Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/34352e3138392e3136342e302f32332d3233203d3e20323730323337.roa
File:                     34352e3138392e3136342e302f32332d3233203d3e20323730323337.roa (raw, json)
Hash identifier:          m/M66R71lAJNQAFWWBEXzPdzv/D6LpsM9Nub4mFixL8=
Subject key identifier:   E9:A8:C8:09:0B:CD:49:31:75:EA:21:E8:09:47:69:65:B0:0D:14:21
Certificate issuer:       /CN=3099D03A6D6B68F55E4289613262727807C4A6A7
Certificate serial:       589C0FF4A213D384C9D6BF9B8DDE1838F5028929
Authority key identifier: 30:99:D0:3A:6D:6B:68:F5:5E:42:89:61:32:62:72:78:07:C4:A6:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3099D03A6D6B68F55E4289613262727807C4A6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/34352e3138392e3136342e302f32332d3233203d3e20323730323337.roa
Signing time:             Tue 05 Mar 2024 19:55:03 +0000
ROA not before:           Tue 05 Mar 2024 19:50:03 +0000
ROA not after:            Tue 04 Mar 2025 19:55:03 +0000
asID:                     270237
IP address blocks:        45.189.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9c:0f:f4:a2:13:d3:84:c9:d6:bf:9b:8d:de:18:38:f5:02:89:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3099D03A6D6B68F55E4289613262727807C4A6A7
        Validity
            Not Before: Mar  5 19:50:03 2024 GMT
            Not After : Mar  4 19:55:03 2025 GMT
        Subject: CN=E9A8C8090BCD493175EA21E809476965B00D1421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:6f:47:76:45:cb:07:91:61:bb:c4:f2:f4:
                    d6:06:a1:b8:ae:c1:9b:af:5e:ee:87:86:3f:93:97:
                    3c:b4:d5:82:1a:f4:92:e2:41:2b:8c:2c:2c:8a:67:
                    67:9a:94:c3:62:d7:cb:ed:9e:4a:82:f4:fa:6d:d7:
                    00:2c:57:a9:03:3d:11:27:f0:2b:85:bf:b8:33:35:
                    63:4a:e4:ba:d5:34:96:72:01:0e:5a:51:d4:9b:f9:
                    e8:2a:58:b4:53:da:f0:fc:9b:4d:88:06:bd:b0:f6:
                    c3:e6:73:53:f7:cf:9d:71:75:ef:d9:0f:01:05:57:
                    f9:88:c4:05:cf:c7:68:10:46:97:f9:e3:f5:3d:a1:
                    97:b9:c4:76:3a:b7:0e:90:0f:44:4e:49:21:23:bd:
                    a1:81:44:f7:f0:0e:87:aa:15:f8:8a:03:36:fe:70:
                    80:a0:19:f5:47:44:bf:c0:7b:cc:3e:f4:0a:2d:8d:
                    9c:3d:0f:4e:13:31:37:a2:22:05:f8:16:f1:e8:01:
                    75:0a:c3:2e:9e:52:94:1c:d6:b4:5f:ce:88:31:9e:
                    68:ee:84:5f:34:4b:7e:e3:da:20:71:89:30:44:0e:
                    8d:bf:69:60:e6:a2:50:48:0c:12:5f:32:26:74:7a:
                    af:5b:f9:47:18:d5:69:1c:7c:8d:d1:66:5a:dd:97:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A8:C8:09:0B:CD:49:31:75:EA:21:E8:09:47:69:65:B0:0D:14:21
            X509v3 Authority Key Identifier:
                keyid:30:99:D0:3A:6D:6B:68:F5:5E:42:89:61:32:62:72:78:07:C4:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/3099D03A6D6B68F55E4289613262727807C4A6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3099D03A6D6B68F55E4289613262727807C4A6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/34352e3138392e3136342e302f32332d3233203d3e20323730323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:31:3c:aa:45:f8:5a:37:25:8b:69:0a:2a:39:69:cd:bc:
         a8:f7:42:8e:7b:d3:87:c2:56:37:56:c0:39:3d:b4:e8:ae:fa:
         14:63:ff:d8:33:58:62:78:c3:48:32:c5:da:ca:a3:30:79:18:
         2c:59:ba:f5:67:4d:cc:84:69:93:cb:ce:a0:93:7d:10:66:4a:
         ae:49:b1:3d:bc:f7:0c:b8:03:6f:da:9a:f2:64:b3:51:d3:47:
         fb:2d:65:88:62:6c:e8:ca:ac:84:bb:4f:c6:b5:18:ce:b0:79:
         72:0d:78:87:f7:46:f2:d2:45:4a:78:e7:23:f6:ee:64:ea:a5:
         6c:58:91:01:b8:2d:a6:ed:d2:28:c3:72:4c:24:31:e0:d3:56:
         57:38:1d:1a:be:4c:2f:ba:cd:73:40:29:f6:5e:5a:76:14:66:
         6a:ba:4c:d1:76:bd:71:dd:e0:00:c3:02:d8:76:5a:95:0e:9c:
         5b:49:00:9e:73:b6:17:e7:2a:62:78:c7:90:99:ba:8e:04:ad:
         72:48:92:54:93:b9:b2:44:c8:6f:8b:fc:b1:15:ef:d3:57:d6:
         75:d1:9d:7d:09:a9:03:8c:a4:c1:a5:3f:d8:b0:a4:c7:5e:8f:
         31:1a:57:d3:45:be:44:33:29:bf:64:40:a5:af:38:a5:19:b7:
         c5:41:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org