Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39382e302f32332d3234203d3e20323638343037.roa
File:                     34352e3136302e39382e302f32332d3234203d3e20323638343037.roa (raw, json)
Hash identifier:          JrRCJ/axwJTtooGyEzoDja1X03DGNss2KIVitaub1EE=
Subject key identifier:   8A:21:17:6C:76:0D:05:95:AB:C3:34:53:57:51:18:25:4E:D7:4B:56
Certificate issuer:       /CN=A49A35585B87622ACAEF03508625833F092F9DEE
Certificate serial:       46F3D12E288EE05ED300DA4DAE8D6550F3341B8B
Authority key identifier: A4:9A:35:58:5B:87:62:2A:CA:EF:03:50:86:25:83:3F:09:2F:9D:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A49A35585B87622ACAEF03508625833F092F9DEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39382e302f32332d3234203d3e20323638343037.roa
Signing time:             Fri 05 May 2023 20:40:28 +0000
ROA not before:           Fri 05 May 2023 20:35:28 +0000
ROA not after:            Fri 03 May 2024 20:40:28 +0000
asID:                     268407
IP address blocks:        45.160.98.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f3:d1:2e:28:8e:e0:5e:d3:00:da:4d:ae:8d:65:50:f3:34:1b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A49A35585B87622ACAEF03508625833F092F9DEE
        Validity
            Not Before: May  5 20:35:28 2023 GMT
            Not After : May  3 20:40:28 2024 GMT
        Subject: CN=8A21176C760D0595ABC33453575118254ED74B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:4d:a0:70:b4:c5:a6:0c:5e:83:cd:70:71:
                    75:38:9f:0b:f7:c0:0e:e5:54:18:fe:16:f1:60:b2:
                    ab:08:08:71:e4:81:c6:18:63:b3:a0:90:ac:3c:ac:
                    25:fa:d0:66:cc:27:77:f2:78:06:57:e6:af:0e:6d:
                    59:de:1f:a2:db:17:a2:3f:47:51:b2:47:df:e7:5d:
                    42:72:80:81:bc:34:f0:4a:45:d2:0f:81:89:cb:79:
                    45:b6:10:3e:09:f7:a8:e4:59:8f:9a:6f:c5:79:5f:
                    23:cf:ca:e6:cf:f7:ae:31:65:98:db:e6:a8:4f:d9:
                    f4:fb:87:02:20:19:3e:b2:58:92:74:5b:13:25:bc:
                    e0:30:a1:ef:da:82:1c:d9:7d:35:5d:51:6a:36:20:
                    ce:0d:43:5f:e8:5a:41:26:05:dc:4c:be:a8:31:8c:
                    08:d7:19:55:69:b9:43:79:40:3c:ac:7a:af:67:4a:
                    98:42:19:2b:cd:5d:4b:b1:04:8f:88:13:fb:ce:52:
                    3d:63:9a:6f:0a:10:ea:bf:81:bb:2f:94:9b:25:d7:
                    4d:70:74:28:b2:60:e5:37:83:92:b4:21:b6:42:f1:
                    a8:94:18:c6:8e:07:56:38:49:c7:1e:f8:13:c1:d6:
                    e1:63:19:70:98:0b:2a:48:3a:ec:c2:7d:87:cd:98:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:21:17:6C:76:0D:05:95:AB:C3:34:53:57:51:18:25:4E:D7:4B:56
            X509v3 Authority Key Identifier:
                keyid:A4:9A:35:58:5B:87:62:2A:CA:EF:03:50:86:25:83:3F:09:2F:9D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/A49A35585B87622ACAEF03508625833F092F9DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A49A35585B87622ACAEF03508625833F092F9DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39382e302f32332d3234203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:49:b3:89:69:7c:56:77:63:bc:17:e2:71:cd:32:76:c4:18:
         b6:3a:9c:4d:0a:be:96:d1:43:a4:38:c8:6d:4a:84:84:f6:dc:
         c7:36:15:74:59:37:c1:f1:81:c7:a5:10:01:30:d3:c7:27:2b:
         23:1b:0e:28:cf:70:a1:2f:f7:9d:4a:c8:9f:ed:c4:c8:f1:1b:
         7c:dc:a4:6b:ea:56:fb:04:3e:77:4c:2d:26:1e:5b:84:24:fb:
         8e:69:5e:2e:37:b9:a1:37:18:8e:7e:ee:20:fe:a4:5c:3a:b6:
         22:22:18:c5:49:ce:65:17:26:fd:a9:6e:a3:8b:f9:09:ef:7d:
         c4:57:27:b2:e9:13:61:07:aa:c0:18:5c:29:47:9c:c2:4e:24:
         e3:bf:8d:83:de:e0:25:9c:12:d6:15:69:4b:b7:d0:9c:12:f1:
         6c:1e:cf:36:08:f7:e9:ca:8a:4d:15:8d:be:5a:ed:5b:7b:d8:
         63:93:1d:2c:8d:19:4f:0a:91:8f:ce:10:25:22:e2:74:ef:11:
         d7:61:b2:eb:e9:76:cf:7d:39:47:1f:4e:41:72:ac:8a:20:a7:
         fd:f8:57:27:23:b5:ed:64:a8:11:a6:06:4f:fe:3c:56:4b:94:
         26:ba:e3:1f:f0:6d:33:e6:33:19:c8:c0:48:d5:c8:8d:ac:c0:
         f6:71:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org