Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/34352e3232382e382e302f32322d3332203d3e20323637303632.roa
File:                     34352e3232382e382e302f32322d3332203d3e20323637303632.roa (raw, json)
Hash identifier:          oduQQbESE7uclapxTtYajvBM9GNWj4NpLNFCHXN19Nw=
Subject key identifier:   F4:2B:8D:95:7D:C4:8D:90:C3:14:55:38:CE:A9:E3:56:31:11:89:47
Certificate issuer:       /CN=5E77B1047369B5643313199DC15B8D0C6327C30F
Certificate serial:       793C3B6247185CBCBF243849A751F768241BFCED
Authority key identifier: 5E:77:B1:04:73:69:B5:64:33:13:19:9D:C1:5B:8D:0C:63:27:C3:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E77B1047369B5643313199DC15B8D0C6327C30F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/34352e3232382e382e302f32322d3332203d3e20323637303632.roa
Signing time:             Mon 22 Jan 2024 14:05:50 +0000
ROA not before:           Mon 22 Jan 2024 14:00:50 +0000
ROA not after:            Mon 20 Jan 2025 14:05:50 +0000
asID:                     267062
IP address blocks:        45.228.8.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3c:3b:62:47:18:5c:bc:bf:24:38:49:a7:51:f7:68:24:1b:fc:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E77B1047369B5643313199DC15B8D0C6327C30F
        Validity
            Not Before: Jan 22 14:00:50 2024 GMT
            Not After : Jan 20 14:05:50 2025 GMT
        Subject: CN=F42B8D957DC48D90C3145538CEA9E35631118947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:89:53:85:37:13:86:63:ce:d9:b5:5d:88:
                    ec:24:c3:7f:31:80:d6:1d:b4:7d:b3:ef:c5:73:86:
                    29:39:00:b5:bf:81:28:64:63:e0:32:69:95:ee:eb:
                    b1:3f:9c:5a:7a:24:80:c1:8d:b9:62:ae:7f:49:cd:
                    75:15:e6:44:30:b5:f3:3c:2b:eb:bd:fe:bd:d9:be:
                    b5:d0:da:92:61:2a:66:18:bb:d4:b2:13:70:de:ea:
                    dc:3f:95:a0:85:06:53:2a:59:2d:e8:a5:23:e2:6c:
                    37:3e:52:af:ff:8e:9f:b3:cd:b0:9c:23:99:05:60:
                    c4:13:09:89:bb:f5:8b:bd:13:bc:ed:95:7b:3f:49:
                    59:35:49:04:87:7e:4b:8d:14:fd:4f:3e:dd:83:1c:
                    1c:00:e8:0f:2d:9a:cc:3c:6a:7d:d4:94:4e:99:f5:
                    62:92:ed:1b:e8:de:4d:5e:1c:1e:15:25:1d:d8:e8:
                    5e:d7:82:7c:fa:46:cb:70:bf:18:0b:fe:ba:b7:8e:
                    a5:82:38:5c:30:5a:86:ed:5a:5f:88:26:d1:18:d2:
                    52:72:01:18:6e:94:e6:48:e7:ed:94:86:e8:26:60:
                    65:6f:7b:d0:4b:29:48:ca:3e:e0:94:1d:e4:69:b9:
                    36:a3:43:6a:cd:b3:55:5e:42:b5:7f:f0:a1:79:11:
                    da:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:8D:95:7D:C4:8D:90:C3:14:55:38:CE:A9:E3:56:31:11:89:47
            X509v3 Authority Key Identifier:
                keyid:5E:77:B1:04:73:69:B5:64:33:13:19:9D:C1:5B:8D:0C:63:27:C3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/5E77B1047369B5643313199DC15B8D0C6327C30F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E77B1047369B5643313199DC15B8D0C6327C30F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/0/34352e3232382e382e302f32322d3332203d3e20323637303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:c0:c9:55:34:75:83:a3:d3:4b:77:db:77:4f:25:9b:be:
         f9:60:80:9e:54:ae:86:da:a9:21:ed:54:68:e4:83:f5:9b:85:
         24:0b:6e:6d:f9:5f:c1:b7:7f:9c:ae:28:8c:0b:01:55:49:45:
         81:63:17:8c:4a:89:77:4b:10:78:bd:92:32:9c:46:9e:96:56:
         fe:8c:a5:03:8f:12:13:9c:6f:1d:f4:59:38:c4:cc:f9:8f:2e:
         44:01:80:39:65:82:e8:97:e0:83:c6:93:34:25:63:9b:53:9d:
         d4:2f:c9:f1:68:7e:8f:1d:2a:96:34:3d:e4:2d:e3:75:b8:7f:
         eb:29:82:cd:21:d0:2c:f6:fd:41:3a:c4:92:19:c4:7f:87:ec:
         72:3b:96:27:d3:9e:07:21:ad:6b:41:7c:d8:ff:c4:d8:3b:a6:
         c7:99:e4:17:1b:2d:02:14:a0:8a:eb:59:d4:0f:27:82:ad:4b:
         92:cb:5b:1a:e3:cf:ed:8f:55:38:38:15:cb:b4:ef:da:a7:9b:
         9a:e4:9e:48:08:32:33:7b:58:d6:06:a7:a2:e0:cc:28:e5:5b:
         94:f8:39:08:f0:75:d5:71:63:9c:c5:29:f0:70:41:4e:27:4e:
         7d:fd:02:f9:5a:ca:f0:7a:75:82:c2:1e:d6:a9:e0:53:c0:69:
         0e:0c:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org