Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          6XYiUOHPdkAN6KeVPyOElsrie+mq5Y5R+ycaa77b23M=
Subject key identifier:   A1:8E:C1:AF:41:D3:B4:03:0B:FC:0E:80:F6:CC:20:54:C9:79:AC:2C
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       41DB453F5D5FB026A18B1E10DB5C06527FD4F1FF
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 29 Jun 2023 17:01:10 +0000
ROA not before:           Thu 29 Jun 2023 16:56:10 +0000
ROA not after:            Thu 27 Jun 2024 17:01:10 +0000
asID:                     269597
IP address blocks:        45.189.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:db:45:3f:5d:5f:b0:26:a1:8b:1e:10:db:5c:06:52:7f:d4:f1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Jun 29 16:56:10 2023 GMT
            Not After : Jun 27 17:01:10 2024 GMT
        Subject: CN=A18EC1AF41D3B4030BFC0E80F6CC2054C979AC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:62:f7:52:6a:67:02:4e:50:18:ae:15:cc:
                    a7:31:39:34:17:2b:80:f1:1f:fa:31:c0:72:b4:48:
                    ef:6b:3d:5d:49:0e:e3:c3:c8:ce:9f:a9:6a:2a:b3:
                    3d:09:2a:e0:a1:46:40:d1:be:cd:83:48:fc:a5:f5:
                    fe:34:ac:c4:16:35:ae:77:b1:c1:e7:3b:0e:24:2f:
                    bc:e4:74:c1:d3:be:bd:47:ef:fc:cf:2e:6f:0f:7b:
                    c4:f4:b7:80:38:59:99:a8:b6:62:a8:cc:be:f0:16:
                    f3:d9:ab:89:ab:9d:fe:b3:49:aa:fa:2f:06:10:bb:
                    1d:70:24:38:e2:04:c2:6a:79:34:ac:a8:3f:37:fe:
                    06:06:43:73:55:d2:05:56:71:14:21:08:c2:82:97:
                    10:55:b3:83:92:dd:f1:f9:4d:9f:ae:39:76:cc:e2:
                    93:33:4a:77:52:72:ad:f1:d8:28:ea:6c:85:f9:fb:
                    e1:c8:b6:a6:fa:33:95:47:2d:b4:7f:a8:dc:f8:87:
                    2e:df:94:51:20:05:54:30:44:3a:8b:dc:dc:c6:9e:
                    52:ad:be:d8:dc:b3:32:10:5f:bf:66:af:fa:60:62:
                    2e:22:ba:09:7a:cf:cb:53:49:2f:9f:22:ea:e7:90:
                    1c:fa:c7:76:81:73:ea:4a:1f:c2:b3:e9:7b:d7:8a:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:C1:AF:41:D3:B4:03:0B:FC:0E:80:F6:CC:20:54:C9:79:AC:2C
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:45:2b:58:47:40:87:34:34:d0:f3:eb:c7:ef:c0:8b:5d:19:
         00:c0:45:4c:c4:7c:2c:fc:5a:18:16:fb:d8:86:4b:b0:33:0c:
         0c:fe:5f:c8:1b:1e:cf:c0:cd:d2:bf:25:93:7d:99:20:cf:bd:
         71:e5:e1:04:22:a9:b6:de:61:4e:13:51:3e:27:1d:77:ac:d3:
         ce:d8:a6:2c:34:38:3e:68:3d:23:b4:d0:9b:4f:b7:90:2f:3f:
         75:fe:cb:07:1e:ef:bb:f1:15:ca:c5:b2:88:3a:20:6b:b9:04:
         06:78:eb:ef:dc:5c:47:49:6f:0d:9f:bb:1a:ee:13:c0:f7:2b:
         27:38:21:e0:af:aa:f5:98:02:64:71:64:7f:5a:b3:5d:60:18:
         6e:91:30:cb:30:3d:4f:d2:c0:a4:db:9f:1d:2a:da:ea:e9:3a:
         20:66:dd:5a:8b:8d:2b:79:0a:13:48:a5:fd:d2:be:65:da:9f:
         bb:16:a3:db:52:c9:63:f3:ac:e6:1b:29:6c:a2:e8:e6:43:99:
         24:b6:7e:af:49:09:6e:87:6d:1f:f9:6b:58:23:6b:4c:20:53:
         29:06:fd:9f:a0:05:43:38:c9:af:7b:e0:59:a7:47:ad:d2:fe:
         18:43:61:a9:c2:92:eb:07:64:1a:0b:bf:18:df:ae:56:f3:9c:
         2e:f5:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org