Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa
File:                     34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa (raw, json)
Hash identifier:          SPmsSrNkaq3VmvDs565gz7JwalHkCX7NL9nS9TxF0A4=
Subject key identifier:   A5:27:9E:F1:83:D9:A3:66:AA:F0:60:9B:74:F2:24:2B:D3:CA:BF:96
Certificate issuer:       /CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
Certificate serial:       528E81E934126D7C81E4D0C13D63F3A13BBEB763
Authority key identifier: E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa
Signing time:             Thu 29 Jun 2023 18:44:00 +0000
ROA not before:           Thu 29 Jun 2023 18:39:00 +0000
ROA not after:            Thu 27 Jun 2024 18:44:00 +0000
asID:                     268960
IP address blocks:        45.176.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8e:81:e9:34:12:6d:7c:81:e4:d0:c1:3d:63:f3:a1:3b:be:b7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
        Validity
            Not Before: Jun 29 18:39:00 2023 GMT
            Not After : Jun 27 18:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:c0:26:8f:e3:a8:81:7e:31:4b:c9:4c:ff:
                    a8:56:96:ad:c4:60:4a:37:ca:6f:27:61:0d:a5:c2:
                    bb:84:2c:54:ae:3f:ae:1b:e1:f0:cc:0c:5d:47:7e:
                    a5:44:66:65:55:96:43:f7:f5:24:48:e8:30:28:7a:
                    8d:83:59:7a:b0:0a:c2:36:1b:dc:7f:de:f0:7c:3c:
                    0a:01:48:96:d7:51:8a:ac:5c:ee:c9:9a:b7:4d:89:
                    25:54:27:80:cd:6f:ec:3f:7f:14:f3:17:ea:00:ca:
                    4a:13:6c:b5:73:79:af:f8:b9:76:79:bb:2b:5a:23:
                    09:02:dd:64:e3:20:a1:f0:22:23:1b:41:cd:e4:0e:
                    3c:15:6e:2b:95:34:36:04:9a:d3:b2:0f:15:84:84:
                    2c:1c:91:a0:07:61:b1:ff:fe:c0:8e:0d:87:e6:85:
                    17:32:c8:b5:5c:b7:69:87:fd:a4:b0:65:90:b1:56:
                    d5:bb:e9:6d:94:f7:97:c0:51:c2:8f:cd:0e:1a:f4:
                    70:a0:aa:e5:f1:c6:3c:74:b0:fd:cc:85:ee:f5:78:
                    a1:94:b5:84:f1:5a:ed:b9:f6:09:e6:4f:eb:1e:1c:
                    25:4c:de:cc:6c:24:ed:be:34:6f:30:58:db:20:1b:
                    0b:71:56:9a:6c:94:9c:8a:bb:8d:f9:ab:98:ef:40:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:27:9E:F1:83:D9:A3:66:AA:F0:60:9B:74:F2:24:2B:D3:CA:BF:96
            X509v3 Authority Key Identifier:
                keyid:E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:a0:21:75:86:27:f8:a0:23:33:cb:73:19:5a:0a:d5:d2:
         bb:bc:66:89:17:03:4f:93:da:2a:53:8e:3e:42:98:79:1c:2e:
         b5:ab:27:5f:ed:97:0b:b5:d6:e1:3a:eb:37:cb:82:40:60:5f:
         9a:bd:24:29:23:bb:68:1b:59:ef:f2:bd:07:03:9d:bd:85:d1:
         41:d9:62:fd:29:6c:23:cd:63:d9:2a:9b:4d:68:2c:27:e0:c7:
         52:18:15:76:83:66:02:8c:8d:68:c7:88:81:f7:8c:9d:fb:a0:
         ad:c0:47:f6:77:3f:29:2e:ca:eb:a8:6c:64:cf:f7:ad:d4:87:
         02:5e:24:14:84:95:98:9b:70:97:ac:b4:e1:ad:19:4f:42:6c:
         3e:26:14:35:1b:67:8a:86:1e:22:ec:fa:4f:2f:17:3a:1d:2f:
         9c:73:2e:f6:fd:21:06:66:ec:d2:23:c8:e4:cb:ed:3f:20:0e:
         91:2c:51:8a:e4:fd:0d:1a:ce:bc:24:a0:1c:80:f2:76:35:b4:
         95:43:7e:e7:da:ec:f4:11:2a:eb:a5:3e:35:dc:a6:76:b0:72:
         15:ab:68:3d:3a:ba:b4:10:b2:53:af:1c:49:ad:fb:1d:c7:56:
         61:bf:b5:7e:0e:bd:e5:af:1b:11:75:8b:04:dd:0e:69:e3:0b:
         c6:b3:fd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org