Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32342d3234203d3e20323638303536.roa
File:                     34352e3136382e39302e302f32342d3234203d3e20323638303536.roa (raw, json)
Hash identifier:          BJQmqASXCsc/GxZVyywUj+7daNRu9g33U+yi18PvK9Q=
Subject key identifier:   0E:19:19:64:3D:BB:33:A2:BB:14:43:7A:1E:1A:91:B0:A7:B4:90:1D
Certificate issuer:       /CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
Certificate serial:       305F57A56DFDFD8D7A9017505E469F8438D177DD
Authority key identifier: E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32342d3234203d3e20323638303536.roa
Signing time:             Wed 27 Mar 2024 15:59:32 +0000
ROA not before:           Wed 27 Mar 2024 15:54:32 +0000
ROA not after:            Wed 26 Mar 2025 15:59:32 +0000
asID:                     268056
IP address blocks:        45.168.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5f:57:a5:6d:fd:fd:8d:7a:90:17:50:5e:46:9f:84:38:d1:77:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E61E1840B192631B2DB9D62C5475E62173B11EB9
        Validity
            Not Before: Mar 27 15:54:32 2024 GMT
            Not After : Mar 26 15:59:32 2025 GMT
        Subject: CN=0E1919643DBB33A2BB14437A1E1A91B0A7B4901D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:6b:db:b4:6b:27:4b:fb:ac:a5:c8:c9:c6:
                    e4:2a:f6:b7:e1:59:3c:34:5c:5a:77:d3:92:b0:18:
                    27:f5:9c:ab:1a:36:6c:ce:6d:85:93:f9:00:03:32:
                    70:49:48:9b:14:93:a2:18:4c:09:98:0e:99:97:b1:
                    7f:bb:27:74:6c:1b:4e:ec:24:49:77:5a:30:81:f1:
                    d2:b1:f0:ee:c0:b1:a7:e6:65:f9:2d:1f:1c:ca:af:
                    31:5a:f9:df:0f:b3:ec:a7:95:c9:e5:97:73:ef:21:
                    20:6b:8e:bc:f2:48:8c:54:43:20:92:a0:0c:cf:a4:
                    bb:0b:7c:3e:b8:b9:80:81:10:6a:ab:e8:f3:6b:a7:
                    05:f7:1d:89:2e:74:06:c5:38:7d:75:c6:d7:18:59:
                    58:52:fb:96:96:92:49:14:01:cd:01:ca:1b:59:93:
                    3a:25:62:d1:92:b4:8b:2b:73:89:e1:74:28:0f:31:
                    62:e8:28:fb:60:87:61:5f:b1:35:3f:33:c3:29:d6:
                    21:50:60:4a:4a:39:42:29:80:c2:e5:d9:f5:5e:fc:
                    f0:6f:00:f8:b5:73:91:4a:cb:ed:b9:2c:8b:96:74:
                    ac:92:0c:88:d6:b8:97:52:b5:6f:7d:31:b3:03:f1:
                    f9:25:49:23:61:b8:9c:4c:4f:c4:f9:7a:f7:b2:0d:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:19:64:3D:BB:33:A2:BB:14:43:7A:1E:1A:91:B0:A7:B4:90:1D
            X509v3 Authority Key Identifier:
                keyid:E6:1E:18:40:B1:92:63:1B:2D:B9:D6:2C:54:75:E6:21:73:B1:1E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E61E1840B192631B2DB9D62C5475E62173B11EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32342d3234203d3e20323638303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:e0:50:f8:f9:7d:fe:fe:9f:35:d2:2d:e4:5a:e7:66:97:23:
         05:d8:2f:8a:47:b2:31:0c:54:1e:22:61:70:4b:80:ea:7d:6f:
         82:30:c8:aa:d0:67:e1:35:e8:24:3a:8d:c1:33:b8:e8:a7:91:
         d3:bf:7a:91:a8:85:0f:4b:a8:c7:ad:1c:cb:c3:71:d8:eb:dc:
         6b:04:50:a9:73:e8:1b:f0:63:a1:9f:2f:f3:f3:bf:9e:e8:0c:
         99:39:cf:95:47:f1:f7:a9:75:31:ba:e4:65:c0:bf:bb:d5:8f:
         8d:25:40:73:d1:2e:94:bc:3e:19:00:a1:09:c8:09:e3:c6:3a:
         1a:fe:03:ac:5c:6c:96:63:fc:bf:62:17:4b:41:38:5f:98:d1:
         ca:20:2a:61:0e:3f:c1:85:3a:81:c6:9f:79:6a:96:0d:c8:57:
         b9:21:6c:57:61:26:f1:fd:4f:7e:8c:1f:77:a9:58:fb:ed:57:
         99:5c:9a:37:f1:38:3b:26:36:bc:30:6e:ed:bf:fb:2d:ff:73:
         b0:a7:b2:48:93:c4:33:37:65:db:5b:72:b1:46:32:fb:0f:cb:
         7c:9a:fb:07:6c:f1:86:43:52:54:56:67:e3:5b:42:87:b5:fd:
         cd:7a:ec:36:f6:0e:e3:60:d1:ed:f6:4c:1e:b3:c6:cc:cf:f5:
         61:6a:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org