Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3232203d3e20323639353935.roa
File:                     34352e3138382e3233362e302f32322d3232203d3e20323639353935.roa (raw, json)
Hash identifier:          ZSjvU/3PJGC5cvJ1sd6wBerSmpYlwP7wp7nq/yL6zUM=
Subject key identifier:   F0:3E:F7:E2:3C:18:3F:84:5A:CE:D8:F5:DF:52:3D:90:50:53:A5:E7
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       60ED21FAB48BB642B863CA1A3DA7F1CA9F285566
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3232203d3e20323639353935.roa
Signing time:             Tue 15 Aug 2023 21:52:34 +0000
ROA not before:           Tue 15 Aug 2023 21:47:34 +0000
ROA not after:            Tue 13 Aug 2024 21:52:34 +0000
asID:                     269595
IP address blocks:        45.188.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ed:21:fa:b4:8b:b6:42:b8:63:ca:1a:3d:a7:f1:ca:9f:28:55:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Aug 15 21:47:34 2023 GMT
            Not After : Aug 13 21:52:34 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b4:fa:8d:78:a1:cd:ff:08:3d:10:f6:f1:73:
                    3e:a2:b9:47:76:6f:e5:bc:ec:1d:75:0a:b5:a9:a8:
                    34:73:d7:b2:d0:25:39:3a:1f:f9:62:be:6d:2d:b7:
                    43:f0:ad:3e:93:4d:71:76:19:0f:c2:c3:0e:a9:b3:
                    ff:4e:ad:58:d3:ec:c2:7d:ae:e7:fd:89:cb:f8:97:
                    1d:86:f0:b0:f4:70:e8:c6:f1:c7:ce:2e:2e:4a:ab:
                    ec:53:7a:3f:bd:e5:a9:2f:c7:8c:10:71:0f:a5:7f:
                    15:10:1a:96:3f:cb:be:38:c8:c4:7a:96:a7:79:2e:
                    92:65:45:4d:2f:54:19:82:85:20:6a:68:c9:b6:17:
                    27:dd:f4:48:80:6f:93:1f:88:ad:3b:4a:a2:fd:71:
                    a1:3f:c9:28:e1:f9:64:6d:10:2d:7c:b3:f9:d6:f6:
                    e9:6f:aa:ae:19:93:0e:02:e4:2b:cb:28:0e:58:a5:
                    84:31:c3:f6:1a:18:ad:e1:9c:d0:22:6a:b7:7b:37:
                    09:4a:a1:c5:58:ac:07:2c:6b:c4:f5:56:9b:fe:cc:
                    98:a2:0e:ed:f8:fc:ce:62:6f:50:a7:ad:08:f1:49:
                    dd:25:6d:41:1a:74:2b:26:17:e8:f9:ed:ef:d3:8f:
                    3d:7e:de:19:08:91:92:d7:ed:0f:71:af:d8:0d:93:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3E:F7:E2:3C:18:3F:84:5A:CE:D8:F5:DF:52:3D:90:50:53:A5:E7
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3232203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:91:7d:b4:65:6a:f3:78:2a:44:f8:7c:89:c0:99:92:6d:
         7b:dc:a2:f5:b3:60:6f:87:88:4f:2f:59:7b:45:42:fa:5d:87:
         2d:12:b7:2f:2b:70:89:d9:b5:1f:85:01:0f:14:e7:fd:32:f6:
         10:8b:f1:58:17:6d:d5:9b:fb:6b:2f:13:09:c7:00:cf:22:64:
         3c:8b:db:23:ac:89:cc:40:fa:a4:f4:05:f5:48:8b:44:7e:37:
         a5:90:3a:98:74:da:f2:cd:d9:fe:7e:f3:51:42:74:7b:97:a1:
         5a:66:13:5e:7b:4f:ef:98:eb:15:17:a6:65:39:63:8f:26:c1:
         02:ab:e5:e7:92:4c:49:d7:26:d2:9c:e6:e3:ca:23:30:51:6f:
         cf:2b:63:12:3d:12:30:35:bb:72:1f:ec:fe:91:8b:21:d0:3d:
         e4:f2:27:3a:8a:f2:74:27:39:de:80:6f:28:ee:8e:c5:05:19:
         39:e2:4c:b9:97:4c:a1:8c:fa:1a:58:8c:3b:2b:86:13:e1:f3:
         77:4a:fd:ef:92:4f:08:ec:e4:6d:8b:0c:9d:38:62:a3:10:37:
         b4:cd:0f:aa:80:9d:fe:d6:e7:8f:ab:86:f7:63:a6:81:46:b0:
         28:5b:a7:bc:7a:ff:30:60:1d:eb:3f:01:61:5c:9d:6b:23:6a:
         73:3e:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org