Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/34352e3232352e382e302f32322d3234203d3e20323636393731.roa
File:                     34352e3232352e382e302f32322d3234203d3e20323636393731.roa (raw, json)
Hash identifier:          HHgmgcE57HuOOLTZJQ+8wqTCjIFu+vp5HU81BjM9yJE=
Subject key identifier:   5E:B9:FB:5A:69:C3:5A:2D:83:88:12:8E:D2:5F:E9:E1:42:48:62:1E
Certificate issuer:       /CN=5C1B218A74E747DB3E0B98D77A5336B1E11F5C44
Certificate serial:       105DDCBF79BB014C5812F2572D43AD3BC895C19C
Authority key identifier: 5C:1B:21:8A:74:E7:47:DB:3E:0B:98:D7:7A:53:36:B1:E1:1F:5C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/34352e3232352e382e302f32322d3234203d3e20323636393731.roa
Signing time:             Tue 26 Sep 2023 02:54:23 +0000
ROA not before:           Tue 26 Sep 2023 02:49:23 +0000
ROA not after:            Tue 24 Sep 2024 02:54:23 +0000
asID:                     266971
IP address blocks:        45.225.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5d:dc:bf:79:bb:01:4c:58:12:f2:57:2d:43:ad:3b:c8:95:c1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C1B218A74E747DB3E0B98D77A5336B1E11F5C44
        Validity
            Not Before: Sep 26 02:49:23 2023 GMT
            Not After : Sep 24 02:54:23 2024 GMT
        Subject: CN=5EB9FB5A69C35A2D8388128ED25FE9E14248621E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:96:58:43:52:cb:57:bf:1f:1a:e9:1a:3a:
                    bd:ef:44:e3:c6:d3:61:09:27:fc:bf:b1:50:38:68:
                    90:04:fd:21:7e:be:d4:9f:b9:c3:67:f7:0c:0c:8b:
                    16:b8:db:58:56:7a:74:b1:b1:2f:f4:55:02:3f:76:
                    6e:1b:3e:60:fa:f3:08:ca:ef:8f:fe:66:9e:f0:7e:
                    85:ae:08:7d:c8:ac:ef:26:e0:47:e2:35:2b:d3:98:
                    20:06:78:88:b2:1c:d7:80:45:72:bc:0f:0e:0b:a0:
                    ea:3d:e0:f1:2f:e6:1e:36:02:f4:82:c0:0d:fc:62:
                    6f:eb:b4:93:a2:67:81:1f:99:83:f9:96:d8:67:3a:
                    24:bb:37:c9:6f:e5:1b:9f:0b:65:fb:22:2a:37:8f:
                    3a:0f:40:56:c3:d1:2a:29:42:ed:f0:1f:02:c3:f9:
                    b3:ca:0c:e4:21:42:c6:9b:8f:a5:1b:c8:de:62:c4:
                    5d:e8:fe:61:22:ed:91:9e:e9:19:01:80:67:39:9e:
                    78:bd:33:3d:e4:05:15:b4:ce:3e:6c:30:c5:b8:9e:
                    74:39:6e:f0:00:40:51:a0:ec:aa:df:47:6d:09:08:
                    cc:26:b9:5f:4d:bb:6b:67:1a:36:1b:c2:4b:bb:a5:
                    c8:a9:03:e0:f8:4d:78:05:fe:03:97:6c:ee:8a:9c:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B9:FB:5A:69:C3:5A:2D:83:88:12:8E:D2:5F:E9:E1:42:48:62:1E
            X509v3 Authority Key Identifier:
                keyid:5C:1B:21:8A:74:E7:47:DB:3E:0B:98:D7:7A:53:36:B1:E1:1F:5C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/34352e3232352e382e302f32322d3234203d3e20323636393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:c9:55:7f:57:8b:75:60:93:fa:e2:af:1c:9f:f3:d0:9e:
         75:9d:6a:ef:41:f0:3d:ae:59:fd:30:d0:41:9c:34:3e:a6:41:
         69:93:24:bb:51:f4:bb:70:1b:10:44:a6:67:7f:32:d5:5b:c1:
         8e:e8:99:88:bd:c1:76:1c:28:3b:3c:fa:b1:fd:78:bd:ec:97:
         81:5c:2f:06:9a:bb:22:08:47:68:12:ca:5b:c7:35:25:bc:bd:
         f0:0b:67:35:e3:01:4a:c1:ab:67:86:86:4c:15:d7:17:c9:4d:
         35:b2:2c:08:12:1a:d5:1e:97:66:7b:ac:e4:5c:fd:97:c1:73:
         06:5d:d1:39:2a:be:93:80:7a:e4:0d:01:0b:bf:f9:a9:c1:7a:
         ff:07:99:ef:88:60:31:77:01:8c:46:e3:4e:98:8f:86:5a:6f:
         10:ec:c2:f9:03:7f:c9:6a:60:42:56:44:4b:88:7b:c1:3e:7b:
         99:b9:b1:f1:86:45:07:c6:d9:55:7f:e3:37:5f:28:c9:d7:4c:
         6c:ee:b0:e9:a1:25:15:0e:77:b0:11:80:93:20:3e:d4:83:6a:
         d1:1c:83:b1:3d:63:e3:b0:19:1f:3e:8e:0d:57:1f:bd:c7:b9:
         92:18:33:9b:cf:0f:ca:85:df:c6:04:ae:20:8c:34:01:be:50:
         fb:45:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org