Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38312e302f32342d3234203d3e20323731343337.roa
File:                     34352e3232352e38312e302f32342d3234203d3e20323731343337.roa (raw, json)
Hash identifier:          DNMI1K8iocSszLjyBF0NsmWLJbeF2uoR8mAU9j/Iyb8=
Subject key identifier:   5E:FA:63:A9:81:18:61:21:A5:30:E9:63:19:9C:03:0A:B0:A2:0A:93
Certificate issuer:       /CN=254D3F5CC2B8E5B651F6F590A793628658044C55
Certificate serial:       0ED2A3A3E7A60AFF6D0375F143FFE7E3068AF4CD
Authority key identifier: 25:4D:3F:5C:C2:B8:E5:B6:51:F6:F5:90:A7:93:62:86:58:04:4C:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254D3F5CC2B8E5B651F6F590A793628658044C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38312e302f32342d3234203d3e20323731343337.roa
Signing time:             Tue 03 Oct 2023 00:24:14 +0000
ROA not before:           Tue 03 Oct 2023 00:19:14 +0000
ROA not after:            Tue 01 Oct 2024 00:24:14 +0000
asID:                     271437
IP address blocks:        45.225.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d2:a3:a3:e7:a6:0a:ff:6d:03:75:f1:43:ff:e7:e3:06:8a:f4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254D3F5CC2B8E5B651F6F590A793628658044C55
        Validity
            Not Before: Oct  3 00:19:14 2023 GMT
            Not After : Oct  1 00:24:14 2024 GMT
        Subject: CN=5EFA63A981186121A530E963199C030AB0A20A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:29:b1:0e:86:31:45:a9:fe:e2:a9:8b:94:
                    31:fc:f3:ea:b9:82:df:1e:e0:9a:e0:e1:dd:b8:c5:
                    2a:27:3c:78:a1:cd:cc:34:11:50:c7:65:9a:39:0b:
                    98:ac:24:6d:83:3d:8c:3b:c6:b2:73:1c:3d:85:49:
                    02:32:ff:25:11:a2:e1:93:04:9b:0c:34:23:da:71:
                    8a:01:ef:00:63:07:d3:54:34:e3:9e:8c:e6:97:04:
                    fd:5f:a9:df:e1:3b:b9:2e:2a:a1:a4:aa:cc:d3:bb:
                    a2:12:16:d0:cf:2b:e4:fc:c3:f5:68:5c:7b:15:b3:
                    c2:9c:21:b8:21:83:33:39:9e:f3:0c:d0:c2:a3:a4:
                    bc:c9:ff:4c:32:56:6c:f7:b1:20:cc:f4:5c:46:a9:
                    70:32:ab:70:00:a9:03:b2:e3:d2:67:f1:4c:d4:97:
                    99:b0:7c:82:60:ac:c7:8f:b3:2e:a9:4e:e0:9f:78:
                    1a:3a:d0:ee:f5:40:5f:08:31:69:30:15:d2:6c:21:
                    fb:57:1a:2c:96:63:cb:93:2e:e7:04:49:4d:80:2b:
                    53:ae:75:b4:bc:4c:c8:7a:4b:d2:84:dc:57:80:ad:
                    f0:a5:e3:fc:26:36:e6:a4:34:11:de:a6:50:75:7d:
                    af:67:f0:4e:ad:77:7f:93:d8:5c:2b:4c:e9:e4:c1:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FA:63:A9:81:18:61:21:A5:30:E9:63:19:9C:03:0A:B0:A2:0A:93
            X509v3 Authority Key Identifier:
                keyid:25:4D:3F:5C:C2:B8:E5:B6:51:F6:F5:90:A7:93:62:86:58:04:4C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/254D3F5CC2B8E5B651F6F590A793628658044C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254D3F5CC2B8E5B651F6F590A793628658044C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38312e302f32342d3234203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:72:7b:ad:94:77:ec:c5:7d:57:6c:70:24:be:66:1d:e8:45:
         df:7e:84:ed:1f:73:4a:58:f8:48:cc:a5:3e:d2:3c:da:50:32:
         53:62:44:89:45:e7:fa:fe:bc:06:27:c0:78:80:35:b8:88:0e:
         37:bd:f2:42:08:02:4a:de:b5:85:fe:ea:16:01:e2:a9:52:02:
         dc:df:fd:92:36:e4:05:f5:fd:94:51:0f:1b:af:44:de:1f:28:
         ad:cb:51:26:72:11:28:16:97:46:5c:77:7c:2c:41:f5:ad:c8:
         22:35:ca:e3:6e:cd:96:01:a5:63:7e:d2:31:e2:73:2e:c8:7a:
         d7:de:bb:e4:22:aa:28:e1:8f:c2:15:0f:f4:af:8b:ca:5f:7b:
         cd:9d:b6:2a:39:91:86:e0:de:c1:0a:d9:a6:ef:06:16:f8:a7:
         6b:6b:9b:85:88:9a:4e:d2:9f:7f:cb:17:01:1f:20:72:c2:d9:
         ff:6c:66:ab:68:92:5a:11:b0:6b:7b:10:ae:78:45:c7:f2:39:
         8e:24:c6:89:cd:a1:5d:a9:52:4c:aa:97:20:c9:d3:51:d3:b0:
         19:3b:58:ea:43:c0:1b:bf:08:db:54:9d:2a:ba:18:bd:7a:23:
         5f:92:11:11:06:22:c2:8c:1f:f8:77:81:fb:28:8b:5e:93:ec:
         ab:08:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org