Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa
File:                     34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa (raw, json)
Hash identifier:          HrmehyUOFpcYfblihhvqPoKFQtmjahhQGCKvaGpV7Io=
Subject key identifier:   27:CB:BA:73:94:F8:8A:AF:2C:0F:1D:9C:DD:25:9D:44:3B:8C:4D:70
Certificate issuer:       /CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Certificate serial:       3F448AC24F38D232E1FDF2EF4AB5EDD866FD1426
Authority key identifier: 5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa
Signing time:             Fri 05 Jan 2024 20:10:34 +0000
ROA not before:           Fri 05 Jan 2024 20:05:34 +0000
ROA not after:            Fri 03 Jan 2025 20:10:34 +0000
asID:                     268786
IP address blocks:        45.172.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:8a:c2:4f:38:d2:32:e1:fd:f2:ef:4a:b5:ed:d8:66:fd:14:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
        Validity
            Not Before: Jan  5 20:05:34 2024 GMT
            Not After : Jan  3 20:10:34 2025 GMT
        Subject: CN=27CBBA7394F88AAF2C0F1D9CDD259D443B8C4D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:7e:12:e9:88:31:a1:5f:65:49:09:d6:70:
                    d1:16:35:8e:2f:d7:9e:41:bf:f8:ba:19:a5:1c:d1:
                    3b:4a:4d:36:db:4a:bc:3a:74:df:d5:56:82:33:8d:
                    2a:28:56:77:d3:ee:c8:fa:d3:8e:b4:e2:e6:da:65:
                    17:5b:a0:1c:5e:1a:c7:12:ab:12:19:16:ea:28:c7:
                    88:a1:b2:61:2b:3d:38:21:83:20:bf:8a:c4:13:a2:
                    f7:9a:34:c9:6e:b7:4c:0c:1d:f4:6d:4a:34:cb:07:
                    11:50:ea:af:38:ca:86:ca:e9:dc:b0:41:71:83:ca:
                    8a:80:4a:9b:cf:61:a9:ba:34:bb:51:61:e0:a5:e2:
                    8b:ad:39:f0:dd:fa:d5:7c:32:16:31:03:af:94:b7:
                    be:34:89:a8:1d:d5:fb:30:6a:f8:75:cf:41:92:fc:
                    2c:e4:36:8d:c9:6d:f5:b4:e8:74:c9:a1:b3:22:49:
                    6b:e8:17:20:1e:88:99:e6:d0:4d:92:43:e6:58:b2:
                    f7:79:54:a9:5f:d4:a3:8d:bb:d6:6b:9d:50:55:fd:
                    fb:ec:02:df:bd:2c:7c:18:09:8f:1a:94:94:bc:ea:
                    36:14:25:a1:96:43:af:82:89:b4:9a:0a:32:b0:cd:
                    5a:63:d5:91:a3:16:05:9a:dd:09:fd:ab:f3:96:f4:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CB:BA:73:94:F8:8A:AF:2C:0F:1D:9C:DD:25:9D:44:3B:8C:4D:70
            X509v3 Authority Key Identifier:
                keyid:5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:a8:71:52:f8:29:bb:8e:ac:98:7e:84:cd:90:76:4f:40:
         71:06:31:31:cd:7a:4c:e4:0f:a5:3b:04:b5:56:8c:fc:b5:d9:
         dd:67:7d:21:40:33:82:ce:7b:9a:f0:b3:f8:2b:d3:e5:0f:ee:
         cb:c7:f9:8c:19:58:4c:bd:bf:6e:2c:ad:73:22:86:21:51:64:
         8d:c8:28:76:33:39:15:71:a8:95:be:b9:8d:d8:7f:c0:bb:bf:
         8b:91:22:8e:fa:b4:67:0c:3b:ed:e5:7b:2b:1f:02:e4:06:84:
         e0:e6:9a:15:0a:24:21:25:77:0a:dc:e6:07:07:c6:c9:c0:f5:
         91:78:70:97:02:82:63:d2:6c:ca:31:f9:3f:47:25:45:25:7e:
         18:0e:25:24:f9:84:55:c7:d8:71:a9:69:b0:76:00:fe:c1:b0:
         9b:a9:3b:ff:0d:1b:dc:85:97:92:e6:7f:f1:06:e6:36:e1:17:
         91:44:83:65:a2:02:f8:e0:3e:82:c2:8d:fd:39:f3:6d:83:f0:
         45:a2:6e:6a:a1:8a:93:7a:bb:25:1f:61:bb:ea:5d:d5:36:18:
         4a:84:fd:8d:0f:49:0c:e1:fe:9c:a4:45:89:8a:7a:86:31:4f:
         d5:d9:07:97:53:5a:83:09:36:55:23:07:72:3c:ae:82:46:d2:
         8f:ce:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org