Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa (raw, json)
Hash identifier:          c/63vihqpKV6F4iAS7kqDuzIdSMGlraEF7zIR0ZSt5I=
Subject key identifier:   5C:2B:0D:A0:3B:47:00:78:73:BA:19:1A:32:48:E1:FD:A7:2E:B0:1E
Certificate issuer:       /CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
Certificate serial:       18A498414972A36D31B95567109775CBAEE4C29F
Authority key identifier: E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa
Signing time:             Thu 29 Jun 2023 18:44:00 +0000
ROA not before:           Thu 29 Jun 2023 18:39:00 +0000
ROA not after:            Thu 27 Jun 2024 18:44:00 +0000
asID:                     268960
IP address blocks:        45.176.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a4:98:41:49:72:a3:6d:31:b9:55:67:10:97:75:cb:ae:e4:c2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
        Validity
            Not Before: Jun 29 18:39:00 2023 GMT
            Not After : Jun 27 18:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:60:68:bd:a9:dd:0f:9e:a6:0f:e3:df:f8:20:
                    b9:6d:31:18:99:1a:b8:96:e1:5a:a3:08:ea:a5:9b:
                    2c:b8:8c:a4:5c:cc:dc:37:0c:a0:d5:1e:96:38:26:
                    d7:0a:40:7f:05:8c:70:70:fb:b3:53:6d:1a:8c:91:
                    8a:34:02:b2:dc:aa:14:5e:e7:95:7a:6f:93:32:aa:
                    79:15:f0:61:bf:dc:0a:c3:6f:cf:4b:2b:68:f0:f2:
                    8b:a3:54:b7:fd:d7:09:59:c5:40:04:18:e0:1b:f5:
                    00:bd:70:9e:0d:d4:a6:af:00:f5:e5:d6:76:1b:8b:
                    49:9c:9e:81:bc:4a:20:f5:9c:b0:13:b2:c6:d0:a9:
                    bb:d9:57:83:e2:f9:3b:fe:3f:41:73:3a:10:6e:a6:
                    f6:51:ca:97:21:b9:e4:26:2b:11:36:22:d9:dd:6e:
                    36:39:80:20:23:0b:9c:2e:b7:22:63:d2:60:5f:34:
                    c5:59:fc:53:6f:2e:08:18:3c:3d:ec:60:37:c9:bb:
                    6a:14:c1:c0:4e:f6:42:fd:80:a1:1c:cc:91:16:69:
                    d9:9d:5e:5e:31:4b:4a:70:2b:14:45:8e:47:30:c4:
                    db:a1:c9:7e:3b:45:22:d2:5a:26:60:54:0d:1f:39:
                    b3:f3:9b:a9:46:2c:3b:96:87:d2:ee:04:a4:5a:6c:
                    91:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2B:0D:A0:3B:47:00:78:73:BA:19:1A:32:48:E1:FD:A7:2E:B0:1E
            X509v3 Authority Key Identifier:
                keyid:E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:aa:02:ef:8b:98:3b:fc:4d:c6:35:cf:ea:05:77:09:98:
         22:7d:4d:23:3c:4c:af:18:4c:ca:a9:32:cc:9b:93:9d:e5:e7:
         a1:5c:72:bb:00:93:6e:71:b2:ad:83:f0:d0:cd:77:ac:00:b4:
         c2:c7:bd:5c:84:80:c3:ff:34:b9:e1:4c:f8:f8:b4:b1:d4:8f:
         29:34:58:4e:c3:40:a0:2d:08:41:98:a3:66:88:9a:e3:10:9d:
         d2:09:a8:a5:bc:d5:c3:f6:c3:3a:9a:58:ca:80:e2:bd:7a:9c:
         dd:e4:04:85:f1:90:8c:96:1f:85:0c:ca:88:98:aa:ac:d9:3f:
         81:fe:8b:c9:17:6e:23:53:88:41:80:4e:a5:e3:5d:7f:f0:d9:
         06:f7:20:37:b4:ed:ba:c6:9a:67:2c:4c:33:87:4b:8b:49:9a:
         6e:ad:32:75:84:4f:a4:85:00:b4:be:a4:60:ec:6e:52:6a:43:
         3c:84:dd:f2:2b:41:a1:5d:18:9d:9d:dc:6f:79:1c:36:18:d4:
         97:cd:82:d4:9b:d5:b6:1d:cd:95:37:aa:dd:7f:91:4d:eb:c9:
         c1:44:fd:0f:af:ed:07:4f:c0:48:4e:85:71:7e:d6:fa:96:a0:
         dd:3b:a1:53:10:6f:b9:38:2b:89:04:6e:1a:02:36:29:b5:db:
         17:d8:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org