Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/34352e3138342e3230342e302f32322d3234203d3e203533303133.roa
File:                     34352e3138342e3230342e302f32322d3234203d3e203533303133.roa (raw, json)
Hash identifier:          8Bk3W6pwnKWolpS+VAWeH89qmkHxqcKJbPrxePdfHv0=
Subject key identifier:   C3:87:1F:3F:F1:B4:80:CA:63:1A:10:42:CD:69:AD:09:D9:61:12:B5
Certificate issuer:       /CN=5AE72D5BF2F268D9B2E465B549705E334171A62A
Certificate serial:       5EE8D42D957443A9DDE481B63482899E40BB3ACA
Authority key identifier: 5A:E7:2D:5B:F2:F2:68:D9:B2:E4:65:B5:49:70:5E:33:41:71:A6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/34352e3138342e3230342e302f32322d3234203d3e203533303133.roa
Signing time:             Fri 20 Oct 2023 12:54:16 +0000
ROA not before:           Fri 20 Oct 2023 12:49:16 +0000
ROA not after:            Fri 18 Oct 2024 12:54:16 +0000
asID:                     53013
IP address blocks:        45.184.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e8:d4:2d:95:74:43:a9:dd:e4:81:b6:34:82:89:9e:40:bb:3a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE72D5BF2F268D9B2E465B549705E334171A62A
        Validity
            Not Before: Oct 20 12:49:16 2023 GMT
            Not After : Oct 18 12:54:16 2024 GMT
        Subject: CN=C3871F3FF1B480CA631A1042CD69AD09D96112B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:1d:81:11:b7:87:a2:b3:0b:56:2f:eb:d5:
                    09:25:0c:ba:e4:5c:a4:04:9e:75:0d:ce:8d:5c:7f:
                    d9:d9:f7:58:7d:89:2b:4e:8b:1d:7b:53:91:b7:ea:
                    70:04:21:2a:13:96:ab:20:29:2f:97:dd:11:e6:a6:
                    19:22:23:59:12:81:b5:60:57:a4:88:8e:c8:d8:05:
                    a0:5c:a6:78:4d:9d:7a:50:8e:69:27:cb:54:81:74:
                    46:c5:68:65:3d:9a:e1:d3:c6:35:8d:0d:c7:ed:5f:
                    f4:32:26:ed:58:b3:92:f3:7a:b2:84:74:09:0c:3f:
                    29:0a:c2:44:23:b4:8b:31:fc:a1:35:3e:63:27:0a:
                    de:65:38:2e:a6:be:15:fe:3f:c2:a9:be:d1:9c:66:
                    c7:3d:ab:8d:f0:4c:b5:d6:23:68:8a:e5:e6:57:bd:
                    73:c1:67:26:d5:d3:39:55:fb:dc:7e:95:70:42:28:
                    d4:e3:d8:a1:9d:5d:04:ee:df:8a:fd:cb:a8:a1:6f:
                    98:8f:84:4c:df:ce:be:bf:98:e5:13:60:e7:17:43:
                    5f:13:ee:8b:12:1f:ff:76:54:06:6a:e0:52:65:e6:
                    31:21:51:4c:b4:e2:41:a1:76:86:5c:67:09:ca:41:
                    d4:69:54:f1:8d:e2:06:ed:8e:35:36:70:59:15:9c:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:87:1F:3F:F1:B4:80:CA:63:1A:10:42:CD:69:AD:09:D9:61:12:B5
            X509v3 Authority Key Identifier:
                keyid:5A:E7:2D:5B:F2:F2:68:D9:B2:E4:65:B5:49:70:5E:33:41:71:A6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/34352e3138342e3230342e302f32322d3234203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:d7:97:c8:8d:92:3f:51:b3:3e:c1:8b:17:2e:33:fb:00:
         03:36:41:74:84:c3:6a:05:3e:f1:6e:3e:28:ec:a7:14:50:f1:
         7e:ef:dc:f4:c1:0f:dd:89:bb:d2:ff:3f:56:4f:71:3e:60:db:
         9a:68:a7:06:5e:fd:41:80:9b:a3:3c:92:44:d0:ea:4b:02:28:
         8c:76:0d:41:5d:77:99:e0:e8:ac:ad:ae:1d:71:c7:f2:71:40:
         4a:b9:9c:ef:c8:8c:b1:2b:1f:da:0f:cc:5e:14:a2:aa:69:0e:
         ab:81:ca:5f:4d:2f:9e:72:16:41:ce:df:1b:e4:84:d2:ba:ee:
         1e:6c:67:c9:9c:71:d7:e3:62:10:ba:0b:9f:af:69:b7:73:a6:
         d0:62:5a:3a:bf:a8:db:41:87:fa:f8:43:2f:2a:5d:2f:da:ae:
         76:0e:c1:b0:77:9d:e0:65:14:83:00:8b:89:0e:b1:6c:99:c4:
         30:39:c6:6d:4c:9c:04:c2:51:f8:ec:7d:15:d6:d6:f2:fb:e8:
         5c:21:90:98:d5:26:ac:71:dd:a1:1c:30:ce:8c:91:2c:b0:43:
         10:70:38:76:32:3c:24:63:79:10:f1:4a:8f:be:e0:45:3f:0a:
         c9:2d:ba:24:95:2a:f0:17:32:fb:39:ab:38:9a:91:87:a6:47:
         9c:4c:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org