Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32332d3233203d3e20323638313831.roa
File:                     34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (raw, json)
Hash identifier:          t9A7l7LzTjZjmLaB/V+JqOG9f9SbhzXPjJ5D0uIke1U=
Subject key identifier:   A6:0E:15:FB:13:8D:E2:5C:80:3E:CB:D4:25:7D:21:DB:9A:CC:CF:E6
Certificate issuer:       /CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
Certificate serial:       77E0C0483519C233BD3F661595A881E6247DA2C4
Authority key identifier: DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32332d3233203d3e20323638313831.roa
Signing time:             Tue 04 Jul 2023 16:11:33 +0000
ROA not before:           Tue 04 Jul 2023 16:06:33 +0000
ROA not after:            Tue 02 Jul 2024 16:11:33 +0000
asID:                     268181
IP address blocks:        45.171.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e0:c0:48:35:19:c2:33:bd:3f:66:15:95:a8:81:e6:24:7d:a2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
        Validity
            Not Before: Jul  4 16:06:33 2023 GMT
            Not After : Jul  2 16:11:33 2024 GMT
        Subject: CN=A60E15FB138DE25C803ECBD4257D21DB9ACCCFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:60:27:d3:d9:bf:0d:fe:cf:61:48:87:18:
                    4a:e2:d5:c7:c8:b6:d6:cc:75:7e:de:ee:53:9f:da:
                    e1:ea:a6:f8:ca:74:02:fd:47:c1:a6:11:e5:83:2a:
                    28:3e:a9:4d:34:f0:9b:f3:88:e3:26:14:aa:51:4f:
                    62:c9:20:56:37:c7:c7:0a:94:1e:00:aa:35:67:3e:
                    59:ce:51:0c:44:95:fc:e7:3d:b6:55:0e:af:d0:68:
                    ce:c7:41:46:3a:44:74:97:5a:7b:1f:49:db:55:06:
                    89:6f:dd:99:fe:ff:c7:fa:77:b0:c6:77:51:a6:51:
                    0b:0b:84:4b:87:c8:59:b8:7b:7a:f5:7b:9b:38:65:
                    fa:47:02:4f:51:49:30:54:c2:79:fe:4e:4e:00:5c:
                    18:9b:07:27:f3:07:cd:4a:8a:5e:d2:69:27:d7:c0:
                    fd:ce:55:30:2b:9c:75:1c:2e:54:5f:1a:a8:22:e7:
                    95:89:a1:66:76:33:64:3a:52:f0:6e:7a:69:bc:3b:
                    ee:f6:f0:bf:ae:d4:7f:20:3d:32:59:44:09:16:b4:
                    4c:39:dd:b6:92:bf:f4:55:05:49:e9:dc:2c:38:a3:
                    12:86:02:5b:13:8f:0e:60:cf:96:f5:e6:a3:d0:64:
                    81:b2:7e:a8:86:1a:3f:73:66:78:f8:d3:64:4a:62:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:15:FB:13:8D:E2:5C:80:3E:CB:D4:25:7D:21:DB:9A:CC:CF:E6
            X509v3 Authority Key Identifier:
                keyid:DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31362e302f32332d3233203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:ec:55:e7:31:d2:56:59:e0:3a:96:5e:22:4a:d8:47:5b:
         2a:30:61:89:f0:3e:2e:cf:75:4f:24:80:50:cb:bc:61:8c:d7:
         0f:fc:54:fd:42:22:d5:ca:0a:2d:1c:c2:71:b9:e6:aa:23:fe:
         76:d6:be:fd:9a:d6:3c:70:7d:cc:f0:32:a0:f0:2d:09:84:e4:
         d5:15:8f:95:ce:6d:01:aa:72:2d:f0:3d:51:0b:ec:4c:a8:3f:
         71:c2:c1:16:58:87:35:83:31:85:0a:e4:9c:c8:2d:58:39:71:
         38:7a:eb:72:03:01:87:4f:2d:77:4e:a7:8c:1e:0a:61:3a:1e:
         d4:18:cf:30:5e:84:6c:17:e0:0c:a4:2a:7f:bc:b8:6a:12:4d:
         dd:cd:84:2d:eb:a2:a7:85:c8:d4:39:de:b3:7d:eb:11:7a:05:
         1b:ef:32:2f:31:14:83:47:bf:cf:20:6d:54:53:8d:69:4b:fa:
         e8:98:59:81:ff:3e:11:2a:ae:bc:49:96:a3:33:42:c5:2d:ce:
         94:0c:fa:0c:6f:47:a4:22:fc:9a:40:c2:53:f6:c4:e9:c9:a7:
         f4:cb:d0:cf:7a:75:9c:e9:68:90:5c:2f:b6:55:db:f8:ee:fd:
         9b:1e:ef:cf:c0:2e:44:a8:3c:e6:14:5d:5b:31:44:26:ab:97:
         c9:1f:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org