Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/1/34352e352e3137362e302f32342d3234203d3e20323636313934.roa
File:                     34352e352e3137362e302f32342d3234203d3e20323636313934.roa (raw, json)
Hash identifier:          qcVbIoje1EB9BWiTWEOn8iuwBNUxzpX71AZS9nP6l3I=
Subject key identifier:   C5:CC:58:00:44:EF:4B:84:46:C4:80:A4:63:84:96:33:D7:09:D5:F6
Certificate issuer:       /CN=90AC45F380F5B8BDC7C0BFDC542829F27B406D74
Certificate serial:       0940E55C4788261386EEB50497644C6A51C3578F
Authority key identifier: 90:AC:45:F3:80:F5:B8:BD:C7:C0:BF:DC:54:28:29:F2:7B:40:6D:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90AC45F380F5B8BDC7C0BFDC542829F27B406D74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/1/34352e352e3137362e302f32342d3234203d3e20323636313934.roa
Signing time:             Thu 04 Apr 2024 02:48:50 +0000
ROA not before:           Thu 04 Apr 2024 02:43:50 +0000
ROA not after:            Thu 03 Apr 2025 02:48:50 +0000
asID:                     266194
IP address blocks:        45.5.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:40:e5:5c:47:88:26:13:86:ee:b5:04:97:64:4c:6a:51:c3:57:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AC45F380F5B8BDC7C0BFDC542829F27B406D74
        Validity
            Not Before: Apr  4 02:43:50 2024 GMT
            Not After : Apr  3 02:48:50 2025 GMT
        Subject: CN=C5CC580044EF4B8446C480A463849633D709D5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:0b:9f:ff:6c:73:2c:34:a9:c2:36:ed:6f:
                    e0:fa:04:11:e0:eb:04:8d:4c:c7:d7:26:27:b8:9e:
                    bb:05:0f:3e:e6:8f:74:43:21:aa:54:85:cf:49:09:
                    1a:8b:8f:d7:8b:d4:6a:e5:b7:17:8e:d7:30:98:e1:
                    72:c8:79:ee:cd:ce:6d:3a:a4:e8:74:5a:ed:b4:de:
                    a3:15:fb:84:f7:20:24:c1:02:1f:03:46:7d:cf:34:
                    38:24:e0:cc:db:3d:e3:ec:82:8e:11:d9:5b:95:d2:
                    5c:ac:2a:c1:d0:3b:87:6c:c0:7d:dc:1f:fc:5d:cc:
                    bc:ff:74:52:73:83:c5:b0:a8:d6:87:5f:31:87:6a:
                    04:cb:14:da:35:f9:a6:3b:ed:2b:27:ec:fc:1d:bb:
                    87:fe:c1:81:1d:89:7b:b8:6a:79:33:46:10:95:54:
                    51:44:d2:e8:ed:a3:8f:93:14:ae:94:44:19:bc:36:
                    d1:84:cb:4a:d1:bd:a0:be:19:c6:3b:6d:d4:df:ed:
                    74:aa:25:13:5d:5f:56:70:ed:07:c2:6d:58:e8:05:
                    13:c4:0d:67:9d:c0:07:35:7d:af:98:02:e6:92:cf:
                    9d:3a:8e:6b:fe:7c:8c:89:de:b5:2c:9b:33:d0:86:
                    ed:34:ce:a8:83:ef:d8:0b:a5:bc:ea:6e:0d:97:15:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CC:58:00:44:EF:4B:84:46:C4:80:A4:63:84:96:33:D7:09:D5:F6
            X509v3 Authority Key Identifier:
                keyid:90:AC:45:F3:80:F5:B8:BD:C7:C0:BF:DC:54:28:29:F2:7B:40:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/1/90AC45F380F5B8BDC7C0BFDC542829F27B406D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90AC45F380F5B8BDC7C0BFDC542829F27B406D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/1/34352e352e3137362e302f32342d3234203d3e20323636313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:07:15:d3:25:20:53:1c:d6:87:90:b8:25:07:72:3b:b4:d7:
         2d:47:48:8c:11:3c:17:18:23:90:18:9e:52:db:87:97:c3:2a:
         35:b1:41:8c:7d:7d:a7:aa:44:19:31:14:9e:48:15:00:4b:03:
         ac:86:f4:c4:34:39:d1:89:3c:1d:67:4f:97:76:1a:d7:2f:90:
         cb:84:c6:87:ee:be:8d:eb:60:a0:63:3b:91:12:9d:c6:4a:6a:
         61:2f:44:35:fd:61:b5:71:78:4a:86:90:0c:19:11:67:d5:2b:
         9d:56:77:d8:66:d3:9a:57:02:3b:19:cc:0e:69:36:90:f7:e0:
         44:94:f7:d2:aa:82:8b:7f:e3:63:eb:63:22:f7:5a:de:67:27:
         5e:b4:e5:f2:46:bf:4c:c4:82:bc:6c:70:18:66:39:00:98:bb:
         d4:a6:79:dd:e3:3d:e9:cb:0a:19:a7:ac:d9:22:2d:6d:ee:38:
         bf:d9:39:fb:3a:ce:45:2c:3b:86:a0:4c:bf:8a:1b:4b:57:15:
         8d:92:2f:c0:a9:49:c4:7d:4b:ef:55:a3:0c:87:bb:77:f2:e3:
         6d:df:f0:c0:c1:45:9d:da:51:fd:90:e1:74:50:46:53:ab:bc:
         45:f4:65:7a:ac:b7:32:48:50:67:89:5c:5a:6e:4b:e1:d3:66:
         dd:a8:2b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org