Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233392e302f32342d3234203d3e20323639313934.roa
File:                     34352e3233382e3233392e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          sawR/4upOjeVa9SOd4CD2GCqMGb78RyZrZ2EA7zcr/w=
Subject key identifier:   BC:B8:EF:23:B2:F2:13:3E:89:66:68:0A:9C:AD:A3:EC:20:E0:E5:DE
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       5187CBE0DFAAD4EA950DDD53C001A26692FEF964
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233392e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:41 +0000
ROA not before:           Sat 29 Jul 2023 16:21:41 +0000
ROA not after:            Sat 27 Jul 2024 16:26:41 +0000
asID:                     269194
IP address blocks:        45.238.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:87:cb:e0:df:aa:d4:ea:95:0d:dd:53:c0:01:a2:66:92:fe:f9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:41 2023 GMT
            Not After : Jul 27 16:26:41 2024 GMT
        Subject: CN=BCB8EF23B2F2133E8966680A9CADA3EC20E0E5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:00:b2:3a:fd:40:fe:c3:39:1d:d4:ed:a1:
                    a5:17:fb:02:66:92:0c:21:b1:49:f4:de:95:37:10:
                    09:32:17:c2:93:70:eb:51:81:6c:47:0a:bc:52:ef:
                    60:b9:8a:4a:54:24:a1:58:25:1b:25:e2:17:e5:4c:
                    1c:bd:d4:d8:f6:26:55:5d:dc:5e:e1:f1:49:61:4d:
                    d4:ca:58:0a:4b:3b:2c:0f:c6:dc:aa:66:0b:5c:ca:
                    58:aa:60:71:cc:a4:04:dc:a6:05:39:b7:6e:88:4c:
                    25:8a:87:50:8a:37:0c:54:68:19:68:a7:c0:47:bb:
                    dd:30:b3:2a:7d:5e:e9:f6:de:91:7d:a2:63:f9:b7:
                    33:71:19:84:a5:a2:d2:5e:34:91:c4:45:c0:3e:14:
                    72:73:60:05:7e:fc:0b:c0:11:04:0e:9f:66:46:24:
                    76:18:94:a5:62:8a:33:09:66:1c:99:5c:05:8a:9f:
                    d4:5c:6e:26:1b:3e:f6:86:16:fa:4a:12:93:46:dd:
                    ab:cb:5e:7d:8f:4b:db:8e:9d:57:82:0d:20:5c:e3:
                    d2:0b:a9:7e:41:6f:f5:68:cf:7b:f9:62:67:48:3e:
                    4b:e2:45:ab:b1:5f:66:e8:92:85:d9:dc:58:18:3a:
                    41:d5:15:9f:db:5c:f2:d2:e7:81:3f:6f:b0:41:70:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:EF:23:B2:F2:13:3E:89:66:68:0A:9C:AD:A3:EC:20:E0:E5:DE
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233392e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:bc:32:1f:48:9f:9c:10:ad:fe:11:bd:0b:8c:a8:96:ea:44:
         7c:ac:ab:d2:74:78:19:75:b5:af:b6:8a:74:b5:0e:f3:d7:f1:
         9c:79:a3:5c:42:05:aa:4e:b6:79:82:ba:71:f7:29:d1:c4:cf:
         a1:95:3e:01:ff:a2:08:38:5e:15:32:b7:05:80:7a:c6:cf:46:
         67:3d:89:4b:2e:b1:3d:f9:f5:47:e5:3f:c9:34:83:7b:99:de:
         e5:89:8c:8f:50:db:3c:e5:6c:72:6c:7c:16:c6:2c:a3:4a:09:
         ec:16:59:de:76:4b:b3:4d:12:ea:8d:37:73:45:d8:79:17:7f:
         9b:75:9c:29:ec:ae:84:1d:9e:45:40:a4:72:84:b1:9a:c7:f9:
         66:b5:8e:4f:2a:1e:82:83:51:17:6c:b8:32:fc:c5:df:e0:2a:
         6a:51:0c:fe:50:74:dd:53:4a:dc:a6:ba:91:58:87:46:f7:9f:
         96:34:e6:60:62:aa:0e:bc:63:a0:a1:85:36:34:5c:04:45:7c:
         81:21:82:a6:fe:80:73:b8:1b:99:f5:75:c1:5f:10:23:72:e5:
         14:3e:3d:3b:65:9d:10:ed:c0:26:41:f6:b4:73:b4:97:26:e0:
         77:bd:d9:6c:13:6c:18:a0:c2:5c:39:6b:b8:7d:57:27:8a:15:
         8e:88:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org