Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa
File:                     34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          wH+ZecVvBEjaLShLUBZ0NmOtKrxJvX+lRifGTP1hZJQ=
Subject key identifier:   51:1C:97:63:25:B0:F0:2A:2B:1F:73:9A:EC:52:C1:35:AF:2F:F9:C5
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       7C5F86D145BBAB4D42AC98CCA3D968EF6841D4C9
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 10:59:29 +0000
ROA not before:           Fri 18 Aug 2023 10:54:29 +0000
ROA not after:            Fri 16 Aug 2024 10:59:29 +0000
asID:                     263347
IP address blocks:        45.162.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5f:86:d1:45:bb:ab:4d:42:ac:98:cc:a3:d9:68:ef:68:41:d4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:54:29 2023 GMT
            Not After : Aug 16 10:59:29 2024 GMT
        Subject: CN=511C976325B0F02A2B1F739AEC52C135AF2FF9C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:23:f5:77:e4:a4:87:54:b2:6f:0f:d9:ac:fa:
                    82:4d:b0:69:32:77:1e:f6:74:ac:fb:68:c4:af:07:
                    07:fb:33:7e:6d:eb:11:d7:56:70:83:14:24:56:57:
                    9e:84:af:24:0c:69:67:f1:ad:f6:53:a6:aa:64:c4:
                    ff:23:a4:b7:0d:7f:22:8e:81:1c:47:f5:80:63:57:
                    4d:b1:d3:0d:c9:9f:00:4e:c0:96:e1:46:82:ae:3a:
                    5a:cb:6e:9a:df:e2:1c:22:10:fe:5d:1e:c3:85:23:
                    e5:b5:58:72:73:5c:68:11:bd:95:7e:da:ee:69:4e:
                    db:3e:8a:81:87:81:ad:88:d8:b4:8c:f2:1d:18:90:
                    31:8f:d7:1e:0b:98:a4:3a:48:ce:a9:bd:49:c8:7a:
                    bb:0e:c0:11:97:ae:7b:09:88:c4:f4:a8:e9:a8:95:
                    0d:22:7d:cc:23:ab:9d:39:fc:de:e0:60:be:77:dd:
                    ee:b3:70:56:4e:f4:b1:8b:4c:fb:6d:e2:27:9e:2d:
                    4d:78:45:95:8b:0c:95:dc:13:0a:ed:1f:3d:92:c3:
                    d6:8d:82:71:db:99:f4:ec:51:2a:9f:e6:b5:ea:5c:
                    2f:5d:40:aa:2c:99:50:58:ad:11:4a:b7:ce:36:d4:
                    97:6f:42:90:9f:ce:99:65:3e:68:b1:97:2c:e9:de:
                    e1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1C:97:63:25:B0:F0:2A:2B:1F:73:9A:EC:52:C1:35:AF:2F:F9:C5
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:b8:09:ee:9b:24:0a:9d:48:9a:33:45:8c:bf:94:62:b9:
         f1:22:d9:53:a7:a2:ab:1c:69:22:75:d9:92:61:43:75:9c:cb:
         d7:5f:23:5f:2e:34:c0:1f:e2:c5:71:6c:47:9b:d3:fb:44:5c:
         73:db:f7:b5:1b:81:f7:f2:d2:00:b6:0d:b4:55:4a:ed:83:3a:
         c3:6c:f5:67:24:c7:cb:39:fa:26:5f:bb:ed:16:ce:4b:9b:88:
         5f:ef:75:5b:50:58:3d:a9:9e:60:d3:94:34:27:4b:44:2c:76:
         74:7d:2d:96:3e:32:bc:a8:c1:7f:aa:67:f3:e1:55:77:36:21:
         b4:69:d2:bf:27:b5:66:ae:e8:0f:59:82:5e:3d:0d:cd:76:6e:
         a7:d7:6b:57:87:b6:7a:93:35:9c:b4:fb:59:dc:0e:87:42:62:
         0a:77:bc:47:1a:f0:24:ac:b2:9d:c1:f7:d7:e9:bc:7e:44:66:
         88:4c:aa:04:1c:ef:b8:a1:b4:13:9e:0b:ad:d6:df:8b:59:bd:
         85:65:9a:c6:cb:b3:11:f1:05:86:b6:86:ac:dd:13:e6:b6:21:
         12:e0:bf:e8:fa:2c:95:a8:d0:8c:d0:89:0e:8d:6d:f9:24:6c:
         d9:98:10:53:1c:3f:ec:d0:ce:76:a7:74:11:da:c4:3a:16:5e:
         b3:1d:06:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org