Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139392e302f32342d3234203d3e20323637323138.roa
File:                     34352e3233312e3139392e302f32342d3234203d3e20323637323138.roa (raw, json)
Hash identifier:          nVXmpjwirYc7C7pGthw0gtPP2NkyC2TQY5Fxhd3/up4=
Subject key identifier:   DC:AE:52:35:9C:2A:93:E2:31:73:DE:DE:88:70:A5:DA:A9:02:8D:AF
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       1598E6D117FD1F8DE99ACA835EBED3E107C35121
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139392e302f32342d3234203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:56 +0000
ROA not before:           Sun 18 Feb 2024 03:12:56 +0000
ROA not after:            Sun 16 Feb 2025 03:17:56 +0000
asID:                     267218
IP address blocks:        45.231.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:98:e6:d1:17:fd:1f:8d:e9:9a:ca:83:5e:be:d3:e1:07:c3:51:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:56 2024 GMT
            Not After : Feb 16 03:17:56 2025 GMT
        Subject: CN=DCAE52359C2A93E23173DEDE8870A5DAA9028DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:8b:86:75:2d:87:0b:91:22:7f:8c:4d:09:
                    81:13:3c:2d:b7:a8:70:0e:7b:40:10:6d:29:40:d6:
                    2f:71:53:f1:2f:c8:86:27:74:18:d8:12:c8:0b:a4:
                    c6:1e:2b:d7:47:5b:c3:1a:b3:73:d3:92:10:45:59:
                    98:d8:de:d0:b2:46:42:6f:e0:1d:22:2d:c4:30:f2:
                    89:f5:d3:d8:d5:fa:c6:6e:03:7c:fc:41:16:9d:5f:
                    f3:94:7c:f6:4e:5f:a5:32:71:c4:48:f1:1f:68:1d:
                    4a:db:dc:fb:d1:54:13:0d:72:7b:d1:44:fb:f7:ab:
                    fa:1d:de:e7:b2:a4:64:b2:a1:a4:0c:fc:44:15:f1:
                    4a:49:2e:0a:ea:26:fd:f6:9d:4c:2b:22:22:a0:78:
                    16:1f:d0:8d:d8:8d:34:9d:94:83:22:f8:ec:31:e3:
                    3f:04:b4:54:ff:4f:6a:e4:b5:c3:ab:28:81:95:bb:
                    0d:ed:c4:79:b8:19:88:4d:c7:6f:f3:fc:72:48:6f:
                    d8:0b:14:b2:0f:29:13:46:4e:57:2b:07:3d:bf:69:
                    ba:b4:60:5f:0b:09:6a:43:de:9e:a6:98:68:c2:27:
                    e8:f3:f5:d8:98:3d:38:ca:de:0a:c6:e2:a9:0a:3a:
                    84:cd:ee:a0:8f:07:90:27:5a:29:9b:55:8c:12:9e:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AE:52:35:9C:2A:93:E2:31:73:DE:DE:88:70:A5:DA:A9:02:8D:AF
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/34352e3233312e3139392e302f32342d3234203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ed:07:7b:f0:1f:f0:44:4f:27:65:44:0b:ac:47:58:d5:0d:
         ed:c3:1c:1b:64:df:c1:04:56:05:95:f1:42:0a:a2:23:60:21:
         be:e8:f3:cc:3b:d5:bb:aa:e8:c9:91:70:bc:ae:61:ee:c2:ca:
         7f:5d:38:b2:de:0f:88:4d:fc:84:0e:4f:d5:a4:16:d5:3b:2d:
         17:5c:4c:12:76:31:f5:7d:a9:11:d0:89:3f:4d:5a:ea:2b:cd:
         f9:31:a9:b9:67:11:e6:59:fe:9c:43:da:dd:7b:a8:a0:79:64:
         54:b4:b5:d8:47:02:73:d3:20:7d:c0:ca:2c:50:07:ef:23:19:
         5e:b8:d4:2b:a4:9e:50:18:94:59:7d:1e:d6:f2:ff:42:ba:78:
         a9:ad:3e:40:29:7f:fd:d2:1d:31:34:cb:7c:41:d9:e8:bd:fe:
         65:2a:60:e4:e6:7c:2d:1b:84:a7:78:30:f2:6a:8b:ce:39:d5:
         e5:0f:ab:72:39:cd:e0:5b:0b:59:c1:2c:f7:e7:9c:54:9a:e8:
         86:b3:fc:e9:bb:ad:8b:8b:68:80:e6:a2:3a:05:d6:b0:f2:85:
         ed:49:33:fe:b4:06:79:bc:a7:f9:62:8b:6b:ec:a9:c0:8a:24:
         e6:b4:f0:6b:fc:0e:8a:b5:b5:c1:04:ca:bd:c7:8b:da:50:aa:
         c4:50:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org