Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa
File:                     34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa (raw, json)
Hash identifier:          d2wl/pBh6/f9a7kovIRMrJfFmBKaz2Ksju9mpoB8WYI=
Subject key identifier:   A5:6B:EE:6B:A3:2F:39:79:2D:77:65:CF:BD:AF:AB:93:61:50:34:DA
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       74E958729EC50C389E456C171BC137D858443B60
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:47 +0000
ROA not before:           Sun 18 Feb 2024 03:12:47 +0000
ROA not after:            Sun 16 Feb 2025 03:17:47 +0000
asID:                     267218
IP address blocks:        45.231.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e9:58:72:9e:c5:0c:38:9e:45:6c:17:1b:c1:37:d8:58:44:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:47 2024 GMT
            Not After : Feb 16 03:17:47 2025 GMT
        Subject: CN=A56BEE6BA32F39792D7765CFBDAFAB93615034DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:16:88:5c:db:1b:ff:3a:d6:d7:b4:50:25:
                    e0:07:9b:81:bc:5b:c5:6e:33:c6:eb:bd:48:26:95:
                    19:26:a1:51:e2:87:14:47:1e:90:87:8b:90:43:c5:
                    68:25:b1:c4:af:bd:20:36:d8:ae:84:94:ed:95:70:
                    17:e3:63:cb:f2:b1:5a:be:7d:a4:15:2b:e8:7c:63:
                    26:d8:38:bd:d4:c9:a7:3b:ae:cd:db:29:0e:1f:f9:
                    7a:81:f0:e3:67:69:2b:d1:f6:90:d9:22:e6:11:ec:
                    13:0e:a7:30:a1:7c:3e:ae:71:7c:57:d1:db:19:de:
                    42:6b:22:f4:eb:92:b9:74:4e:29:20:dc:ac:2d:be:
                    dd:96:ba:c9:e2:b1:9d:d6:b9:c9:41:9a:77:b0:1e:
                    f3:b8:c4:b8:ea:68:0f:21:6e:10:bf:fa:df:d0:f5:
                    a9:cd:76:24:3e:0b:0a:47:fb:43:d0:bb:08:30:70:
                    9c:68:55:5b:e3:20:35:07:30:c3:7e:4c:d4:91:40:
                    da:e7:46:79:5f:9f:53:8d:0f:1e:70:5e:79:bf:ab:
                    d9:85:0e:8d:1a:78:58:10:59:58:a0:6a:c3:34:89:
                    ad:5b:1c:0a:46:e9:a1:59:68:19:85:31:7a:76:ed:
                    25:0e:2e:ec:31:0f:58:4a:7f:a3:2a:bf:06:4c:bf:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6B:EE:6B:A3:2F:39:79:2D:77:65:CF:BD:AF:AB:93:61:50:34:DA
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:65:2d:35:5c:8b:dc:a5:8c:8d:5b:7c:4e:35:ff:69:bc:33:
         41:18:2a:5f:d2:a4:b3:bd:41:b6:da:c6:fb:5b:48:66:62:a9:
         5a:79:5e:6f:46:23:10:96:ba:49:2f:4b:78:c9:d2:4f:63:21:
         2b:f9:d7:c1:f8:34:ae:a6:f0:88:1e:82:d0:bc:4a:d7:4c:d6:
         e9:26:f1:dc:d1:4d:5e:d5:69:d2:07:dc:94:6c:1f:96:83:00:
         54:0d:c4:05:27:0c:fa:45:45:8f:ca:7c:59:50:f2:ad:fe:10:
         70:81:2d:f4:8d:75:5f:da:d9:14:9b:92:5f:bf:c7:82:c6:68:
         22:6e:53:35:80:8e:5f:fd:5a:44:56:87:1b:15:b8:89:5c:68:
         8b:ef:83:8e:a9:f1:ca:f1:5d:bd:61:c0:26:44:d1:38:2b:82:
         83:36:32:d5:98:3f:fc:15:83:68:af:84:6c:35:d5:41:7d:f6:
         4d:83:fb:6f:30:ce:d5:06:eb:52:3b:39:aa:7d:aa:00:d2:fd:
         ac:97:7b:13:9b:38:d8:5c:ab:01:8c:63:1c:7d:05:11:6f:fe:
         6e:09:56:bb:60:33:d0:23:80:d2:5e:56:e2:93:a6:90:ac:46:
         c9:15:81:96:58:b5:88:2e:05:58:c8:5c:eb:2f:e2:15:d3:7b:
         42:99:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org