Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa
File:                     34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa (raw, json)
Hash identifier:          g1kg0/2WZlPPsvjSDm7XJWkMLsCuJLe1a1oZq3McvcU=
Subject key identifier:   45:96:2F:AD:2A:2D:55:CF:D1:F8:CD:4F:EE:3C:44:09:EC:72:53:53
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       33FE962F1BC827471ED812E57044BAF4EAB3F17B
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa
Signing time:             Tue 15 Aug 2023 21:52:34 +0000
ROA not before:           Tue 15 Aug 2023 21:47:34 +0000
ROA not after:            Tue 13 Aug 2024 21:52:34 +0000
asID:                     269595
IP address blocks:        45.188.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fe:96:2f:1b:c8:27:47:1e:d8:12:e5:70:44:ba:f4:ea:b3:f1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Aug 15 21:47:34 2023 GMT
            Not After : Aug 13 21:52:34 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:2d:54:14:ac:29:02:55:29:b0:f3:f1:2f:
                    70:5a:80:a1:89:0f:72:56:88:90:b8:77:e4:a8:e4:
                    f3:a6:2e:58:23:b5:ec:d0:3a:b9:5d:bb:41:b0:fe:
                    87:9d:d4:fc:03:0f:07:df:4e:d6:c3:54:bf:13:8b:
                    9f:e8:11:a0:55:16:ea:df:ab:31:23:52:1e:ab:51:
                    7b:50:99:f1:af:ba:6a:c7:15:2e:0e:4d:90:7c:cd:
                    1d:9f:2d:b0:f9:98:3d:b8:fb:7c:0a:a4:47:14:cf:
                    c6:c5:38:88:30:f5:79:7f:3f:e4:06:4f:04:01:d2:
                    00:80:00:cd:44:9b:66:48:54:c2:0a:52:9c:9f:bb:
                    db:5d:7f:83:f5:54:dd:24:58:44:48:38:ae:7f:6f:
                    85:bb:c7:10:29:cc:c0:c1:e2:f7:38:17:93:b8:a0:
                    8e:85:c2:85:a4:87:55:bc:9a:a5:ab:92:3c:77:82:
                    25:23:08:41:7d:aa:01:84:04:62:35:23:f5:4c:fa:
                    36:c0:8a:83:b6:44:18:95:a6:93:8a:72:52:ff:ed:
                    05:df:60:c4:8d:79:0f:d7:7c:7d:a8:54:74:f3:67:
                    97:51:ef:b3:07:ad:1f:76:fd:1b:5e:f1:63:5f:d2:
                    d0:f7:46:f5:e6:99:06:b9:d0:f4:04:a3:87:c0:05:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:96:2F:AD:2A:2D:55:CF:D1:F8:CD:4F:EE:3C:44:09:EC:72:53:53
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:92:95:9f:de:4f:69:82:4a:f9:2b:ac:ea:77:a0:98:70:
         ed:7b:5f:df:3d:d3:fc:58:aa:d5:09:b3:a9:53:f2:18:de:a0:
         3c:cb:43:b6:b6:19:ef:90:41:9c:5b:f5:1d:5e:c8:0e:e8:51:
         71:cb:40:7e:62:5e:b7:19:1c:0c:c3:31:2b:f7:a0:17:c9:df:
         0d:97:33:db:84:ae:8e:56:5f:2c:ab:e3:64:6a:b7:6e:3c:f0:
         31:7e:b6:e1:11:af:de:89:f6:bc:da:c1:fb:ac:33:2b:a7:81:
         b4:6b:17:f3:d7:9c:46:79:d7:68:6b:f3:d4:02:9e:ff:15:53:
         34:0b:b2:52:cd:20:fa:18:11:2d:5a:9b:9c:37:a7:a8:68:fc:
         ce:1c:97:81:e8:9a:01:1b:03:7d:c0:39:c2:c3:a0:74:2a:8c:
         e2:4c:94:c0:84:c4:2f:7b:5a:db:59:59:68:51:74:97:c4:e1:
         f2:b7:a9:de:94:cc:11:73:b8:82:d9:dd:d1:bf:66:14:0e:c6:
         60:d5:48:c4:19:57:32:da:bb:14:d0:12:f1:1b:c7:3a:34:49:
         95:ba:e6:bb:9f:81:3c:82:df:a1:92:28:0e:fd:16:57:3e:f8:
         f5:75:58:ce:ee:d0:69:45:bf:ac:1c:40:ca:43:c9:a9:32:9b:
         60:d3:8d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org