Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/34352e3138382e3135302e302f32342d3234203d3e20323635333335.roa
File:                     34352e3138382e3135302e302f32342d3234203d3e20323635333335.roa (raw, json)
Hash identifier:          e66UaK5HCOK5GaEb6/mV2Ub78EK0XLm45u7i+AO8Je8=
Subject key identifier:   5C:A6:80:94:4A:AF:9D:35:C7:A1:67:EF:13:44:D1:96:3F:D5:43:46
Certificate issuer:       /CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
Certificate serial:       0144B1A07D46B1C565B220CE072774117B0BED3B
Authority key identifier: F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/34352e3138382e3135302e302f32342d3234203d3e20323635333335.roa
Signing time:             Wed 20 Dec 2023 19:15:52 +0000
ROA not before:           Wed 20 Dec 2023 19:10:52 +0000
ROA not after:            Wed 18 Dec 2024 19:15:52 +0000
asID:                     265335
IP address blocks:        45.188.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:44:b1:a0:7d:46:b1:c5:65:b2:20:ce:07:27:74:11:7b:0b:ed:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
        Validity
            Not Before: Dec 20 19:10:52 2023 GMT
            Not After : Dec 18 19:15:52 2024 GMT
        Subject: CN=5CA680944AAF9D35C7A167EF1344D1963FD54346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:bd:79:62:11:91:92:9c:ca:42:55:b8:59:
                    2a:ee:f7:83:90:56:b0:c9:2a:24:ef:c6:29:99:95:
                    6a:7d:0b:d9:2a:63:7a:65:73:7e:c4:37:d9:df:77:
                    b6:50:51:d7:51:43:3e:4c:82:c9:39:cd:af:2f:df:
                    51:23:30:b7:c3:64:15:c5:b1:d7:b8:0a:47:c0:48:
                    c1:8b:a9:93:0f:de:11:98:ae:e1:e7:4f:2d:e5:1b:
                    e2:0d:16:01:43:01:22:fb:d9:67:ee:97:15:24:44:
                    02:c9:1d:da:a8:4d:97:a6:f1:48:0e:47:23:c7:cb:
                    a3:2e:17:28:93:87:fe:3d:85:18:fd:87:db:ed:f8:
                    7a:0c:e3:cb:f9:02:8a:8d:d5:d5:74:bc:d4:b1:84:
                    14:33:82:89:af:fd:1e:f1:f5:a4:1f:bb:bd:bf:c7:
                    8e:46:af:46:28:5d:98:29:a6:17:d9:4d:6f:1b:ca:
                    be:bc:a6:f6:92:cb:34:56:ca:63:f8:1b:2e:d6:61:
                    fe:79:29:d0:31:fd:c1:db:54:16:c2:06:5c:f1:19:
                    ec:c3:94:e7:91:72:ed:f1:aa:e4:fc:1f:bc:42:76:
                    a0:f8:78:d6:b8:59:a3:c7:29:86:51:f7:f3:0f:f8:
                    9b:13:cc:8f:01:b0:1c:48:2f:b0:47:67:58:dd:3e:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A6:80:94:4A:AF:9D:35:C7:A1:67:EF:13:44:D1:96:3F:D5:43:46
            X509v3 Authority Key Identifier:
                keyid:F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/34352e3138382e3135302e302f32342d3234203d3e20323635333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6e:f3:0d:31:2c:5a:e1:19:23:be:cb:3a:cd:4a:e8:82:a0:
         05:8d:29:77:c4:d0:1e:a1:a3:50:38:ce:9c:49:88:a9:dc:5e:
         1b:fa:6a:32:34:9e:36:a2:8f:75:63:88:de:d3:0a:b7:57:91:
         8a:b3:93:47:58:bc:ef:8a:21:9d:37:93:f0:9a:d3:3b:f3:4f:
         e3:d1:a7:a6:a9:d2:5e:9d:1b:2a:d3:8a:45:08:11:02:f0:8d:
         e7:0c:28:98:8b:5b:92:54:a1:0e:61:f0:67:70:9f:15:66:a8:
         8d:41:3b:2f:39:13:15:6f:67:2d:1a:85:68:fe:ba:95:46:c4:
         5b:f7:bf:38:8a:6d:56:c9:3a:6b:ef:70:f3:21:cb:92:aa:77:
         68:eb:b6:12:84:fe:89:f7:ed:b9:ef:f7:e7:8d:49:da:ac:0b:
         2b:de:ed:d1:ab:cf:fa:47:59:48:b6:ba:25:0d:59:71:cd:91:
         44:1c:cb:ad:ff:ad:90:6d:59:60:36:1b:fd:87:47:72:49:4e:
         08:0a:59:16:22:33:39:f4:aa:06:08:de:e0:48:d9:5f:de:95:
         10:bf:0d:9f:77:12:fd:50:0c:69:56:35:7d:b3:c5:c6:b8:8b:
         03:c0:e2:72:65:24:5e:15:ad:dc:10:0d:01:c4:6a:24:b6:1f:
         72:b6:a9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org