Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33332e302f32342d3234203d3e20323639363635.roa
File:                     34352e3139312e33332e302f32342d3234203d3e20323639363635.roa (raw, json)
Hash identifier:          tv/xaQufLOszHyVuHZ5+8qTTyYOC7LcCqU+VNWEwk3Q=
Subject key identifier:   ED:DF:2D:C5:85:18:50:74:48:85:70:EF:39:AA:FB:04:C9:43:E6:21
Certificate issuer:       /CN=01E1936D951009EDC365E2731189930C5096C583
Certificate serial:       012FA92A900821048BB4B93EE3D2950DC88B4A4A
Authority key identifier: 01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33332e302f32342d3234203d3e20323639363635.roa
Signing time:             Mon 04 Sep 2023 17:50:41 +0000
ROA not before:           Mon 04 Sep 2023 17:45:41 +0000
ROA not after:            Mon 02 Sep 2024 17:50:41 +0000
asID:                     269665
IP address blocks:        45.191.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2f:a9:2a:90:08:21:04:8b:b4:b9:3e:e3:d2:95:0d:c8:8b:4a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E1936D951009EDC365E2731189930C5096C583
        Validity
            Not Before: Sep  4 17:45:41 2023 GMT
            Not After : Sep  2 17:50:41 2024 GMT
        Subject: CN=EDDF2DC585185074488570EF39AAFB04C943E621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:71:aa:36:57:b6:a7:c9:83:a3:d5:bb:00:
                    58:21:7f:02:cd:9f:3a:63:24:39:ab:4b:eb:96:9f:
                    36:0f:e4:7b:de:e2:04:cb:ad:65:dc:16:af:c3:47:
                    f3:5f:68:73:93:e5:a6:be:c0:f4:8f:ad:66:38:e2:
                    88:b3:e2:35:d9:18:f0:db:e9:7e:4c:ff:68:b2:42:
                    6b:49:e2:22:2d:10:1b:69:e7:db:69:4c:44:71:0e:
                    74:2c:a4:47:4a:20:ca:4e:6a:c2:33:79:fe:13:ee:
                    3c:b7:45:d2:ef:cd:a9:4a:44:6a:a4:22:1f:d4:d0:
                    f3:8a:8d:80:83:36:be:69:61:5d:f2:ff:50:c2:a5:
                    9c:a8:3c:83:64:13:7a:6f:b0:5a:61:5c:a3:9c:3a:
                    34:d3:64:5a:8a:45:ff:d1:9c:f1:2a:b3:2c:48:d7:
                    78:28:eb:e1:9b:15:e0:8e:06:d8:bf:8b:21:3a:af:
                    a3:a3:d5:ea:c9:43:8e:df:a8:14:fe:2b:29:01:ae:
                    08:0d:5d:17:29:47:3f:86:f4:0b:05:2a:8d:68:bd:
                    73:32:90:8d:a2:31:82:aa:ac:fb:42:60:d8:a5:52:
                    d5:99:01:bb:20:66:0d:74:f4:66:fb:21:8c:68:e9:
                    e3:bc:34:89:c9:2b:26:60:4f:34:cb:28:fd:71:d4:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DF:2D:C5:85:18:50:74:48:85:70:EF:39:AA:FB:04:C9:43:E6:21
            X509v3 Authority Key Identifier:
                keyid:01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/01E1936D951009EDC365E2731189930C5096C583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33332e302f32342d3234203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:f8:40:e9:0e:a0:34:a3:a7:ad:64:22:05:9b:b0:e6:b7:
         3e:40:93:88:a9:5f:87:44:8b:7b:32:0e:bb:f5:2c:49:f7:61:
         ea:dd:6f:b2:3a:96:e9:2a:ba:64:ff:5f:74:54:a4:96:c8:8d:
         18:f7:f2:17:4f:35:66:b2:53:4a:95:6b:06:74:74:fb:8b:c7:
         0c:eb:05:39:a2:6f:64:4f:7d:d0:7d:2d:f0:68:1b:de:b4:69:
         94:45:db:9a:7b:2e:e4:51:d8:54:c7:1b:a9:c4:03:6c:21:d8:
         c2:ea:eb:8b:60:3c:50:d3:86:c8:90:0a:ed:51:86:57:11:83:
         5b:fc:a7:80:4b:19:26:c7:0f:9f:45:04:ef:78:ba:da:25:92:
         e5:1e:4c:fd:e1:1d:1d:1e:f6:e1:6c:98:24:d9:61:00:27:fd:
         a9:75:b4:11:82:10:8b:84:50:b1:e7:30:13:a1:65:27:8d:f9:
         6d:1e:a3:c3:c6:d4:6a:26:3c:f5:27:36:70:d0:f9:dc:4e:bf:
         3a:cd:4d:79:34:9b:68:aa:33:f2:4e:b0:12:aa:1f:b1:d7:2a:
         3c:6c:8c:7e:9b:80:02:e2:11:2a:14:db:cc:f2:5c:ca:47:ce:
         1c:0d:38:9f:0d:74:f1:f2:92:dd:ad:a6:b7:9d:79:8d:86:be:
         93:fa:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org