Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39352e302f32342d3234203d3e20323639313637.roa
File:                     34352e3138302e39352e302f32342d3234203d3e20323639313637.roa (raw, json)
Hash identifier:          wB/fD6vv8dpyevy/eN9JppXw6XM0h7WfADs0hS8tf0I=
Subject key identifier:   05:E7:B9:47:8C:50:EB:A7:C0:F1:F0:B2:06:69:31:11:6E:A4:EC:0C
Certificate issuer:       /CN=355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF
Certificate serial:       473E404BFEAB911C225841372B6793D97255C7BB
Authority key identifier: 35:5B:10:65:0D:F5:BB:4E:3A:92:9E:D6:6E:6B:FE:A2:5B:BB:94:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39352e302f32342d3234203d3e20323639313637.roa
Signing time:             Wed 14 Jun 2023 01:08:32 +0000
ROA not before:           Wed 14 Jun 2023 01:03:32 +0000
ROA not after:            Wed 12 Jun 2024 01:08:32 +0000
asID:                     269167
IP address blocks:        45.180.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3e:40:4b:fe:ab:91:1c:22:58:41:37:2b:67:93:d9:72:55:c7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF
        Validity
            Not Before: Jun 14 01:03:32 2023 GMT
            Not After : Jun 12 01:08:32 2024 GMT
        Subject: CN=05E7B9478C50EBA7C0F1F0B2066931116EA4EC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:a7:3a:55:0c:a1:53:50:92:6d:32:c6:99:
                    29:91:8d:07:2c:2f:c8:ba:1f:4b:34:0d:52:52:38:
                    f8:74:77:e3:3c:cb:e9:56:0f:7f:4a:92:eb:f3:b1:
                    9d:1c:64:73:c1:d2:70:2e:e9:56:6e:ec:9f:59:15:
                    c1:2e:7b:e7:83:24:3d:a0:b0:22:36:1f:3d:d2:a0:
                    14:5c:48:8e:7d:e6:a6:28:c0:69:e4:a9:90:d8:17:
                    11:17:7d:9b:d3:50:84:82:d3:9e:2c:47:f8:3a:0b:
                    e6:71:bf:0a:f4:a7:17:8a:c6:93:51:5d:58:b5:be:
                    7f:83:b8:97:2c:59:b7:3c:85:b5:af:fa:15:a9:fb:
                    ee:6f:95:cf:37:94:6f:79:76:7e:87:9f:aa:d9:e4:
                    c3:76:38:ab:33:ec:6d:b6:86:5e:45:92:96:ef:a4:
                    91:71:45:0d:3c:e7:5d:92:4b:bb:6d:19:5d:29:5f:
                    20:34:08:72:99:cb:b3:98:25:15:bf:22:ee:3d:c3:
                    b1:83:60:a5:aa:5a:a0:0a:ca:1d:e5:ee:9e:a5:9b:
                    08:67:aa:b6:31:bb:cf:7e:43:e3:31:e0:24:d8:d9:
                    76:b2:f9:2c:d3:fd:db:62:b2:4d:c4:3f:cd:99:7e:
                    f4:4a:85:77:cd:e8:81:8a:76:cf:4d:7b:f9:d0:82:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E7:B9:47:8C:50:EB:A7:C0:F1:F0:B2:06:69:31:11:6E:A4:EC:0C
            X509v3 Authority Key Identifier:
                keyid:35:5B:10:65:0D:F5:BB:4E:3A:92:9E:D6:6E:6B:FE:A2:5B:BB:94:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/355B10650DF5BB4E3A929ED66E6BFEA25BBB94AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kdoj5pCuARb2jXFGcU1hHcT5BQpWZPDAHqDXhsZB433/1/34352e3138302e39352e302f32342d3234203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:09:2f:bc:cb:cb:57:15:10:aa:96:8b:21:44:13:d4:83:4e:
         bc:07:08:2b:66:84:72:12:94:7b:f6:ea:16:7d:9b:8d:b7:b7:
         b0:13:2b:8b:d9:d5:7f:00:ad:49:3a:c3:f1:19:91:1b:ae:ba:
         fe:93:f5:63:10:6a:f5:37:ff:84:34:cb:fc:51:dc:19:35:d2:
         32:df:fb:66:86:03:97:5a:92:ca:20:11:b8:ae:76:9e:e3:b7:
         c8:6c:21:a0:df:90:8d:f2:54:39:2e:e7:f6:98:6c:8e:cc:c9:
         24:ca:bf:56:b6:66:e8:b7:7c:cc:39:3b:78:65:c1:c0:00:e6:
         49:40:dc:ff:2b:a1:f7:35:d8:b2:d1:74:97:7f:40:0c:9a:41:
         96:f2:fa:a0:b5:7a:75:7a:d3:f7:27:7e:8d:ca:e6:df:77:45:
         d0:bb:db:02:6a:21:57:40:a3:bc:06:1a:d0:a3:f8:76:5f:79:
         d9:56:a8:ca:fd:80:1d:8e:c6:a1:a9:87:ee:1c:3e:1b:5e:af:
         83:7b:f8:9b:2f:71:40:24:ae:b7:a0:a5:e8:41:47:e4:4f:cc:
         a2:1e:14:f3:84:05:d1:e3:5c:d6:ab:89:65:00:04:ec:3e:a0:
         47:4b:9f:45:c9:54:5a:e0:fa:1b:e9:8c:65:b8:1e:a7:eb:fa:
         d3:40:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org