Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39352e302f32342d3234203d3e20323638323637.roa
File:                     34352e3233372e39352e302f32342d3234203d3e20323638323637.roa (raw, json)
Hash identifier:          hC8lEZ1lrMsC19WepMfaGwvT50gEDW0JsFgu07+z3PQ=
Subject key identifier:   BA:55:88:B5:4C:3D:1E:4D:7A:DC:A6:98:83:62:31:70:06:59:DD:CB
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       0E5573BC443D96EF1BBB9C3024600C8C2028C4A4
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39352e302f32342d3234203d3e20323638323637.roa
Signing time:             Mon 02 Jan 2023 19:47:43 +0000
ROA not before:           Mon 02 Jan 2023 19:42:43 +0000
ROA not after:            Mon 01 Jan 2024 19:47:43 +0000
asID:                     268267
IP address blocks:        45.237.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:55:73:bc:44:3d:96:ef:1b:bb:9c:30:24:60:0c:8c:20:28:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Jan  2 19:42:43 2023 GMT
            Not After : Jan  1 19:47:43 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:93:eb:13:d0:7e:75:74:15:44:40:da:2a:
                    12:5e:f7:8a:d8:98:05:bf:84:91:d3:92:b0:e1:78:
                    b2:63:c1:ac:a0:98:8d:88:23:6d:04:ea:5f:4f:bf:
                    bf:9d:c1:66:54:f3:e2:2f:c6:d1:db:0c:75:d8:c1:
                    10:26:a0:55:aa:7b:b6:e8:be:04:0f:4c:28:81:a4:
                    52:50:88:28:f3:7f:96:7f:47:b8:1b:a8:a2:96:3d:
                    a1:ec:fb:2a:5b:e8:85:27:32:45:d8:5b:e3:02:01:
                    4b:db:0a:d8:08:f8:ae:b6:d1:30:cc:80:5a:62:17:
                    90:f4:00:c8:d6:bc:6b:61:9b:73:57:5f:f2:8d:70:
                    dc:1b:da:4c:46:26:17:d0:58:8f:bf:c4:6b:a3:6d:
                    86:9c:12:76:c6:b8:06:ba:b4:f1:3a:1a:1d:be:b1:
                    a1:d7:7e:42:74:d8:32:1b:55:69:d7:48:48:eb:7e:
                    14:cb:d8:b4:65:84:d7:13:85:c2:35:93:98:a5:e4:
                    c8:a2:a3:59:5b:3c:40:d1:9b:33:c6:75:99:ef:ae:
                    e3:7f:8e:e1:a2:8c:8d:8e:f1:94:f6:44:62:b0:e1:
                    1b:29:f4:0a:9f:74:d3:c6:d5:70:85:cf:04:a3:b9:
                    79:68:2c:7d:67:74:e4:ee:d6:0b:d9:fa:18:67:31:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:55:88:B5:4C:3D:1E:4D:7A:DC:A6:98:83:62:31:70:06:59:DD:CB
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39352e302f32342d3234203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:f2:08:02:90:e7:0a:a6:87:35:37:d5:3d:07:e6:86:ed:
         a5:1c:06:b0:dc:a3:21:fb:d0:9d:5f:8b:ea:46:17:45:2e:f7:
         a4:9b:89:7a:e2:1a:80:91:8a:a3:30:81:de:84:fc:7d:f2:18:
         bb:9b:31:88:03:55:17:93:fd:e4:14:8d:b8:91:95:d9:1d:4e:
         93:0c:22:61:76:28:13:2d:43:c0:cc:9e:01:d9:a5:d6:04:3a:
         52:e6:ff:66:a8:89:18:83:fa:2e:2d:40:69:3d:50:90:4e:12:
         79:75:0a:83:f5:29:c9:68:74:e1:b9:f4:ea:88:21:8e:7a:eb:
         cd:90:6c:cf:fb:77:c7:7c:fc:be:74:f2:41:0d:e7:5a:e9:86:
         1e:6d:f7:57:c2:65:6d:01:6b:6e:4d:ee:fa:5e:47:f5:30:46:
         e2:a4:4a:a1:09:46:a8:33:97:88:14:b5:3e:26:3c:54:35:2a:
         4b:32:37:41:a0:9d:60:de:07:ab:e2:28:c0:39:93:6d:42:f8:
         03:d5:e9:33:f6:b4:92:5c:26:3b:68:1b:8b:76:aa:90:89:04:
         b9:ee:db:1a:2b:32:18:3a:64:da:82:53:51:8b:46:ff:4a:f2:
         d1:71:69:b7:b6:7f:f6:e9:3f:1b:6d:d9:23:64:d7:97:71:9c:
         f9:12:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org