Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3234203d3e20323639353935.roa
File:                     34352e3138382e3233362e302f32322d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          6zZOi6KEWthVEG2aIIrJqlUEF5q1kZKAgQAG9of0Ekg=
Subject key identifier:   81:A2:97:1E:A4:89:04:C3:FD:1B:EA:44:B2:AD:1A:01:82:70:3C:99
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       31013629CEE21CC8D486B3729D0B5F40EF4B4455
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3234203d3e20323639353935.roa
Signing time:             Thu 20 Jul 2023 13:00:00 +0000
ROA not before:           Thu 20 Jul 2023 12:55:00 +0000
ROA not after:            Thu 18 Jul 2024 13:00:00 +0000
asID:                     269595
IP address blocks:        45.188.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:01:36:29:ce:e2:1c:c8:d4:86:b3:72:9d:0b:5f:40:ef:4b:44:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Jul 20 12:55:00 2023 GMT
            Not After : Jul 18 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:a9:d3:5d:9b:19:c8:76:db:6c:d2:b1:5c:
                    4d:c9:9d:93:a2:8a:a9:76:bf:21:94:8c:7f:ca:21:
                    3a:86:b2:db:ad:7b:fd:9c:03:c5:25:20:29:8b:bc:
                    20:90:5c:50:2b:94:0b:73:90:fb:b2:23:60:de:2d:
                    dc:10:89:5a:11:5e:ca:b5:81:d2:e7:db:f1:83:64:
                    0c:4c:ad:ed:49:2d:33:72:37:c0:68:40:d2:4c:22:
                    96:a5:59:64:23:8d:a5:8c:8d:73:4a:92:e4:23:97:
                    7a:a2:92:3e:ef:11:e2:15:1a:6c:57:42:16:87:1a:
                    75:55:46:a4:16:d3:de:1c:a3:23:91:a2:5b:22:c3:
                    07:aa:32:e5:63:3d:5c:bc:a4:74:f3:17:79:e8:7e:
                    a2:de:5f:a8:dd:ad:27:50:73:de:80:eb:cf:8e:a5:
                    67:28:3d:51:40:33:6e:71:f8:79:80:a2:30:cf:3a:
                    8e:c0:26:98:6f:24:fd:06:9a:2e:a6:ac:a0:34:b1:
                    85:36:93:b3:cc:a1:25:13:c6:11:88:88:c6:b1:91:
                    78:b6:57:0a:61:17:bf:67:4f:44:7a:b3:55:1b:ac:
                    2e:3c:6f:4c:1f:93:8b:98:03:f2:bd:4f:52:1a:40:
                    e2:42:c1:e3:54:7d:90:e9:5c:fb:ed:b0:70:93:0a:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:97:1E:A4:89:04:C3:FD:1B:EA:44:B2:AD:1A:01:82:70:3C:99
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32322d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:77:52:cd:f7:74:0d:5b:9d:9b:4b:90:10:13:9d:e4:fc:38:
         6f:e6:f0:6e:23:40:60:37:bf:4a:93:91:fa:f1:4f:2a:40:96:
         e6:7a:92:41:bd:ca:4d:1d:21:ae:12:69:75:4d:6b:71:6f:0c:
         1d:d0:a5:57:65:a6:7c:29:66:7a:a7:6f:0e:48:50:c8:db:74:
         df:08:9d:6e:a9:cf:8a:6b:c5:3a:a2:fd:ea:96:e7:10:ca:bb:
         f3:ea:7d:01:c6:c8:55:eb:79:96:bb:cb:64:8a:5b:83:74:c2:
         67:5f:65:7e:9f:da:62:c3:b9:f1:1f:65:d6:cd:50:61:00:66:
         da:3b:81:92:df:e9:c1:41:cb:ba:f9:e7:b7:01:e0:2f:b9:71:
         8c:1a:85:b6:49:50:65:ea:36:2f:dd:0d:a9:b5:dc:e0:b4:5e:
         c9:ef:00:a6:ba:21:e6:7a:f0:ae:cd:95:0e:df:b5:51:a1:f2:
         c4:8b:73:65:04:da:1b:cb:38:7e:b3:54:5b:00:d9:59:44:cb:
         3e:9d:a5:6c:74:b1:f8:0a:7a:63:f6:2d:ab:af:b8:78:43:7d:
         9e:94:57:c0:7b:c6:08:23:d8:0f:65:27:c0:79:73:c1:74:6f:
         22:a4:8c:9d:a8:bb:20:44:d9:05:79:06:a1:c7:82:d6:36:d6:
         2d:a8:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org