Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/34352e3139302e36382e302f32322d3234203d3e20323639363430.roa
File:                     34352e3139302e36382e302f32322d3234203d3e20323639363430.roa (raw, json)
Hash identifier:          KjHKh7kABqXwQ0eB12H9arC8T53QKv2t3Ma5vHFNYME=
Subject key identifier:   7C:04:A7:4F:5E:D3:B7:FE:F6:F5:54:1F:C7:FE:A0:61:44:B7:B6:68
Certificate issuer:       /CN=E4E930115352E8D716089CC9D548A7853F79F50E
Certificate serial:       231BB70535E61C4700ED89E631E468F3BDEDDD0D
Authority key identifier: E4:E9:30:11:53:52:E8:D7:16:08:9C:C9:D5:48:A7:85:3F:79:F5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4E930115352E8D716089CC9D548A7853F79F50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/34352e3139302e36382e302f32322d3234203d3e20323639363430.roa
Signing time:             Fri 17 Nov 2023 19:15:04 +0000
ROA not before:           Fri 17 Nov 2023 19:10:04 +0000
ROA not after:            Fri 15 Nov 2024 19:15:04 +0000
asID:                     269640
IP address blocks:        45.190.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1b:b7:05:35:e6:1c:47:00:ed:89:e6:31:e4:68:f3:bd:ed:dd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E930115352E8D716089CC9D548A7853F79F50E
        Validity
            Not Before: Nov 17 19:10:04 2023 GMT
            Not After : Nov 15 19:15:04 2024 GMT
        Subject: CN=7C04A74F5ED3B7FEF6F5541FC7FEA06144B7B668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:87:f4:1e:1a:da:87:72:b8:e0:f2:5a:3c:
                    cb:ea:7a:de:47:56:11:48:d5:59:4a:50:1e:a0:35:
                    8a:1a:3c:1b:92:b6:f2:8c:0f:5c:2d:87:5b:c8:ba:
                    f3:b0:b4:8e:3f:94:a3:ac:1b:03:b6:df:e2:b1:95:
                    18:a7:eb:48:79:88:86:84:e6:4f:22:ab:e8:53:2e:
                    2d:ff:d5:c1:5e:0f:dc:cd:82:5a:ad:2a:e5:92:ac:
                    dd:b5:2e:74:56:68:75:64:82:81:96:1c:71:26:bb:
                    6c:23:92:ac:91:e7:f6:91:43:4d:86:4b:a6:23:fb:
                    04:21:06:b9:2d:03:89:ee:61:e8:e6:cf:ce:d3:cc:
                    db:66:f8:2a:c6:9b:97:6a:7d:b4:98:e1:fe:9c:77:
                    9d:6c:4e:2c:39:42:c3:bc:bb:65:85:8d:02:91:e5:
                    5e:da:5b:e0:cb:9e:44:19:f1:2c:49:9b:08:fb:89:
                    d8:ea:dc:f8:d9:31:33:af:b4:0e:eb:c4:e6:4a:43:
                    e3:d0:77:00:13:11:4a:b8:72:16:cd:4b:51:79:5a:
                    fe:03:2d:0f:26:ba:e7:c2:9d:f1:36:46:8f:7e:03:
                    7e:1a:db:b6:1e:eb:d6:22:71:71:e7:42:0a:36:1d:
                    3d:f1:3d:b5:66:7f:1a:12:72:4d:9e:cf:6b:25:ba:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:04:A7:4F:5E:D3:B7:FE:F6:F5:54:1F:C7:FE:A0:61:44:B7:B6:68
            X509v3 Authority Key Identifier:
                keyid:E4:E9:30:11:53:52:E8:D7:16:08:9C:C9:D5:48:A7:85:3F:79:F5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/E4E930115352E8D716089CC9D548A7853F79F50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4E930115352E8D716089CC9D548A7853F79F50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/34352e3139302e36382e302f32322d3234203d3e20323639363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:93:53:60:16:ca:cc:1d:63:2e:e9:ae:5e:d6:0e:f1:d6:20:
         72:e4:ab:a9:44:67:5f:ba:42:ce:4f:fd:06:2b:d1:da:c4:3e:
         e5:ae:95:c1:64:86:63:53:03:3a:5c:49:1b:b2:67:e0:d5:9c:
         07:0c:c6:88:37:2d:67:2b:cb:11:20:a2:10:23:9f:94:17:c0:
         79:1d:1a:50:e1:a2:fb:7a:54:f9:e4:93:84:6e:11:f9:34:25:
         5f:79:15:e6:bf:8d:fc:6d:a8:cf:03:66:bd:d5:9a:0a:eb:e5:
         e3:c6:30:04:9f:37:c3:8c:73:f6:6e:ef:f6:bf:99:97:74:7d:
         c9:25:ab:36:93:2e:10:50:82:fc:21:05:ef:53:30:3f:37:3c:
         08:ab:e5:a1:0a:26:78:7c:fc:0c:c7:0f:9b:d1:6d:a8:62:b6:
         e1:3a:e0:56:20:ea:7e:f0:df:67:51:33:b7:ee:08:ba:54:6a:
         53:a8:b7:e0:bb:88:7d:27:3d:12:48:93:95:49:f8:d2:6d:5b:
         e6:0b:28:a7:70:e6:38:70:b3:b7:b6:f4:df:76:05:ef:f6:3d:
         97:5c:a5:28:21:41:e8:e8:c3:52:f6:f4:cc:95:f8:54:46:75:
         5f:a5:b2:a2:83:68:e2:1d:55:0a:46:ed:82:32:ac:28:69:c9:
         35:d7:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:09 2024 by rpki-client on console.sobornost.net