34:ce:a0:72:fa:1d:c7:31:48:28:81:83:
                    37:b7:ed:bd:74:2a:73:7d:f7:13:7b:eb:0c:c8:be:
                    a2:f8:0f:c1:01:82:77:94:5a:53:41:57:a4:fb:e7:
                    2b:6d:b0:4b:c7:41:c1:eb:ef:69:ed:e1:4e:b8:4b:
                    86:09:13:d9:7c:a1:a9:21:56:ae:f7:00:28:68:69:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:73:47:74:45:8D:86:37:44:F2:AD:62:F0:F5:16:32:2B:01:49:6D
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:ea:a8:78:d8:7c:ca:3c:15:74:39:c2:0b:89:13:4e:94:
         bd:81:ab:e2:c1:5a:81:70:db:6d:6a:5c:83:2e:56:6a:34:19:
         b4:80:31:e5:ba:9b:c9:5e:69:bc:e8:8c:45:7b:7a:96:0a:22:
         0b:a1:58:ea:81:85:50:00:25:19:44:03:5a:ca:8d:31:ed:1c:
         2e:06:10:3e:aa:72:7c:9c:2b:2c:98:26:85:25:ee:48:02:01:
         73:4c:b1:03:da:74:8e:6e:1f:d9:27:c5:94:b6:ea:58:ff:4c:
         5b:0b:48:cf:e8:6c:44:3c:e9:6e:ee:f5:6e:38:cf:d4:06:34:
         6c:82:ab:2c:41:ae:ff:1d:32:a0:8b:ed:7d:1f:e2:74:17:8d:
         b7:86:c8:06:03:c0:ce:93:ad:1a:9f:dc:61:16:55:c3:7f:c0:
         b4:b3:1d:a9:a0:78:54:3b:b5:da:18:82:74:fd:30:78:45:18:
         a6:da:f4:82:dc:34:58:1d:60:45:39:5d:77:1c:32:de:3c:57:
         7b:e2:17:30:7b:d6:3d:58:4f:cc:f2:95:f5:e2:1d:29:be:98:
         cf:e6:6e:c4:94:78:b6:8b:ac:b7:eb:ff:9d:64:8c:57:48:84:
         73:df:71:1f:5e:fa:fe:9a:d8:da:12:ba:11:69:06:8c:61:4a:
         4f:db:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org