Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa
File:                     34352e37312e3231302e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          cOaPW66SxXrd0keiQhFNtYWzEhxX0Q0SVxGcvEER7bE=
Subject key identifier:   11:EC:5A:6E:BF:69:17:85:05:E9:71:71:CB:90:B9:DA:72:5E:D8:A4
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       4DE0E4F7A24C41E14248B45BE58339F031D4EEBC
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa
Signing time:             Wed 04 Oct 2023 14:28:31 +0000
ROA not before:           Wed 04 Oct 2023 14:23:31 +0000
ROA not after:            Wed 02 Oct 2024 14:28:31 +0000
asID:                     269597
IP address blocks:        45.71.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e0:e4:f7:a2:4c:41:e1:42:48:b4:5b:e5:83:39:f0:31:d4:ee:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Oct  4 14:23:31 2023 GMT
            Not After : Oct  2 14:28:31 2024 GMT
        Subject: CN=11EC5A6EBF69178505E97171CB90B9DA725ED8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:29:f8:a5:58:f9:79:d3:07:31:59:89:b7:
                    84:d9:0e:83:a8:dc:2d:91:7e:8a:1a:09:38:97:c0:
                    69:f6:67:d7:fb:5a:49:f8:4d:77:83:e5:8a:38:4e:
                    f5:01:5d:87:f2:64:9d:ed:e0:c7:d7:45:e9:e5:b4:
                    eb:6b:e1:83:24:38:c9:cf:2f:17:75:9b:f8:95:62:
                    1d:22:69:f2:0a:15:0f:a2:a2:46:ae:e0:c6:6d:33:
                    f6:73:b5:a4:f0:81:18:6f:9a:a8:84:8d:6e:6c:31:
                    13:6f:ae:10:48:c4:46:ba:84:d7:6f:58:9d:06:9e:
                    db:fc:d6:c2:08:9b:86:c3:c1:87:cf:e5:8d:8b:09:
                    e9:f8:7d:53:62:c8:91:36:5f:cc:1f:ba:8a:58:7d:
                    4b:7d:0a:9a:2d:0c:a9:47:76:4a:dc:24:3d:3b:44:
                    d2:f1:66:ae:e1:88:66:a1:73:7f:f8:5b:86:15:0b:
                    de:7b:af:1d:fc:fc:3c:fd:0b:1f:b7:57:76:a2:3a:
                    ec:1d:ae:92:88:97:e7:63:1f:dd:40:dd:64:86:4f:
                    3c:4b:b2:52:f6:58:2a:de:db:35:72:94:86:9d:14:
                    cd:c7:6a:df:ae:01:0e:70:78:82:81:82:08:16:aa:
                    05:bf:7f:9d:84:95:0c:aa:02:95:2b:87:48:68:2c:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EC:5A:6E:BF:69:17:85:05:E9:71:71:CB:90:B9:DA:72:5E:D8:A4
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:5f:54:0c:2e:27:f8:74:19:b4:53:f8:9d:73:18:70:13:
         8c:b2:95:bd:28:d8:e1:5e:32:17:c3:7e:e3:a7:98:c1:3e:67:
         dc:c1:d2:20:28:2b:2d:19:04:ee:3f:1d:21:38:d4:07:f3:40:
         7d:95:36:8c:d2:13:5a:9b:14:6a:33:f9:dc:7b:1b:fa:e4:96:
         0c:4a:4a:b5:dc:25:41:24:4f:d6:39:2a:05:5c:46:27:cf:62:
         62:99:eb:b6:1f:9d:03:0c:e0:4a:d8:51:e8:68:48:24:82:8e:
         2e:8c:60:28:bd:f1:a0:6f:2c:cb:0c:75:72:d6:62:65:42:40:
         65:2a:7d:f2:9c:8d:f5:53:89:91:10:68:fa:2c:f2:57:75:96:
         71:a2:16:89:2c:ab:2c:f9:86:27:cc:1c:9b:fc:49:32:62:ff:
         13:25:bf:0c:9f:70:de:2b:90:4a:6f:1b:25:06:fe:9c:22:80:
         53:18:ce:e8:2b:21:d4:35:09:6a:e5:5d:c8:4a:1f:e9:3c:84:
         16:6a:c4:8c:56:20:4f:1c:ac:d4:8d:26:8a:e6:3f:0b:a0:cb:
         6c:f3:11:a2:70:dc:43:08:9e:08:cc:61:09:96:f6:27:14:be:
         9b:16:89:2d:c6:fe:b6:c4:84:10:9e:fe:29:e2:f0:f5:10:5e:
         51:f8:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org