Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa
File:                     34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa (raw, json)
Hash identifier:          QgwdJqZOtqNPY4w0jz5KMBwJZ2xA4Ql1yi5un9btE6o=
Subject key identifier:   13:F9:B9:44:63:6A:28:0D:BD:8F:7A:2D:FF:65:60:4F:14:F9:0D:A1
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       0F05C55F2F41A0220FC47B16488C1C0D027AEC03
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa
Signing time:             Tue 15 Aug 2023 21:52:33 +0000
ROA not before:           Tue 15 Aug 2023 21:47:33 +0000
ROA not after:            Tue 13 Aug 2024 21:52:33 +0000
asID:                     269595
IP address blocks:        45.188.236.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:05:c5:5f:2f:41:a0:22:0f:c4:7b:16:48:8c:1c:0d:02:7a:ec:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Aug 15 21:47:33 2023 GMT
            Not After : Aug 13 21:52:33 2024 GMT
        Subject: CN=3082010A0282010100DCE89153C1493EE3D4CDC1DD2E367A2053A167BC0ED5E21F65F15C7F0A350C0F9BD32D069BAF275D4A0274BBDBE36178BDC823D4369771ECF331FFB68078A129634E3BD4777AFA8B339C0656AA4A7B8FB8C8D002ADC2E25885429EF6F1ADB3CCF7BB8FA6FF0E49FD6153E297EB8538510D7DDD6B893E67BE44FB99F0AB31E9DC7E425717D6E3B07382497B98A8D5A1C234200A8D62DDCEB4F7843FAEF307E4A6D7C8228320982B32D069A3BD847D5BB3B089ED80B9E831D761E014B5B0ED7174D9C9A9FB12666E3903E3B9A63E9CF0F296A4B3DFD8A37994B5FA3C42781EF9177E984431B32142A8B7D6CF92DCCB89B38B163442FE03A655C7F0B3F5CB1AD28D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e8:91:53:c1:49:3e:e3:d4:cd:c1:dd:2e:36:
                    7a:20:53:a1:67:bc:0e:d5:e2:1f:65:f1:5c:7f:0a:
                    35:0c:0f:9b:d3:2d:06:9b:af:27:5d:4a:02:74:bb:
                    db:e3:61:78:bd:c8:23:d4:36:97:71:ec:f3:31:ff:
                    b6:80:78:a1:29:63:4e:3b:d4:77:7a:fa:8b:33:9c:
                    06:56:aa:4a:7b:8f:b8:c8:d0:02:ad:c2:e2:58:85:
                    42:9e:f6:f1:ad:b3:cc:f7:bb:8f:a6:ff:0e:49:fd:
                    61:53:e2:97:eb:85:38:51:0d:7d:dd:6b:89:3e:67:
                    be:44:fb:99:f0:ab:31:e9:dc:7e:42:57:17:d6:e3:
                    b0:73:82:49:7b:98:a8:d5:a1:c2:34:20:0a:8d:62:
                    dd:ce:b4:f7:84:3f:ae:f3:07:e4:a6:d7:c8:22:83:
                    20:98:2b:32:d0:69:a3:bd:84:7d:5b:b3:b0:89:ed:
                    80:b9:e8:31:d7:61:e0:14:b5:b0:ed:71:74:d9:c9:
                    a9:fb:12:66:6e:39:03:e3:b9:a6:3e:9c:f0:f2:96:
                    a4:b3:df:d8:a3:79:94:b5:fa:3c:42:78:1e:f9:17:
                    7e:98:44:31:b3:21:42:a8:b7:d6:cf:92:dc:cb:89:
                    b3:8b:16:34:42:fe:03:a6:55:c7:f0:b3:f5:cb:1a:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F9:B9:44:63:6A:28:0D:BD:8F:7A:2D:FF:65:60:4F:14:F9:0D:A1
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:b7:60:9a:05:0a:82:f7:e1:0e:75:1c:e3:42:c7:17:cd:64:
         b2:95:d4:a7:88:36:38:19:cc:3f:c0:01:44:dc:bf:05:6e:b3:
         92:8e:91:11:b4:45:07:92:33:c8:ad:aa:18:0d:5e:20:94:ec:
         70:69:6d:cf:97:3b:02:de:9f:72:88:e5:8a:65:02:86:26:04:
         44:a7:5f:5b:8e:58:78:9c:5f:78:1d:57:de:56:dd:48:60:2d:
         e3:8e:92:78:a1:7b:3b:e8:c9:bd:01:a6:02:2e:35:7b:33:ab:
         54:2d:01:e8:8f:bc:18:3c:a0:e3:8d:21:78:da:88:af:39:49:
         78:e5:9b:5c:7a:f2:ca:10:9e:a8:e6:e2:31:0a:59:d8:a8:15:
         6b:8a:5a:fd:33:62:0d:d6:1f:b4:74:74:53:c4:6f:29:49:06:
         e2:6b:75:c0:b1:5a:0f:5b:a8:cb:31:b3:52:10:41:d8:9a:d6:
         4d:1b:0c:9f:c7:8e:7b:c7:38:d5:13:ce:bc:fd:82:f6:b0:f8:
         bb:82:94:13:b0:12:8e:7b:c3:c5:7f:8c:3a:46:be:9f:d8:6f:
         74:29:fb:66:e5:e9:06:62:5f:43:b5:d5:de:5a:f2:ae:d3:55:
         b4:77:93:ae:95:68:52:4d:e1:5b:dc:21:08:5a:ba:0d:4e:a2:
         d4:6f:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org