Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137382e302f32342d3234203d3e20323636313934.roa
File:                     34352e352e3137382e302f32342d3234203d3e20323636313934.roa (raw, json)
Hash identifier:          bWi4RftLIxSTtYBN501HBxw15LwH72b9WMcVxfyhGPA=
Subject key identifier:   FC:5A:DF:73:AD:37:62:BC:E5:BC:10:10:6F:4D:80:08:3D:B5:B8:6A
Certificate issuer:       /CN=15C528E2255F8875C8074B8C7D0290CCEC3EE4CD
Certificate serial:       07582CB3E3A0FC7A45FA5ABA4D7AD2BBF4FBEC27
Authority key identifier: 15:C5:28:E2:25:5F:88:75:C8:07:4B:8C:7D:02:90:CC:EC:3E:E4:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15C528E2255F8875C8074B8C7D0290CCEC3EE4CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137382e302f32342d3234203d3e20323636313934.roa
Signing time:             Thu 26 Sep 2024 20:32:45 +0000
ROA not before:           Thu 26 Sep 2024 20:27:45 +0000
ROA not after:            Thu 25 Sep 2025 20:32:45 +0000
asID:                     266194
IP address blocks:        45.5.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:58:2c:b3:e3:a0:fc:7a:45:fa:5a:ba:4d:7a:d2:bb:f4:fb:ec:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C528E2255F8875C8074B8C7D0290CCEC3EE4CD
        Validity
            Not Before: Sep 26 20:27:45 2024 GMT
            Not After : Sep 25 20:32:45 2025 GMT
        Subject: CN=FC5ADF73AD3762BCE5BC10106F4D80083DB5B86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c6:eb:42:0c:6b:09:16:5c:2c:9d:77:2d:b1:
                    ce:f7:80:bc:d1:10:64:de:0f:c1:6a:b3:2f:7d:a1:
                    3e:a8:cf:dd:4d:ee:ee:31:0a:ad:77:92:36:6a:d2:
                    44:8d:7b:4e:48:24:ac:12:d3:4a:ea:22:d5:83:83:
                    d0:25:fd:13:07:8b:c4:c4:0e:9b:1c:ff:b4:3c:df:
                    5c:a5:7e:11:07:ff:11:24:75:45:77:2d:60:b2:07:
                    c3:f4:8a:e6:1e:55:31:08:9f:a7:f5:2a:59:17:63:
                    ff:d7:9f:fc:b6:e8:06:1f:93:8a:65:1f:54:63:dc:
                    c0:35:f9:1b:e1:ec:f6:ca:1b:1f:aa:e0:9c:17:7e:
                    df:5b:c9:f6:23:b2:3b:b0:5e:80:25:9b:d3:35:4f:
                    50:e9:96:a2:f6:d4:0c:4b:73:9d:8c:bd:5f:22:a1:
                    5b:91:44:75:d4:ce:b2:5f:71:77:1a:65:fd:82:35:
                    06:e2:c7:dc:04:35:14:ef:ec:df:29:08:8a:5d:db:
                    da:f5:db:78:fa:e5:3c:35:2b:45:56:7d:51:5b:df:
                    23:bf:c9:32:d3:a4:6c:fa:de:f3:9f:ff:0b:8d:a2:
                    0c:aa:28:4c:7b:fc:17:e7:1d:6f:21:36:f9:85:f7:
                    df:41:13:93:92:4b:69:df:4f:e0:ea:c9:82:d1:bb:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5A:DF:73:AD:37:62:BC:E5:BC:10:10:6F:4D:80:08:3D:B5:B8:6A
            X509v3 Authority Key Identifier:
                keyid:15:C5:28:E2:25:5F:88:75:C8:07:4B:8C:7D:02:90:CC:EC:3E:E4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/15C528E2255F8875C8074B8C7D0290CCEC3EE4CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15C528E2255F8875C8074B8C7D0290CCEC3EE4CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137382e302f32342d3234203d3e20323636313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:5d:51:3b:e3:52:a9:94:5b:ec:55:69:9b:eb:fe:e4:a8:
         a7:cf:b8:52:67:b2:a0:77:0b:23:36:dc:8c:78:8e:da:46:d5:
         70:7c:3b:78:3a:4a:55:d0:cd:5d:40:58:bb:19:92:c3:92:25:
         2c:63:13:1d:a8:a6:92:8a:91:22:55:1a:d2:c2:60:82:1c:ec:
         d9:55:2c:79:7e:75:99:58:49:37:40:51:92:36:7f:df:42:05:
         22:b8:f0:5b:ec:00:3e:c1:92:e5:58:51:e0:b1:16:70:b0:b6:
         f8:ca:03:f3:1c:97:46:93:53:5e:94:91:a4:4f:f8:b3:6b:fe:
         a3:73:0f:01:99:e5:cd:58:fe:13:a6:33:f1:58:3e:aa:85:75:
         71:71:aa:00:6c:a6:cb:42:41:63:a0:41:87:e2:06:8a:bf:d2:
         a0:a8:40:c5:ee:67:bc:0e:f4:da:11:c5:52:2a:84:c5:3d:26:
         53:23:fb:ce:37:19:aa:c5:5b:b1:07:47:c3:e9:ea:d9:ad:86:
         8c:3e:82:a8:27:b2:30:bb:d0:05:90:24:7f:3f:1d:32:76:01:
         d5:14:08:2c:12:93:8e:40:e4:78:3c:42:d6:aa:fe:01:49:5b:
         c7:c2:e4:c9:f4:a8:83:7a:dd:21:7f:74:38:b0:67:e1:f8:de:
         c3:a1:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org