Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa
File:                     34352e37312e3230382e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          Noc1/bTx9aZK+TJAB5OdjJlIHkMIblig2SbB09D2PNU=
Subject key identifier:   FF:97:94:27:7E:33:19:DA:81:FB:A1:1A:8E:4B:E6:47:C9:23:CE:5B
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       35E4EBE1DA8CF37ECEE4E0C99146ABBC18244D81
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa
Signing time:             Wed 04 Oct 2023 14:28:29 +0000
ROA not before:           Wed 04 Oct 2023 14:23:29 +0000
ROA not after:            Wed 02 Oct 2024 14:28:29 +0000
asID:                     269597
IP address blocks:        45.71.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e4:eb:e1:da:8c:f3:7e:ce:e4:e0:c9:91:46:ab:bc:18:24:4d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Oct  4 14:23:29 2023 GMT
            Not After : Oct  2 14:28:29 2024 GMT
        Subject: CN=FF9794277E3319DA81FBA11A8E4BE647C923CE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:07:09:01:9b:de:9c:3b:71:19:63:a6:b0:
                    42:00:c5:48:c9:8a:f5:89:a0:c8:9a:ee:a4:f4:1d:
                    c6:b1:f7:65:26:ee:cb:cb:fe:b2:9f:fc:0d:8b:09:
                    3a:a6:97:3f:be:c5:f3:45:7a:c2:27:52:b7:ca:6e:
                    27:69:23:5f:8b:8b:e3:fa:86:63:cf:fd:40:64:aa:
                    0b:de:70:1f:6f:78:32:fd:5c:6a:c5:fc:18:55:d0:
                    1a:bc:64:db:af:a8:e2:1d:2b:41:4a:20:f6:d0:47:
                    9f:5c:8f:70:a6:26:ec:c3:ab:63:93:ee:c3:e6:e2:
                    f8:56:92:a3:3a:28:a8:0e:c3:ba:8b:0f:ee:7f:84:
                    8b:36:dc:41:5e:b8:1d:d2:86:8c:65:d3:89:6c:8f:
                    c3:3d:48:0c:ae:1b:5c:99:4d:ca:57:6b:23:33:03:
                    11:a6:92:1e:cc:e3:70:75:86:0b:c9:13:5a:31:b0:
                    ba:aa:6b:c8:0b:25:b0:a6:a5:f6:6b:70:a4:4e:69:
                    db:7a:34:74:bd:37:fd:4c:66:79:b6:9b:ee:cb:02:
                    ad:09:e0:52:9e:b8:6f:d3:7c:a1:34:01:71:56:22:
                    7c:c5:1d:4b:4c:5e:f3:0e:43:5b:8d:8e:c8:38:3a:
                    b9:4e:d0:7b:ca:58:9a:7f:be:95:6d:cc:69:af:0e:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:97:94:27:7E:33:19:DA:81:FB:A1:1A:8E:4B:E6:47:C9:23:CE:5B
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:98:59:83:55:21:73:d0:c8:ad:ac:27:9b:32:22:da:24:3f:
         88:25:ef:73:9f:5d:60:bd:dc:33:ca:54:3e:93:4b:64:85:28:
         3e:da:6d:49:a5:6b:ad:9d:67:70:61:24:a3:9b:3e:8c:35:0e:
         ce:ca:bc:8d:5d:96:1e:61:b8:70:09:0e:84:52:a6:fd:4d:e7:
         7c:8a:6c:2b:03:a9:cc:da:e1:cd:56:cb:38:5c:9f:60:f5:a3:
         e3:69:50:08:0a:da:e7:5f:1b:71:97:ed:d6:ac:4c:6f:ff:05:
         3e:72:b1:3c:da:50:88:a5:05:d9:ce:9f:b7:c9:7d:9e:18:39:
         0a:70:11:29:df:e1:f2:69:90:ce:de:53:9d:57:9c:02:aa:61:
         d2:4f:7d:35:5d:22:aa:90:f9:cb:63:d8:5c:4c:f7:a4:e7:da:
         c2:97:73:97:df:7e:2a:9e:d3:4f:5a:32:22:56:b2:d3:55:57:
         3f:af:3c:cf:12:57:fc:0c:cd:48:3d:06:c5:e8:d9:e8:c9:2b:
         5f:f6:0c:12:4c:85:c7:00:0d:af:cb:e7:e2:2e:09:c8:3c:44:
         69:64:0a:80:83:50:7c:60:be:4d:bc:70:61:7e:7f:08:9d:fa:
         7c:18:22:77:ce:c6:eb:d5:7a:27:5d:7e:b0:f3:a4:b6:96:fb:
         b2:60:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org