Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e3132382f32352d3235203d3e203631353839.roa
File:                     34352e3233302e3130382e3132382f32352d3235203d3e203631353839.roa (raw, json)
Hash identifier:          zZadt/ZWM/wUu6BGMLSd0VNfInqvaji4fajT8uDvC48=
Subject key identifier:   15:A4:C8:F0:8B:DD:86:06:B2:C5:BA:3E:D6:83:EB:34:CD:1E:0E:DA
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       0AA5D71B8A64CF0E36395118C3C8E533618D0E1B
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e3132382f32352d3235203d3e203631353839.roa
Signing time:             Wed 10 Jan 2024 13:02:47 +0000
ROA not before:           Wed 10 Jan 2024 12:57:47 +0000
ROA not after:            Wed 08 Jan 2025 13:02:47 +0000
asID:                     61589
IP address blocks:        45.230.108.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:d7:1b:8a:64:cf:0e:36:39:51:18:c3:c8:e5:33:61:8d:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Jan 10 12:57:47 2024 GMT
            Not After : Jan  8 13:02:47 2025 GMT
        Subject: CN=15A4C8F08BDD8606B2C5BA3ED683EB34CD1E0EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:34:a0:14:ae:d2:ec:72:2b:b2:17:64:a9:
                    9e:a9:f8:72:0a:11:37:d7:6e:9c:a2:14:ac:96:21:
                    4b:2c:36:5e:00:36:74:9e:b7:2a:11:09:b9:12:99:
                    ce:af:7c:b7:9b:9a:71:09:2e:b7:35:0d:24:f1:eb:
                    33:84:60:3d:ce:d0:f3:41:2a:a4:a8:10:5c:2e:48:
                    67:6e:cc:08:d6:63:56:c1:13:a8:0f:14:28:1f:26:
                    ce:f6:dc:d1:ab:33:7a:e5:3c:8b:0b:29:65:6f:3d:
                    f3:80:f0:d7:0d:ea:45:80:1d:7d:cb:24:3c:ad:2b:
                    2b:e9:a6:f6:8c:8d:b6:91:43:cb:9c:03:99:00:03:
                    21:81:79:da:7b:00:57:14:87:31:a3:14:49:c7:4c:
                    63:48:f0:dd:f3:10:8d:65:7c:ac:a4:6a:d6:c6:16:
                    f1:b9:a7:b0:bf:44:0b:b0:3e:9c:02:1c:3e:5d:cf:
                    e8:2e:65:23:a0:81:64:f9:83:9b:62:ce:c4:7f:20:
                    34:32:0a:3c:3b:e9:54:95:91:ed:b7:5b:4e:a5:fe:
                    79:77:40:cd:8f:d9:2a:47:ee:8f:a6:3e:d2:27:4f:
                    65:42:c1:44:d0:38:87:0c:f8:7b:0d:64:b5:52:f9:
                    31:7d:c8:83:c1:f3:dd:65:a7:9e:02:87:6b:65:79:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A4:C8:F0:8B:DD:86:06:B2:C5:BA:3E:D6:83:EB:34:CD:1E:0E:DA
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e3132382f32352d3235203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.108.128/25

    Signature Algorithm: sha256WithRSAEncryption
         cb:f2:6c:a5:ec:e5:98:66:b6:dc:60:f1:d8:cc:fd:15:cd:a4:
         eb:32:c8:b5:a6:08:89:69:98:28:61:d6:07:23:0c:ab:b5:3b:
         95:70:24:4f:12:0f:36:c0:a8:4a:1c:98:88:b0:9c:3f:18:98:
         15:fe:30:34:63:15:a8:42:87:fb:b5:71:b8:72:3f:75:25:53:
         13:81:24:47:4f:66:d2:35:56:29:ec:e8:ff:d6:91:fe:36:59:
         d8:c8:36:40:a2:03:07:84:82:3f:eb:a1:28:6f:15:56:c1:b9:
         29:c8:63:9a:a9:6e:58:30:9e:93:2a:c5:9a:dc:ad:5f:19:89:
         36:fd:a4:2e:a1:b1:9e:b5:6a:55:b1:99:3f:06:15:63:ff:81:
         fb:03:60:60:33:c2:8a:fa:48:3f:78:f3:0e:e3:58:47:c7:3b:
         ff:e4:72:b1:60:26:d2:d7:73:a0:58:a2:93:28:ef:b6:bd:9b:
         1c:5c:db:71:eb:90:3b:b9:93:d6:23:9d:2e:91:48:43:ec:be:
         40:1b:1f:1d:c9:0f:2e:51:84:12:7f:91:44:2b:b0:3d:3d:ca:
         6b:de:8d:4a:57:3f:25:1a:e5:9f:51:84:fa:37:3c:57:6c:a6:
         62:ff:2f:b1:f1:ca:fc:9f:09:9a:15:79:9d:36:54:08:cd:4a:
         b3:00:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org