Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233382e302f32342d3234203d3e20323639313934.roa
File:                     34352e3233382e3233382e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          4KNPEapQsVe5v5OwTQJ4zSqvjx/3rDZsvzX1cxiu7Mg=
Subject key identifier:   AD:E8:EA:C2:89:07:39:E3:80:21:C4:33:74:2A:65:B6:81:5B:29:F2
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       1DFC2161BD9EDECD7C12A31BF84AA7AB230714B6
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233382e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:38 +0000
ROA not before:           Sat 29 Jul 2023 16:21:38 +0000
ROA not after:            Sat 27 Jul 2024 16:26:38 +0000
asID:                     269194
IP address blocks:        45.238.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fc:21:61:bd:9e:de:cd:7c:12:a3:1b:f8:4a:a7:ab:23:07:14:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:38 2023 GMT
            Not After : Jul 27 16:26:38 2024 GMT
        Subject: CN=ADE8EAC2890739E38021C433742A65B6815B29F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:e9:00:54:e6:27:84:06:52:df:9b:76:1f:
                    d1:fc:73:39:bc:e5:4a:b5:37:f7:04:82:43:8a:f6:
                    4f:32:3f:bd:2a:2b:bb:07:0c:c4:71:b3:a3:4e:f3:
                    24:c7:47:0d:ca:42:9a:33:34:bb:be:b0:fa:73:4d:
                    e7:ba:da:ed:ad:20:17:ac:ba:d3:83:9e:9a:2a:59:
                    b3:53:e0:ea:e3:f5:17:cc:c1:ec:37:b4:8e:d9:87:
                    04:cd:7a:da:14:f6:b2:6a:98:46:d0:2b:30:ae:3e:
                    07:f6:4f:e1:f1:55:7e:5d:65:8f:43:f5:03:e4:ae:
                    2b:59:e6:fc:db:34:5e:fc:15:9f:dd:20:d0:02:5a:
                    bb:06:e9:f3:39:cb:4f:53:e1:df:88:84:20:81:f5:
                    e6:01:e5:8d:86:4c:83:9c:cb:77:d1:63:8d:15:8f:
                    53:c5:a5:90:34:cf:e4:97:ea:36:ae:ce:d1:a0:da:
                    68:38:97:01:56:7f:99:39:a7:ad:33:89:73:ee:07:
                    d6:ca:2d:de:de:b3:61:eb:6e:02:37:0b:e7:0c:62:
                    7c:4e:49:80:21:04:b7:b6:8d:2c:30:b8:24:2f:1a:
                    6c:0e:c2:75:30:92:7c:3c:8c:ce:a6:90:00:12:62:
                    2d:05:57:37:e8:26:69:ed:9c:96:40:8b:4a:b0:c0:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E8:EA:C2:89:07:39:E3:80:21:C4:33:74:2A:65:B6:81:5B:29:F2
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233382e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:50:ec:a7:67:e5:a0:ad:9e:e1:56:b9:f1:e8:35:4d:5f:
         9c:e0:b7:c2:9c:b2:25:5c:02:a9:69:2e:04:e2:93:d2:16:6d:
         4e:a8:c0:49:87:d7:c2:80:6c:55:f8:8f:25:e1:22:e5:0d:19:
         4c:37:a7:7b:01:15:32:7f:49:76:b0:8f:ca:a3:b6:51:70:37:
         62:65:30:ad:b5:d1:a2:43:b7:34:af:f3:2e:1c:6e:77:bc:1d:
         16:eb:b7:89:88:86:0c:59:bc:2b:ec:1f:2d:cc:d5:a7:e8:7a:
         1d:7d:2c:ea:ae:94:62:98:c3:16:11:d3:bc:02:6d:d0:e8:a2:
         d6:a6:33:55:7f:1c:9e:80:4b:35:bd:3b:1e:c7:a3:3f:91:96:
         2b:64:5f:65:f4:18:ae:34:a3:8b:2b:95:42:92:da:2c:c0:8a:
         c4:43:72:37:de:95:62:18:ff:6b:3b:b3:b1:d0:15:77:87:c6:
         52:ad:a5:28:d3:64:85:b5:22:16:2b:b0:63:0a:9a:35:12:5d:
         34:46:77:a2:ab:db:39:a3:c3:09:95:ac:c1:b8:3d:af:b5:d8:
         4c:ba:4d:d2:fa:5a:2e:1a:71:97:ba:e5:28:dd:53:e1:e6:68:
         f4:83:20:ed:12:1d:a3:de:3f:44:84:90:d0:38:c4:fd:7e:b1:
         f6:b8:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org