Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32332d3332203d3e20323639343434.roa
File:                     34352e3138362e3136342e302f32332d3332203d3e20323639343434.roa (raw, json)
Hash identifier:          /LShZvEXkBbsaTwCBRz15VUXJLpIj4Ufd4NZkmaYjHQ=
Subject key identifier:   4E:2B:D4:AC:25:27:77:F5:CE:70:D7:0F:06:21:B9:54:3B:0E:94:7F
Certificate issuer:       /CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
Certificate serial:       13973197DCBA6E5A85161B3A3764160512633675
Authority key identifier: 78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32332d3332203d3e20323639343434.roa
Signing time:             Thu 16 Mar 2023 19:00:49 +0000
ROA not before:           Thu 16 Mar 2023 18:55:49 +0000
ROA not after:            Thu 14 Mar 2024 19:00:49 +0000
asID:                     269444
IP address blocks:        45.186.164.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:97:31:97:dc:ba:6e:5a:85:16:1b:3a:37:64:16:05:12:63:36:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
        Validity
            Not Before: Mar 16 18:55:49 2023 GMT
            Not After : Mar 14 19:00:49 2024 GMT
        Subject: CN=4E2BD4AC252777F5CE70D70F0621B9543B0E947F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f6:9b:fc:1f:3b:f0:50:08:71:e4:53:04:8a:
                    ac:bc:79:13:61:66:71:0e:e2:dc:55:fa:d2:8c:e1:
                    51:22:b4:a0:4b:d5:c5:56:b0:c8:cf:46:47:1f:44:
                    59:be:dd:16:77:21:8c:2a:5c:58:10:f0:ad:99:c0:
                    ce:d5:2c:7b:45:90:04:25:d9:c8:8e:58:cf:6e:36:
                    53:fe:69:f8:82:30:c6:0c:71:b6:63:08:e9:bc:42:
                    28:2e:74:7a:72:cb:0b:61:1e:7b:f7:31:9c:91:b7:
                    e7:9f:74:c8:c9:a1:91:e4:69:34:31:ec:ad:b1:cb:
                    a4:54:7d:ea:e1:97:b0:27:c1:35:a5:2d:3e:a8:a4:
                    a1:e1:53:30:fb:91:2e:e9:94:50:2d:6e:ee:61:6f:
                    4e:06:02:89:35:16:55:ac:3d:3b:be:2f:e2:0e:24:
                    c3:d8:e6:c0:6f:68:2a:5e:bf:5d:f9:b6:8a:47:0e:
                    66:f7:c8:b5:95:3d:01:f9:92:6b:5b:72:87:c9:79:
                    bd:06:ae:b7:5e:c7:73:c1:50:0d:d0:da:5b:7b:9f:
                    09:dc:f4:3a:f9:5f:7f:8d:d1:dc:b3:ce:82:18:6a:
                    02:97:60:a5:4c:87:90:7c:70:9d:ce:9f:45:64:61:
                    12:88:f5:63:61:64:df:84:e6:ff:4f:81:84:8b:17:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2B:D4:AC:25:27:77:F5:CE:70:D7:0F:06:21:B9:54:3B:0E:94:7F
            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/78A85BC823101919BCB85BEEFF44762DC0BE72F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32332d3332203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:cb:9b:ad:3a:f8:d8:da:20:fd:c1:bf:d3:18:98:5f:19:25:
         3e:ea:83:60:c3:2e:77:c1:e4:66:eb:b3:ea:1b:e5:1a:1a:8b:
         71:e4:5d:b2:7b:4b:4d:3e:25:73:c4:e3:41:78:ab:6c:8b:81:
         1d:a9:fe:27:1a:42:d8:dd:89:02:44:22:5d:f9:88:9e:b2:dd:
         84:0e:fd:37:a6:bb:44:a5:fe:0f:c2:02:22:a6:18:3e:ef:08:
         ba:cb:5c:1e:a2:7c:89:c6:ce:a5:17:a0:03:e2:45:2d:83:07:
         e9:85:cf:89:92:82:ff:55:05:c2:20:50:6f:e3:35:4a:f8:7e:
         43:87:7b:ed:9f:ec:d2:4c:24:6d:d7:58:a9:90:f3:87:15:8f:
         ce:d4:d3:14:13:ff:1c:e2:37:75:73:88:ed:e4:9b:4e:63:ed:
         b0:76:14:25:c8:0e:0c:79:ef:29:d5:71:a2:cd:e4:3c:21:a1:
         4a:e4:e5:70:fa:06:0e:68:f0:9f:76:d2:94:e2:58:55:fb:93:
         76:4b:59:ea:42:9e:34:97:d6:ff:4f:ed:50:d4:f8:df:c4:62:
         40:be:6e:b6:f8:04:bf:d4:c2:77:f8:14:79:4e:dd:ba:1e:43:
         e4:d7:b3:55:9f:ee:fa:5e:79:9e:97:7d:85:e9:38:bb:00:96:
         48:6e:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org