Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa
File:                     34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa (raw, json)
Hash identifier:          bF5FHNCqWIpcQh8M1QgZkRCTK7H/mfNHW8g1XemUjrA=
Subject key identifier:   15:9E:63:6F:4D:63:01:3A:64:05:50:F0:25:CA:FD:EF:29:60:66:C6
Certificate issuer:       /CN=8F2560C554C1178E2CF5C57F4B74A54A6C826DC8
Certificate serial:       133898E23C958B66A8D9623853D2660203903997
Authority key identifier: 8F:25:60:C5:54:C1:17:8E:2C:F5:C5:7F:4B:74:A5:4A:6C:82:6D:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa
Signing time:             Tue 30 Jan 2024 15:08:39 +0000
ROA not before:           Tue 30 Jan 2024 15:03:39 +0000
ROA not after:            Tue 28 Jan 2025 15:08:39 +0000
asID:                     268903
IP address blocks:        45.175.180.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:38:98:e2:3c:95:8b:66:a8:d9:62:38:53:d2:66:02:03:90:39:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2560C554C1178E2CF5C57F4B74A54A6C826DC8
        Validity
            Not Before: Jan 30 15:03:39 2024 GMT
            Not After : Jan 28 15:08:39 2025 GMT
        Subject: CN=159E636F4D63013A640550F025CAFDEF296066C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f6:06:a2:52:c4:a1:2d:55:17:21:22:d3:e7:
                    84:cf:5f:31:ec:42:5c:e1:34:fb:d5:63:e7:26:6c:
                    0e:2f:12:de:18:ea:a7:b2:9f:de:22:79:17:79:8e:
                    13:42:3b:35:4e:37:d9:ff:fe:58:4a:cc:40:0f:06:
                    62:af:16:c3:a7:4e:2c:72:c1:47:59:67:3a:87:90:
                    1e:d2:00:75:b2:e5:51:39:98:67:8a:56:6e:e3:28:
                    8e:0d:75:4d:7b:24:7a:38:e0:87:a9:f8:2e:35:bd:
                    47:0e:c4:cd:cd:80:e4:80:27:13:ab:85:53:e3:89:
                    eb:15:0e:37:de:b8:e0:93:78:df:e0:2b:0a:85:ee:
                    93:8a:44:b2:01:ad:25:46:1a:d7:3a:ea:74:08:2f:
                    56:a6:a7:5f:7f:09:da:4c:50:27:93:09:70:39:98:
                    55:a9:f3:44:ef:0a:14:c8:42:5f:a3:49:63:58:52:
                    62:50:ef:e9:45:12:6c:83:5c:37:fc:ea:16:7e:15:
                    64:3a:47:b0:ed:0e:49:bf:a3:0f:3b:5b:c7:ef:86:
                    b7:b1:b0:4b:eb:37:db:fb:22:36:4f:21:7e:e2:46:
                    27:91:ba:f3:6b:97:ef:f0:9d:35:d3:75:09:c3:c0:
                    3c:09:1c:0f:7f:10:02:ec:0d:6f:e7:50:ac:26:9a:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9E:63:6F:4D:63:01:3A:64:05:50:F0:25:CA:FD:EF:29:60:66:C6
            X509v3 Authority Key Identifier:
                keyid:8F:25:60:C5:54:C1:17:8E:2C:F5:C5:7F:4B:74:A5:4A:6C:82:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:c9:69:cd:1c:ba:02:87:a3:37:7c:50:0b:7e:a6:d0:94:34:
         02:1f:19:a3:ae:f7:fc:d7:23:ae:ee:05:2a:27:4a:43:0d:d5:
         61:3f:cd:7e:7a:04:d7:09:2a:4c:88:2b:70:e6:c1:a1:1e:e3:
         bc:a1:67:02:df:97:99:dd:2e:f3:ab:45:62:f0:21:55:e2:1d:
         c8:88:21:ff:05:ce:92:01:ff:15:7d:6e:76:60:57:37:f8:ae:
         ec:61:9d:4f:50:1d:af:7f:e4:5e:ca:f5:1a:48:39:4b:a2:2a:
         59:dc:1a:02:ee:2a:53:8e:88:49:ae:99:e7:62:67:09:07:1a:
         d0:1f:ef:ad:db:82:26:68:54:c8:62:4a:e5:8c:55:45:bb:11:
         b5:39:0f:3d:3e:d2:2a:ca:a3:c8:51:e7:75:79:f4:89:8f:15:
         94:af:79:68:e9:e1:07:7a:91:04:bf:af:a8:b1:c7:fd:f3:7c:
         2d:3c:1f:78:01:2d:6f:f5:6a:1c:54:59:08:14:65:18:f9:88:
         1d:a3:f5:bd:76:46:b0:e2:30:f0:f3:87:f4:12:00:b9:09:ee:
         f6:d4:b3:c8:42:30:c2:8e:b3:3d:eb:e4:ba:6f:4a:fd:af:35:
         ef:10:0e:6f:f1:56:a1:c0:18:a5:f8:cb:33:af:88:45:c7:a5:
         c8:cf:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org