Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa
File:                     34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (raw, json)
Hash identifier:          e6nXmHdN46riBkxgkaxBDHP39LTsEvPhiMckGBioYpc=
Subject key identifier:   BF:A5:1D:30:AC:DB:9E:30:D4:E9:03:16:15:90:62:4E:E7:72:1B:BB
Certificate issuer:       /CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
Certificate serial:       7BA919FEAD86B41DD6732C3C6B677869AE3BB1E0
Authority key identifier: DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa
Signing time:             Tue 04 Jul 2023 16:11:33 +0000
ROA not before:           Tue 04 Jul 2023 16:06:33 +0000
ROA not after:            Tue 02 Jul 2024 16:11:33 +0000
asID:                     268181
IP address blocks:        45.171.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a9:19:fe:ad:86:b4:1d:d6:73:2c:3c:6b:67:78:69:ae:3b:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA50F5D4DBC7F05802A9BD4D3407305C652DC63
        Validity
            Not Before: Jul  4 16:06:33 2023 GMT
            Not After : Jul  2 16:11:33 2024 GMT
        Subject: CN=BFA51D30ACDB9E30D4E903161590624EE7721BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:5d:61:18:41:77:10:0a:41:88:f5:53:8a:
                    67:9a:ef:d1:97:2f:87:3f:5a:b5:75:af:80:54:c0:
                    e3:8d:43:fd:b3:cc:c3:f7:05:0d:ac:e8:d5:3a:3d:
                    1f:26:d2:c2:63:d4:f8:66:a5:a6:c7:6f:60:ac:ed:
                    bd:76:99:e2:2f:93:0c:6c:f7:64:fc:f6:0b:8e:bc:
                    88:74:89:a1:ce:58:54:8b:0a:bc:98:7f:41:bc:86:
                    dc:64:17:f6:19:f0:6d:fa:1c:0a:30:8a:ef:2f:28:
                    b4:aa:3d:13:9c:7f:63:c1:73:a5:69:07:4d:15:cd:
                    d9:39:14:42:01:ee:f0:0a:1c:4e:61:04:96:40:ba:
                    d4:19:33:94:23:1c:28:c1:92:d5:8a:ab:2f:ce:fa:
                    97:4a:ad:ae:ae:ac:3a:02:73:b9:31:3e:f9:7f:84:
                    b5:02:ac:bc:d4:26:0b:43:28:c8:b1:c3:c6:05:77:
                    df:88:25:48:34:53:51:4a:c9:d3:ea:40:73:0a:3a:
                    23:14:cb:56:24:38:31:c5:9b:b0:51:e0:b7:64:cb:
                    51:be:f1:b9:17:fd:6b:df:95:1a:23:37:61:d8:1a:
                    94:49:15:a7:aa:60:8f:f6:1b:e8:01:ef:fd:e2:96:
                    96:69:84:9f:43:f8:12:fd:21:a3:38:8e:8a:3e:6b:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A5:1D:30:AC:DB:9E:30:D4:E9:03:16:15:90:62:4E:E7:72:1B:BB
            X509v3 Authority Key Identifier:
                keyid:DC:A5:0F:5D:4D:BC:7F:05:80:2A:9B:D4:D3:40:73:05:C6:52:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA50F5D4DBC7F05802A9BD4D3407305C652DC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:3e:47:29:88:5e:9d:b6:70:0d:fc:d5:05:fe:ca:99:a2:d3:
         17:08:df:44:58:35:32:2e:67:ef:d2:ac:e0:8a:23:49:7e:ea:
         b8:2d:4c:46:6d:d3:b3:90:70:ac:83:26:df:f4:fe:64:b8:46:
         2a:3a:4d:25:fd:d3:a5:52:6b:8f:40:b2:46:65:4e:7e:a8:12:
         c1:ef:21:a1:63:ff:bf:f7:8c:e5:7a:e0:2d:bd:ac:79:f0:e8:
         1e:ad:0f:46:c6:bd:10:41:bd:2c:f5:7f:ca:96:a0:dc:c8:d0:
         e9:64:58:ae:09:a8:5e:35:a7:7e:2c:40:ec:18:3f:32:20:ff:
         13:14:78:3f:61:4b:25:99:99:67:71:8e:98:36:99:e1:ec:93:
         23:77:da:9c:b8:e2:08:b1:1e:8f:1e:f6:41:8e:00:68:01:95:
         1f:e1:13:a6:8e:af:7f:71:1e:d8:2d:40:02:56:fa:b2:be:e1:
         0a:6a:97:69:9f:f9:94:a2:dd:ac:a0:e9:08:aa:be:4c:31:0d:
         ec:83:b1:57:36:ea:99:68:94:36:c9:b6:32:b6:45:41:f1:f7:
         75:c1:aa:04:1b:ca:dd:ba:d4:d0:72:e5:fb:29:c9:14:8c:3f:
         66:ad:c2:66:5d:2d:47:17:ca:5c:7f:42:01:48:5b:f7:bd:ef:
         b7:0e:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org