Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          lpz0qd/uP5l4iXdUBBtmi4R3VL4ZQWG+hwxx2YG5Tk4=
Subject key identifier:   A0:CD:C8:7B:20:09:52:F8:F1:3F:BB:6E:A1:CD:58:3F:3A:95:6D:38
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       15F2CEBCBF9C4DDEC28A254C6556858D9E40B8F7
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
Signing time:             Thu 08 Feb 2024 20:51:04 +0000
ROA not before:           Thu 08 Feb 2024 20:46:04 +0000
ROA not after:            Thu 06 Feb 2025 20:51:04 +0000
asID:                     269595
IP address blocks:        45.188.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f2:ce:bc:bf:9c:4d:de:c2:8a:25:4c:65:56:85:8d:9e:40:b8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Feb  8 20:46:04 2024 GMT
            Not After : Feb  6 20:51:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:84:45:82:b5:b8:2b:7d:73:3b:3b:33:b7:
                    f4:f8:c5:93:a9:e8:ee:ee:15:ba:5c:d8:a9:b0:a3:
                    09:43:0f:f3:63:71:a3:2c:3f:27:dc:1a:b9:0e:8a:
                    f2:e6:d8:28:c9:d2:68:3f:c1:a0:76:75:e8:db:67:
                    ff:a7:b6:61:a3:e8:b3:50:c3:da:d3:37:0c:52:ee:
                    7c:00:67:1d:a6:ad:6f:fd:b5:73:2c:6d:26:6b:96:
                    8a:d2:6a:c8:00:bd:1d:5d:82:55:68:e3:2f:5c:9c:
                    3c:a1:74:03:9c:36:19:7c:b0:fc:75:0b:0e:27:6d:
                    98:bf:5a:5b:c6:7c:83:0d:2b:77:3f:42:43:1b:be:
                    d3:e7:82:0c:a1:80:53:3d:2e:8c:45:d2:07:e3:8b:
                    9a:e4:e0:97:3c:e7:f4:38:3a:f3:9c:42:e9:3e:50:
                    9e:a6:68:49:17:02:7c:79:a6:9a:7d:76:9c:39:ea:
                    99:a9:6b:7b:8e:35:b7:53:6e:3f:78:af:40:c0:61:
                    14:88:31:1f:7b:dc:a0:b6:05:a8:91:a2:34:76:4c:
                    2b:bf:6e:ae:7c:96:20:5a:27:46:68:ea:c7:92:e5:
                    70:f5:d5:da:18:26:49:ee:92:e7:d1:ae:de:be:ee:
                    23:ea:3a:4c:7a:8d:d6:99:cc:1e:a2:cd:2d:05:cb:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CD:C8:7B:20:09:52:F8:F1:3F:BB:6E:A1:CD:58:3F:3A:95:6D:38
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:96:c5:ea:c0:e9:72:4e:5f:22:08:14:21:be:6b:ab:5c:22:
         c2:d8:2d:e7:6e:8a:6e:6a:a0:fa:8b:60:07:f0:3e:01:d2:98:
         8c:2a:45:25:cc:6b:da:c9:8a:38:87:df:f9:1d:4e:83:df:50:
         bd:32:46:a3:fe:53:2b:2c:4d:21:04:7a:b0:41:f6:82:76:cc:
         cd:bc:b5:fc:13:f9:15:91:fa:ba:87:9a:14:48:87:6b:1b:0d:
         82:09:c1:80:e5:ae:51:66:8a:9e:2b:3e:50:01:52:d7:7e:33:
         3e:fe:3d:75:89:03:2e:8e:58:f6:a2:ba:9a:14:1d:ee:d8:0e:
         06:ae:83:12:7e:1e:e8:ab:34:1d:97:4b:ca:4b:a1:9b:25:5e:
         43:a4:1d:8a:42:fc:0f:a6:fd:02:49:5e:39:6f:d7:99:af:55:
         09:48:ac:08:8e:b6:c4:9e:ec:e6:78:ca:1c:de:ae:a6:d6:39:
         41:95:62:34:51:df:91:d9:8c:44:c9:66:69:a5:19:da:cf:73:
         c6:fa:d6:85:de:34:26:f7:64:0c:1f:ca:c4:04:a8:77:1f:61:
         6c:15:d2:93:6d:08:10:07:2a:81:0b:32:fb:91:dd:1a:de:a8:
         00:58:e6:4c:8e:4c:5b:7b:4c:de:f5:c5:0e:f6:a0:3f:f1:f7:
         c1:79:41:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org