Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32332d3233203d3e20323638303536.roa
File:                     34352e3136382e39302e302f32332d3233203d3e20323638303536.roa (raw, json)
Hash identifier:          UPKl7CBBo9JVTQ+BokDuXV7ynWyOSQ4stzu9Bkvmx1c=
Subject key identifier:   1A:0E:F8:43:42:45:40:A5:FE:63:4B:18:5D:D2:12:9D:3F:C5:F8:30
Certificate issuer:       /CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
Certificate serial:       466BC474D67A447C307AF95DD35E4DE26AD7E6D8
Authority key identifier: E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32332d3233203d3e20323638303536.roa
Signing time:             Wed 27 Mar 2024 15:59:28 +0000
ROA not before:           Wed 27 Mar 2024 15:54:28 +0000
ROA not after:            Wed 26 Mar 2025 15:59:28 +0000
asID:                     268056
IP address blocks:        45.168.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6b:c4:74:d6:7a:44:7c:30:7a:f9:5d:d3:5e:4d:e2:6a:d7:e6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
        Validity
            Not Before: Mar 27 15:54:28 2024 GMT
            Not After : Mar 26 15:59:28 2025 GMT
        Subject: CN=1A0EF843424540A5FE634B185DD2129D3FC5F830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:09:19:64:0e:4b:ed:e2:6e:7d:b4:58:bc:
                    0d:c5:3e:aa:29:94:87:37:30:64:5b:45:57:1c:f2:
                    12:db:90:18:7e:52:f4:7d:8b:18:37:04:4e:8b:e8:
                    56:0f:52:54:f3:ae:0f:0a:89:0f:91:c1:33:5a:4b:
                    3e:ad:73:57:4e:89:25:41:f0:e2:9c:87:1f:60:65:
                    d1:1e:e5:6f:19:ea:2a:bf:a8:98:25:01:a8:f2:f9:
                    05:d0:e8:fc:22:4f:c0:a1:dd:48:54:a4:92:70:81:
                    e6:14:0e:f2:c7:55:89:70:83:3a:ef:51:d9:01:16:
                    28:ce:88:f4:83:dc:a0:96:cf:90:ef:7b:8e:ad:93:
                    a5:b6:19:05:48:bf:6d:d4:f6:b0:0c:58:17:dc:b0:
                    74:44:71:65:7b:aa:fe:a6:d1:9f:37:a8:97:ae:a1:
                    88:42:e6:6b:1b:a6:20:5b:40:e4:fa:6b:67:d8:bc:
                    f8:45:31:1d:fc:9b:14:75:bb:9f:69:7c:6b:d3:63:
                    40:00:3b:64:77:df:70:77:29:cd:35:87:ae:11:ed:
                    68:e5:06:0e:04:98:d6:3d:24:ee:5f:75:16:e6:09:
                    f2:c0:49:85:eb:2a:02:43:a4:ae:eb:61:60:e1:81:
                    7c:64:de:ea:2f:5a:d7:b4:4e:3c:96:c1:7f:32:4c:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0E:F8:43:42:45:40:A5:FE:63:4B:18:5D:D2:12:9D:3F:C5:F8:30
            X509v3 Authority Key Identifier:
                keyid:E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32332d3233203d3e20323638303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:8b:23:9c:3a:fd:f8:1b:55:f3:5e:1b:9e:3d:77:e1:f5:
         d1:dc:0e:f0:13:6d:51:7d:3f:57:78:94:14:12:3d:d9:94:24:
         65:40:20:4e:f9:81:82:04:44:dd:35:6e:82:b3:90:4c:79:91:
         25:4c:4d:88:4d:e6:54:c0:0c:a7:95:a1:18:69:1f:36:a9:a5:
         15:f8:a5:b2:a0:fb:5a:83:77:05:f7:d5:2f:51:a9:12:8a:b0:
         25:c8:35:78:68:65:5a:d3:43:d9:5b:e7:ce:61:91:e5:e5:63:
         f9:62:dd:21:39:cd:87:ae:98:80:2f:d6:13:8c:18:6e:29:46:
         26:66:3e:e5:dd:6c:7b:48:c4:eb:fe:0b:3d:30:b8:09:b4:bf:
         18:7c:72:70:ec:93:d1:b1:bf:44:55:5d:c8:71:4f:d6:58:8c:
         2e:d5:83:72:2a:c7:37:ee:a9:ef:54:ce:d6:fe:a2:19:4d:8b:
         31:52:fa:18:4f:ae:f3:11:4b:cc:7b:98:7f:4f:fe:4f:64:97:
         a7:b4:7b:0e:2f:7a:bb:47:03:dd:7b:88:c6:e0:14:13:10:9b:
         30:1e:75:da:21:75:ae:00:4d:96:7e:5c:bc:3a:f7:30:e0:2f:
         b6:b5:3b:ca:21:ca:8f:ab:8b:b8:f6:15:dd:05:8c:df:ab:e2:
         df:0c:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org