Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32332d3233203d3e20323638333533.roa
File:                     34352e3233392e35322e302f32332d3233203d3e20323638333533.roa (raw, json)
Hash identifier:          MHsh50sbhXWK2WbaK35YlKaLci4K3pv0Oq7Orzpz520=
Subject key identifier:   63:AF:2D:8A:9E:DD:CA:15:A8:65:3B:A4:6F:22:43:A6:01:ED:B9:72
Certificate issuer:       /CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
Certificate serial:       3B2FDB753C0503A83FB9EDEFDE94AD5AF461C04E
Authority key identifier: 95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32332d3233203d3e20323638333533.roa
Signing time:             Tue 21 Nov 2023 21:14:18 +0000
ROA not before:           Tue 21 Nov 2023 21:09:18 +0000
ROA not after:            Tue 19 Nov 2024 21:14:18 +0000
asID:                     268353
IP address blocks:        45.239.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2f:db:75:3c:05:03:a8:3f:b9:ed:ef:de:94:ad:5a:f4:61:c0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
        Validity
            Not Before: Nov 21 21:09:18 2023 GMT
            Not After : Nov 19 21:14:18 2024 GMT
        Subject: CN=63AF2D8A9EDDCA15A8653BA46F2243A601EDB972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:9e:71:ff:8e:6f:1c:f9:43:28:6f:0b:09:
                    ee:7e:65:07:e9:84:d6:63:4c:d5:6b:80:e7:bf:7f:
                    58:9d:b5:9c:fe:32:f1:32:d4:e3:58:42:af:ed:b2:
                    5f:ad:f9:32:96:53:12:7b:4b:6b:ed:93:80:07:be:
                    83:af:aa:4a:54:b2:0c:5f:83:89:e6:9b:53:35:99:
                    da:34:b2:d1:70:83:fa:95:50:63:30:da:b4:3f:0a:
                    07:d5:64:f4:fb:40:e4:6f:cd:f2:9a:f6:ef:6e:a4:
                    81:ab:1a:17:16:97:67:ac:41:a6:39:ab:80:47:81:
                    f4:f1:47:0b:5b:82:1f:73:05:91:03:1b:74:f8:3a:
                    86:18:76:e8:b8:d6:0f:7e:9d:08:81:d7:60:52:3e:
                    f0:17:f7:8e:f1:ac:12:d9:a3:25:49:76:3e:15:40:
                    5c:33:e8:71:c2:57:b2:58:fc:e4:93:53:b5:48:b4:
                    f1:11:f2:d7:86:44:6c:33:da:60:3e:d3:18:7d:29:
                    30:70:95:e3:91:53:a4:24:cb:7d:b9:37:3b:6c:a3:
                    85:cf:8b:18:77:24:94:f9:bb:ad:46:a9:b5:4c:6c:
                    0c:23:a4:75:de:2d:df:e5:38:8f:39:ad:20:f0:0b:
                    1f:00:15:52:8b:25:39:0a:b2:7f:4f:9c:3f:90:c4:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:2D:8A:9E:DD:CA:15:A8:65:3B:A4:6F:22:43:A6:01:ED:B9:72
            X509v3 Authority Key Identifier:
                keyid:95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32332d3233203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:82:7b:3b:44:ce:2e:2b:ef:23:68:3e:8e:2c:3c:69:91:96:
         8d:2e:7a:19:79:ce:5e:53:59:c9:39:90:5b:82:5e:06:30:0a:
         5b:15:d3:06:2c:fd:e1:5f:9e:9e:8c:4d:8f:d8:bc:de:30:63:
         a3:a4:a1:90:6e:c4:b5:bc:95:11:42:35:33:8b:ba:9a:bb:e3:
         5d:9d:30:63:f4:7d:b9:d8:9d:ca:05:94:3c:30:11:d6:f2:8d:
         ce:7f:26:2b:78:a9:2d:b9:df:c5:fd:88:77:f9:b1:3b:8a:8f:
         a1:50:e6:58:6c:5e:cb:01:32:ce:f9:88:c1:ff:0b:1f:f9:3b:
         eb:08:38:6d:af:17:b7:f0:9c:20:f8:d1:1b:94:ae:60:46:32:
         8e:7f:b7:e1:9e:bd:71:45:59:fe:2a:c6:7d:38:48:85:23:77:
         78:82:3e:b4:0b:27:3a:ba:13:11:99:f8:e2:e7:78:5b:75:28:
         f0:5d:df:5d:d8:b7:c6:15:ba:4d:67:93:89:b2:67:00:8f:55:
         d9:8e:ec:58:13:9b:b7:b7:e1:95:30:8f:34:4c:ec:3c:f1:7c:
         2b:21:8e:4d:e8:7b:70:a1:4b:f9:d1:66:d8:1f:76:2e:5d:50:
         b6:e9:cf:15:f2:87:6b:38:53:a5:71:18:0c:7c:bf:43:04:6c:
         1a:6e:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org