Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39382e302f32332d3233203d3e20323639313238.roa
File:                     34352e3138302e39382e302f32332d3233203d3e20323639313238.roa (raw, json)
Hash identifier:          qxh2s5Rjc3TbjBEzupmqlmp3RKVDgXcrC0+jj5YKwa0=
Subject key identifier:   88:A8:50:A5:F8:20:12:82:94:2B:3C:C0:68:D5:7B:03:7F:D5:53:0E
Certificate issuer:       /CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
Certificate serial:       5868B2079E06C7392FF48C01A2B1F17DB4D2E508
Authority key identifier: BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39382e302f32332d3233203d3e20323639313238.roa
Signing time:             Mon 06 Nov 2023 15:45:16 +0000
ROA not before:           Mon 06 Nov 2023 15:40:16 +0000
ROA not after:            Mon 04 Nov 2024 15:45:16 +0000
asID:                     269128
IP address blocks:        45.180.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:68:b2:07:9e:06:c7:39:2f:f4:8c:01:a2:b1:f1:7d:b4:d2:e5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
        Validity
            Not Before: Nov  6 15:40:16 2023 GMT
            Not After : Nov  4 15:45:16 2024 GMT
        Subject: CN=88A850A5F8201282942B3CC068D57B037FD5530E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:a7:8b:12:1b:94:30:62:d7:dc:35:31:0f:
                    14:bb:24:46:77:ae:23:08:b8:37:0b:cd:7e:76:c2:
                    32:03:a4:75:d7:12:13:b7:d4:00:6c:e2:32:c3:3e:
                    73:e7:7d:74:ae:2f:ca:ac:5f:6e:43:57:3f:54:e0:
                    eb:18:f8:45:e6:2b:2b:df:b0:c3:c2:16:8c:6f:83:
                    79:28:ef:36:5d:3e:ee:b5:db:c7:8b:7d:fd:a9:11:
                    48:80:4a:4c:8f:b3:03:42:22:22:2c:b4:2f:ba:0b:
                    55:43:51:26:03:40:31:d5:24:e5:48:10:9a:a4:76:
                    67:4d:a8:d1:35:f8:22:d8:6e:31:56:0f:f6:32:a2:
                    ab:cd:4a:cf:a7:36:fc:95:30:51:4c:b7:0c:43:74:
                    67:a8:a5:e0:4f:6e:37:f8:26:9d:0b:f3:65:bf:ac:
                    13:40:fd:d5:61:ee:b0:b4:76:be:48:59:f8:8a:b5:
                    b6:13:69:33:64:2d:84:a3:d8:b6:6c:c0:f6:79:83:
                    b5:39:98:79:31:ed:1f:a3:2e:0a:53:10:27:93:18:
                    f6:41:5c:23:9c:3d:32:f5:bb:c7:c5:eb:a2:e5:7a:
                    ad:be:73:b5:be:32:5e:0c:00:bd:cc:6c:4b:7e:68:
                    6d:bd:18:2f:1b:6b:5b:6f:76:f7:61:4b:67:b7:1b:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A8:50:A5:F8:20:12:82:94:2B:3C:C0:68:D5:7B:03:7F:D5:53:0E
            X509v3 Authority Key Identifier:
                keyid:BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39382e302f32332d3233203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:d5:05:06:ad:8e:e6:8a:65:fa:94:b3:d7:90:cc:66:72:d5:
         da:3f:52:a1:cb:e1:4d:c2:37:65:e5:f9:09:89:96:d9:24:09:
         2e:85:68:da:ff:f1:ce:13:49:84:63:b5:c6:28:6e:f8:e3:c2:
         fb:78:28:36:8e:e4:13:8b:aa:bd:5b:64:ba:f7:f2:fe:85:91:
         e0:1d:56:63:52:6b:70:e9:da:cf:9c:9e:72:ad:ad:30:3f:19:
         03:aa:b6:95:90:6b:c7:d8:4b:71:f8:0d:34:2a:f1:de:3b:92:
         08:14:ff:ef:51:02:b7:d4:c7:e1:9d:1e:8d:db:91:e3:9e:e6:
         62:cd:11:6a:dd:8e:ff:57:89:f3:0c:50:ff:e3:d3:1d:64:0c:
         50:e2:0a:69:07:99:78:f8:2e:6e:eb:b8:ff:41:7d:e7:40:2b:
         82:73:41:8d:3e:02:86:a1:02:17:c3:ee:c0:09:c5:0b:c9:58:
         55:fe:08:2f:03:90:28:e3:1c:93:f9:3b:1c:6f:a4:c8:fe:06:
         eb:74:eb:29:e6:65:cf:45:fd:ad:d5:e9:3a:35:33:f3:e1:fe:
         58:61:9d:8c:ab:a4:d0:d2:71:5f:76:b3:a1:55:e6:05:73:40:
         67:63:67:08:01:74:c5:4d:d2:02:f8:00:15:5c:6d:44:26:10:
         14:59:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org