Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32332d3233203d3e20323731343337.roa
File:                     34352e3232352e38302e302f32332d3233203d3e20323731343337.roa (raw, json)
Hash identifier:          uhk3PiNK30BpGonb/UyFveHozRg/sAX2NST4M3HGdM8=
Subject key identifier:   87:AC:6A:47:11:85:B7:E2:4E:A6:79:FB:52:ED:CA:23:F4:AF:51:CF
Certificate issuer:       /CN=254D3F5CC2B8E5B651F6F590A793628658044C55
Certificate serial:       5AB768BBD74EE66875133A92ADB495ECBFFDB806
Authority key identifier: 25:4D:3F:5C:C2:B8:E5:B6:51:F6:F5:90:A7:93:62:86:58:04:4C:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254D3F5CC2B8E5B651F6F590A793628658044C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32332d3233203d3e20323731343337.roa
Signing time:             Tue 03 Oct 2023 00:24:13 +0000
ROA not before:           Tue 03 Oct 2023 00:19:13 +0000
ROA not after:            Tue 01 Oct 2024 00:24:13 +0000
asID:                     271437
IP address blocks:        45.225.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b7:68:bb:d7:4e:e6:68:75:13:3a:92:ad:b4:95:ec:bf:fd:b8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254D3F5CC2B8E5B651F6F590A793628658044C55
        Validity
            Not Before: Oct  3 00:19:13 2023 GMT
            Not After : Oct  1 00:24:13 2024 GMT
        Subject: CN=87AC6A471185B7E24EA679FB52EDCA23F4AF51CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:ed:c9:0b:39:84:3e:a5:56:51:a0:a0:c0:
                    79:99:90:e8:5c:83:6d:d8:a2:3b:e4:b7:ac:57:2f:
                    ca:5a:da:8e:9a:d1:19:2c:7e:97:2c:95:14:ed:7f:
                    57:76:53:1f:97:21:34:ff:62:04:19:2c:cf:49:01:
                    8c:11:b0:1f:fa:05:7b:34:6b:b9:3b:f6:14:51:7a:
                    76:80:23:d5:64:71:2c:06:b4:c1:1d:28:52:5a:de:
                    b8:94:a9:2d:4c:60:9e:a5:45:a3:86:05:24:fb:64:
                    d6:36:17:0b:78:8f:f7:10:19:4f:a8:26:a0:46:bd:
                    b4:96:ba:56:d6:72:e6:fd:8b:fe:94:ef:dd:7d:00:
                    03:90:9a:7c:62:90:24:b6:08:89:f6:98:75:ee:37:
                    8b:3d:e6:58:48:b6:3b:62:04:5a:c2:a3:26:f3:53:
                    23:82:70:e5:5f:58:66:3b:4c:88:f8:90:d8:a6:76:
                    6b:0c:ae:d3:a3:51:99:93:9d:5f:3a:d2:c6:d6:01:
                    5c:dd:cf:79:ee:79:24:c2:28:b4:51:e4:c0:07:b2:
                    0b:cb:70:77:86:60:ad:31:b2:b4:09:6d:95:d3:9b:
                    5a:1d:ec:97:b5:c8:57:63:bb:20:3b:b2:d6:2e:59:
                    47:c3:e2:8d:61:41:12:dd:37:1a:42:cd:e0:4e:b7:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AC:6A:47:11:85:B7:E2:4E:A6:79:FB:52:ED:CA:23:F4:AF:51:CF
            X509v3 Authority Key Identifier:
                keyid:25:4D:3F:5C:C2:B8:E5:B6:51:F6:F5:90:A7:93:62:86:58:04:4C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/254D3F5CC2B8E5B651F6F590A793628658044C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254D3F5CC2B8E5B651F6F590A793628658044C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32332d3233203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:50:bc:87:21:20:c0:40:9b:d6:01:c6:ed:cb:b2:7a:3a:39:
         0a:41:a1:5d:bb:14:33:cb:94:31:d1:85:ae:b4:c2:f3:11:8a:
         d3:bc:86:2f:c4:c1:e6:dc:d5:8d:ce:f8:2e:22:d4:d3:2d:e1:
         c0:a0:42:45:9d:ea:48:41:7c:34:2e:55:c4:f0:3d:ff:23:bd:
         32:d5:32:69:b3:2b:ae:4f:fe:e8:06:e7:94:92:3b:b3:c1:b0:
         f1:23:b2:b1:68:c1:ec:80:9f:84:72:f3:ab:05:64:2a:ad:43:
         ee:8f:2e:e7:0b:08:a8:8b:9f:7c:44:14:03:17:7b:63:d4:8a:
         e7:12:f5:95:d8:75:a0:96:b1:c2:cd:61:25:f0:8c:2b:7f:d0:
         46:79:ab:3e:6b:2c:90:db:f0:7f:41:05:f7:f9:07:e9:6c:ad:
         34:7f:18:25:4c:57:2a:29:ca:c8:40:9e:0b:79:4f:65:ac:bf:
         db:76:bd:7e:65:ac:ef:ac:f8:a4:0a:ec:03:eb:f1:0d:e0:ee:
         62:40:94:9e:52:66:fe:22:fc:66:02:90:4a:7e:60:41:d9:7e:
         3b:06:dd:9c:ae:55:c3:4d:10:8d:1d:eb:46:b3:fc:aa:19:2e:
         e2:be:06:e2:fe:59:c4:1e:ff:48:dd:87:7f:bf:b3:f1:2c:d9:
         1e:09:ab:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org