Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3130382e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          eUof2D2ur0oaq8QSxelDgp7UmpakUCk9Bj3U/rpgVfc=
Subject key identifier:   F6:49:C9:58:EB:6D:38:6A:00:20:6A:16:C1:54:FF:90:FA:31:2F:3A
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       558808C93E1F43B5950888BA89130E4F5D5338AF
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
Signing time:             Mon 24 Apr 2023 11:53:49 +0000
ROA not before:           Mon 24 Apr 2023 11:48:49 +0000
ROA not after:            Mon 22 Apr 2024 11:53:49 +0000
asID:                     61589
IP address blocks:        45.230.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:88:08:c9:3e:1f:43:b5:95:08:88:ba:89:13:0e:4f:5d:53:38:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Apr 24 11:48:49 2023 GMT
            Not After : Apr 22 11:53:49 2024 GMT
        Subject: CN=F649C958EB6D386A00206A16C154FF90FA312F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ac:bf:ff:36:6d:6c:e9:07:23:3e:85:e6:de:
                    fb:de:95:39:f7:95:17:98:bd:85:7f:77:62:12:1a:
                    c4:57:75:e2:e2:b8:0c:48:29:75:b6:a3:73:70:c0:
                    4d:da:10:20:b1:cd:19:a2:be:82:2e:3a:4b:ac:79:
                    bc:ac:1e:aa:df:56:4f:e4:b7:70:ca:84:48:7f:c8:
                    68:c7:83:2d:c1:7b:fd:74:4f:92:60:48:77:b2:76:
                    5a:ee:38:01:92:6e:81:f6:07:f8:71:2c:34:50:ea:
                    64:42:87:78:d7:28:4e:71:e4:06:a0:2e:55:d8:fc:
                    ed:1b:ec:a7:d9:b4:18:a1:50:cc:0c:e4:1f:65:b3:
                    87:ec:5a:9e:1a:52:bd:43:2a:40:c3:7d:28:46:f9:
                    e7:21:3c:9a:02:66:44:cf:b0:0d:a9:e5:7a:c4:b3:
                    47:c7:db:54:42:d4:22:80:3b:95:5c:6b:3d:6e:5d:
                    94:a5:57:9b:b2:14:6f:bb:aa:3e:1e:18:80:bc:c1:
                    fd:d2:83:37:60:81:0e:bd:9a:0d:08:35:c7:f4:b4:
                    4e:50:ab:59:53:91:a6:38:38:9b:4f:5a:90:35:81:
                    c7:51:f2:f8:8e:5d:1a:cf:bf:ef:a2:bd:66:ec:69:
                    50:7b:cb:0e:b1:69:f6:3f:c3:01:92:ab:02:5b:d6:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:49:C9:58:EB:6D:38:6A:00:20:6A:16:C1:54:FF:90:FA:31:2F:3A
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:5e:5f:6a:3d:6f:df:30:f1:59:59:4b:2c:6f:f5:9d:96:ab:
         80:52:7f:53:cb:99:2f:8c:79:fb:1f:17:d5:4f:7b:3d:2f:de:
         42:0f:de:b5:35:c9:15:b4:7a:c4:7c:25:bb:0b:52:e3:b9:ab:
         21:ee:25:eb:f5:44:f0:8d:33:11:1e:2e:6a:a4:d6:86:15:72:
         69:1b:1e:a5:e6:66:0a:f0:21:ce:41:84:f7:de:2c:c6:d8:f9:
         3e:19:38:7b:ad:2a:c6:16:d4:46:df:e5:77:fa:5f:f7:27:89:
         2c:6e:bb:3d:ff:98:d8:6d:6b:ff:90:85:0b:9a:44:92:10:2e:
         e5:f0:ec:48:43:28:9b:b9:40:47:d0:f5:e8:5a:c3:32:c1:06:
         5d:7a:23:36:85:9b:f3:9f:c7:16:0a:ae:a5:74:b6:cb:30:2e:
         82:fc:d1:93:e6:9d:be:67:30:a1:f5:8e:b0:6f:36:61:78:f3:
         6d:b9:af:48:0e:84:12:3d:d2:4a:61:29:69:3a:ba:6f:a6:70:
         78:c6:9d:f7:49:83:0a:fe:52:a7:1a:fb:1a:dc:de:3a:6b:db:
         c3:88:b9:84:cc:de:2e:b9:94:fc:fd:04:ce:19:b2:1a:86:12:
         b6:c2:37:4e:3b:bf:0a:4c:e3:65:4e:1f:9a:b9:b0:ea:64:f3:
         7b:4f:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org