Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138392e3137382e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          +ifzopHZtWBD4PSer5tuQziUaqd+TfSxVGN0YdRlGOE=
Subject key identifier:   9A:B6:E4:DF:59:F4:01:FB:59:2A:F6:9E:F2:00:A8:18:B5:77:F5:40
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       1EB3CCCB0E5DB9CA8385EB07FE44388D67F4AACB
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 29 Jun 2023 17:01:07 +0000
ROA not before:           Thu 29 Jun 2023 16:56:07 +0000
ROA not after:            Thu 27 Jun 2024 17:01:07 +0000
asID:                     269597
IP address blocks:        45.189.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b3:cc:cb:0e:5d:b9:ca:83:85:eb:07:fe:44:38:8d:67:f4:aa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Jun 29 16:56:07 2023 GMT
            Not After : Jun 27 17:01:07 2024 GMT
        Subject: CN=9AB6E4DF59F401FB592AF69EF200A818B577F540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:51:22:bb:c9:43:81:be:06:f5:39:3d:73:
                    a4:97:17:0c:7b:ea:76:40:24:23:5b:2a:fb:41:52:
                    d2:cc:b2:18:60:23:bb:bc:22:8b:82:57:fc:da:11:
                    cb:69:70:97:95:8c:44:a3:b0:cc:d4:d6:56:58:9c:
                    e3:b4:68:bf:30:0c:6c:25:87:63:20:88:61:c8:bc:
                    62:a1:f1:9d:df:ca:74:42:51:84:ce:54:f0:d0:13:
                    54:73:58:a5:97:4c:d1:bc:bd:03:9e:12:e1:8b:f2:
                    a3:02:10:93:bd:03:a6:66:57:52:ea:49:84:39:e2:
                    8d:ee:2b:e4:8c:5e:bc:ae:23:88:21:03:e0:3e:86:
                    cd:e9:fe:bc:df:a3:14:1c:b9:ad:74:1e:71:89:5c:
                    73:20:90:60:cd:7a:cb:69:26:60:28:28:41:81:b6:
                    9a:7b:97:70:e5:a7:72:9f:e6:c4:b4:ae:33:87:25:
                    a5:ff:d3:1d:f9:28:54:84:51:ee:a2:d4:76:d3:73:
                    af:4d:55:a8:39:41:d4:e9:59:bd:5d:03:c0:24:34:
                    71:c6:4f:08:f6:6e:cf:76:15:ed:56:ea:b9:da:99:
                    10:a0:d1:ba:f0:28:34:f2:62:55:62:f1:0c:d4:df:
                    07:4f:45:4e:7e:c4:92:2f:be:10:34:a3:94:e9:41:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B6:E4:DF:59:F4:01:FB:59:2A:F6:9E:F2:00:A8:18:B5:77:F5:40
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:4e:36:8c:59:65:c0:a2:2f:79:2c:16:65:6c:14:62:27:55:
         fb:1e:8b:9c:43:a9:82:dd:e0:ca:0f:9a:3b:c6:c8:14:54:b7:
         6d:4e:1f:78:8b:11:b3:08:fd:30:53:13:27:d5:0d:0d:3f:e9:
         dc:b2:f6:a7:c2:b4:58:67:13:68:2c:37:3c:fa:ad:61:62:90:
         1b:3a:80:0a:7a:9f:16:e0:76:0c:d3:25:62:b8:31:8e:ad:b8:
         cf:e6:dd:b7:08:49:5e:ca:35:f6:98:31:dd:92:8d:cf:06:b4:
         b7:74:f1:03:83:a5:f1:da:55:b2:0f:52:72:32:e9:fa:28:a4:
         f3:78:d0:e5:80:0a:46:2e:51:e9:3c:ab:c7:1a:20:ae:05:16:
         27:3a:60:bc:d5:b9:25:20:61:14:5d:e6:f3:3b:2a:53:e8:80:
         bf:75:02:2d:5e:0f:53:a4:13:65:92:25:d7:20:3d:db:8d:9f:
         24:34:dc:24:0b:8f:3e:fd:93:09:9d:ad:89:b3:6f:7c:ed:fa:
         f8:61:ef:0f:8e:cc:0e:fb:d4:3d:0e:47:d6:c6:18:86:35:e2:
         5e:92:f8:c2:07:c1:85:f8:d3:2f:96:85:7a:17:ed:40:31:b9:
         6c:78:45:1d:ca:f2:48:0e:bb:8e:0a:0f:a5:c0:80:ab:43:3e:
         01:2a:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org