Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
File:                     34352e3139312e33322e302f32342d3234203d3e20323639363635.roa (raw, json)
Hash identifier:          /wO/t6bvjD6IWlOWbS+LaT1SXXYc8Fvna2VOQOrLliI=
Subject key identifier:   1E:A5:36:44:42:6F:F1:3F:8B:CB:E8:0A:30:89:94:17:B4:69:D3:EF
Certificate issuer:       /CN=01E1936D951009EDC365E2731189930C5096C583
Certificate serial:       18836C5995E9F27B27944BA62BFD32EEA6E36771
Authority key identifier: 01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
Signing time:             Mon 04 Sep 2023 17:50:38 +0000
ROA not before:           Mon 04 Sep 2023 17:45:38 +0000
ROA not after:            Mon 02 Sep 2024 17:50:38 +0000
asID:                     269665
IP address blocks:        45.191.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:83:6c:59:95:e9:f2:7b:27:94:4b:a6:2b:fd:32:ee:a6:e3:67:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E1936D951009EDC365E2731189930C5096C583
        Validity
            Not Before: Sep  4 17:45:38 2023 GMT
            Not After : Sep  2 17:50:38 2024 GMT
        Subject: CN=1EA53644426FF13F8BCBE80A30899417B469D3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:15:fa:ef:90:f7:d5:c8:8b:53:00:b8:37:
                    dc:26:87:cc:18:68:4e:7f:f1:c0:25:34:7d:c8:7c:
                    07:c5:d4:da:33:b1:1d:2d:15:23:a6:97:3d:22:3a:
                    46:cd:34:f2:e0:67:9e:58:3f:df:c6:a5:bb:21:c2:
                    7e:30:1c:84:7a:7d:a9:d7:35:2f:05:a0:8a:28:bc:
                    ca:c3:ff:e8:d3:48:79:ab:55:70:fb:e3:e8:02:66:
                    a9:46:a4:1c:1b:61:89:07:b3:1f:31:29:3d:9f:d0:
                    70:80:3a:dd:1a:98:43:dc:3e:b2:a5:d1:8a:76:78:
                    22:c1:fd:01:87:b0:c8:16:7f:01:cf:14:59:80:95:
                    f4:77:e0:d9:d0:08:08:59:b8:e0:52:69:90:cb:2a:
                    31:c2:39:1f:f6:19:82:bf:12:9d:95:4a:87:ad:75:
                    c6:10:5c:7a:aa:7f:c8:a6:3c:f8:32:f6:d4:4b:0e:
                    e6:ee:da:2e:dc:46:cb:54:7f:02:e9:67:c4:2d:15:
                    93:66:27:09:43:c0:22:5b:07:f7:9e:e6:13:12:1c:
                    0b:09:10:51:95:1d:ae:45:41:5e:1b:7f:c0:12:8a:
                    d8:e1:e0:5a:ab:3e:c6:fd:31:31:97:f1:b3:6a:47:
                    71:e2:fb:3c:2c:64:34:93:ea:5e:fc:48:c0:d6:a6:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A5:36:44:42:6F:F1:3F:8B:CB:E8:0A:30:89:94:17:B4:69:D3:EF
            X509v3 Authority Key Identifier:
                keyid:01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/01E1936D951009EDC365E2731189930C5096C583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e1:c1:93:d4:28:e9:01:13:b4:93:64:6b:7c:cb:65:69:7d:
         79:9a:b3:48:3a:0f:05:62:88:02:99:74:ec:e8:de:9d:53:8a:
         79:0f:6d:d0:e5:6a:54:61:06:d8:d6:41:34:4d:4b:33:ef:e2:
         d9:d4:b1:6d:44:c2:88:6c:e1:20:a2:04:b2:c4:dc:c0:24:b7:
         99:9f:6f:4a:73:3b:1b:99:3f:0c:ac:17:f7:d6:30:a6:e4:fd:
         8e:e6:d8:7a:8c:c2:f1:73:79:78:ad:d2:72:84:7f:ee:98:b1:
         f9:0c:35:33:29:ec:ac:e0:06:52:30:19:4f:42:8b:60:69:59:
         f3:c1:c3:f7:9f:7f:f5:5b:aa:44:40:39:a1:05:27:86:44:6f:
         83:ac:d9:fa:b2:34:84:a3:b5:1b:2d:57:9b:59:56:08:f3:98:
         70:20:24:ba:9c:52:eb:d7:64:ef:9a:09:e2:7e:36:4e:68:0d:
         9b:15:94:44:09:1a:98:f9:b9:5b:07:de:60:20:ad:24:12:aa:
         e4:b5:ca:9a:b0:86:2d:11:d5:22:42:f4:ca:1b:6e:d0:df:a5:
         38:e5:ef:aa:00:9d:14:fd:45:d5:81:42:89:4b:3a:fa:c4:08:
         5c:86:58:b9:0c:f0:79:c3:21:a9:63:d6:e7:f3:b8:4d:e3:69:
         33:e5:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org