Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32332d3233203d3e20323639353538.roa
File:                     34352e3138392e32382e302f32332d3233203d3e20323639353538.roa (raw, json)
Hash identifier:          RY9/bCtxrcAdmfooW9vbZOX3Q88hufs5tWbbcoi6Nuo=
Subject key identifier:   8E:25:59:94:39:3A:31:55:45:47:AE:DA:8F:5C:7E:82:17:6C:50:B3
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       6901BCF2B06A3F6382410A3FA9FDA918AA004E26
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32332d3233203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:24 +0000
ROA not before:           Wed 29 Mar 2023 02:25:24 +0000
ROA not after:            Wed 27 Mar 2024 02:30:24 +0000
asID:                     269558
IP address blocks:        45.189.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:01:bc:f2:b0:6a:3f:63:82:41:0a:3f:a9:fd:a9:18:aa:00:4e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:24 2023 GMT
            Not After : Mar 27 02:30:24 2024 GMT
        Subject: CN=8E255994393A31554547AEDA8F5C7E82176C50B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:e9:89:ff:f6:cf:50:20:8f:95:e4:d7:47:
                    9f:c1:eb:42:6a:61:a1:e3:c6:2c:68:e2:58:d7:f3:
                    3e:03:f1:07:1c:0c:c6:0d:b5:3b:3d:cc:80:29:ff:
                    9a:75:fd:f6:ab:ed:f0:d7:88:d7:cb:d6:ac:3f:96:
                    d3:18:d4:ad:b1:24:61:12:52:d5:43:0f:32:17:5a:
                    21:ba:b3:04:a0:45:1c:0a:f1:1f:5c:28:69:d1:80:
                    1d:bb:27:48:a7:5a:48:a8:70:a7:8a:8a:86:6f:11:
                    27:a0:32:25:7d:51:14:f6:8e:f8:85:b0:47:85:b6:
                    93:8e:5f:ee:5a:7d:a0:d1:92:52:21:ef:76:84:ff:
                    fe:20:0f:64:39:9e:fe:e4:8c:d1:9c:6a:8f:f6:b3:
                    24:83:50:92:da:4b:35:b8:b9:6f:5e:84:9f:56:c9:
                    40:35:7c:ae:50:a8:47:e4:23:aa:b3:bb:e9:e2:12:
                    16:fd:a0:38:5d:d8:a1:3a:a6:07:78:b8:c1:9f:2f:
                    a8:21:9a:bd:21:14:ee:36:77:29:31:b1:cf:98:9b:
                    22:58:32:da:26:f9:6a:64:59:fa:cc:16:96:7b:da:
                    4c:f9:0a:8e:ed:da:f9:fc:34:6d:4c:ca:70:b9:f0:
                    f5:6e:db:6e:85:8c:20:85:4a:ff:d1:66:2a:c4:31:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:25:59:94:39:3A:31:55:45:47:AE:DA:8F:5C:7E:82:17:6C:50:B3
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32332d3233203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:31:64:11:d4:e0:f8:cb:3a:7b:0f:15:84:bc:f7:26:f9:
         f2:7e:22:b7:c3:4d:19:cb:48:f0:b1:9f:aa:4f:4d:16:cd:51:
         c6:eb:46:00:d4:2f:02:dd:9f:9b:1f:7a:f1:4b:1a:70:11:51:
         f6:92:d3:93:03:31:f3:04:ef:86:89:76:78:bc:cf:ed:e9:2f:
         6d:69:77:0b:04:2b:d5:7e:f2:f3:ca:94:c0:28:ba:1a:b5:08:
         17:f8:c4:36:5e:fe:6b:5c:e1:87:97:9b:3a:d3:ed:60:ed:49:
         17:c8:df:d1:b0:8d:fa:d9:d0:f8:7d:e7:25:81:62:13:19:0e:
         ce:9a:16:b5:3c:a9:76:5c:52:c9:68:63:a9:53:fd:c8:eb:9f:
         cb:de:da:d8:b8:82:14:c7:da:28:ea:9c:12:54:69:7b:ec:45:
         a7:4c:93:8b:69:62:3b:54:31:e5:06:2b:ac:f0:fa:c6:06:d1:
         e3:cb:44:f8:4e:ee:f0:04:bd:c2:ec:6b:59:3f:e8:c2:f0:55:
         e6:85:16:0f:e8:ce:58:3a:7a:dc:5d:92:ed:de:5d:ba:aa:83:
         ba:b4:39:56:c7:ab:05:1d:12:aa:c4:96:42:94:a9:d3:dd:55:
         98:50:b7:7b:ef:ee:9b:32:86:f9:8a:ff:f1:34:4d:31:5e:95:
         e9:43:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org