Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233362e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          5cwxIrcOIu54F4w03nMByfRao/oi0DY+qGyaGP1neVg=
Subject key identifier:   20:D3:7E:A0:8B:DF:4A:3B:A7:BA:5B:2C:89:1E:87:26:9A:A4:8A:17
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       3CF75CC30F845A8E9495E9C010DDC72B07928CBF
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32342d3234203d3e20323639353935.roa
Signing time:             Tue 15 Aug 2023 21:52:34 +0000
ROA not before:           Tue 15 Aug 2023 21:47:34 +0000
ROA not after:            Tue 13 Aug 2024 21:52:34 +0000
asID:                     269595
IP address blocks:        45.188.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f7:5c:c3:0f:84:5a:8e:94:95:e9:c0:10:dd:c7:2b:07:92:8c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Aug 15 21:47:34 2023 GMT
            Not After : Aug 13 21:52:34 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:4b:1e:ef:98:42:ad:d2:42:4e:03:f2:7f:
                    ce:ad:88:37:28:5a:6f:92:eb:d5:ab:60:b1:d3:0d:
                    87:d2:b2:67:b0:59:a1:7a:84:46:cd:e5:4c:38:7e:
                    52:e3:16:93:ed:01:f0:ce:ef:a8:e6:33:a9:0b:36:
                    78:8b:72:43:92:42:52:05:7f:9f:0f:cc:c0:3e:3b:
                    d3:d3:62:54:6e:27:82:ad:7a:77:fd:eb:ab:bb:73:
                    b4:bb:ae:2d:43:11:e2:37:60:0f:9f:5e:80:03:39:
                    e3:f5:c1:b8:d8:b7:e4:96:1f:93:42:71:be:78:e3:
                    5a:f9:f5:30:8b:1e:bd:93:21:ca:47:5f:37:b1:91:
                    03:e0:ce:74:69:05:e7:e6:af:1c:20:e3:be:88:67:
                    ad:e6:d3:f6:45:d5:67:10:d3:5b:f0:de:d4:2a:28:
                    c1:2b:6e:f9:b5:1c:3e:f3:4f:b1:e1:e5:1c:89:1f:
                    25:8f:5d:a7:e2:7b:e2:d9:7b:11:66:6e:1e:88:bf:
                    72:81:27:a8:5d:07:85:91:7f:7c:f2:94:65:91:32:
                    e5:48:b1:a3:1c:11:c8:4b:bd:4d:4d:7e:4d:fe:aa:
                    9e:10:1d:4f:54:f1:59:78:72:48:6c:3b:f0:fc:04:
                    18:e6:df:88:67:d8:64:6f:ae:b0:f1:32:f5:f0:7f:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D3:7E:A0:8B:DF:4A:3B:A7:BA:5B:2C:89:1E:87:26:9A:A4:8A:17
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233362e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:16:b6:cf:34:b2:9f:76:05:d6:d2:e9:80:6c:ed:d6:58:
         fe:49:dd:5c:42:eb:30:f1:ed:2e:5d:c6:ad:05:24:1b:8d:03:
         ba:28:ec:30:d3:86:86:23:34:ec:50:6b:b4:18:37:3b:13:84:
         95:95:fc:25:02:c3:1e:38:74:63:dd:e4:70:c0:82:c9:a5:d1:
         bf:c5:9c:3a:db:4b:25:61:a2:34:81:21:36:23:66:a7:23:1d:
         e7:e6:8f:67:73:17:d8:c4:4b:75:35:84:a2:8f:ee:cb:e5:e9:
         d2:ce:31:41:75:ed:99:1d:c6:e7:0f:5f:72:63:7c:80:50:92:
         35:17:e7:6e:48:61:6e:39:f0:ba:4a:3a:30:7c:79:11:61:df:
         65:4e:79:17:ff:ba:c3:49:92:68:e4:4f:bd:00:5e:d5:66:3a:
         79:3d:5f:e4:b8:6f:92:be:89:1a:47:e1:65:12:0b:89:2c:e5:
         60:9d:f8:85:dd:a6:56:a4:f9:2b:56:80:40:2f:3f:9c:19:96:
         60:1b:67:ac:a5:68:69:dc:16:48:ba:42:bb:38:cd:70:e7:ba:
         89:d7:48:dd:7e:37:b8:73:61:ae:5f:7f:49:a6:57:6a:23:6d:
         00:6c:98:58:a8:54:f5:ca:32:2b:44:1a:a5:a2:d8:bf:87:42:
         32:c0:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org