Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232342e302f32332d3233203d3e203238353938.roa
File:                     34352e3137392e3232342e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          r9GvbyFVmBD3gLCWM8nGFr/DOLGPvH+CQhSeM+N2PZA=
Subject key identifier:   54:EB:A5:48:57:75:CF:B9:EA:6C:1A:B0:A8:0F:D5:1F:C6:DA:44:CB
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       3C4D06BC643C3FA5FD89532FB644497F592CA0F5
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232342e302f32332d3233203d3e203238353938.roa
Signing time:             Wed 29 Nov 2023 12:19:35 +0000
ROA not before:           Wed 29 Nov 2023 12:14:35 +0000
ROA not after:            Wed 27 Nov 2024 12:19:35 +0000
asID:                     28598
IP address blocks:        45.179.224.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4d:06:bc:64:3c:3f:a5:fd:89:53:2f:b6:44:49:7f:59:2c:a0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Nov 29 12:14:35 2023 GMT
            Not After : Nov 27 12:19:35 2024 GMT
        Subject: CN=54EBA5485775CFB9EA6C1AB0A80FD51FC6DA44CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:67:1d:f5:a1:b7:8e:0c:4c:40:2d:43:d8:22:
                    a9:66:77:26:0e:e1:d2:a6:a1:78:4b:e1:de:79:58:
                    95:49:01:94:91:25:c9:9b:f1:da:98:fa:f4:5b:d6:
                    30:8a:a6:a6:ff:c2:25:4e:01:dc:91:6d:7c:65:1b:
                    f3:42:ec:1a:1b:70:77:72:54:14:53:bb:89:da:c3:
                    46:61:72:82:a7:c2:c7:3e:9f:d7:e0:c4:94:63:21:
                    cc:32:44:03:b3:46:ce:33:55:27:90:84:0f:8a:e2:
                    d6:6c:c9:f7:6f:7e:d0:05:9b:49:60:d0:54:fe:a7:
                    68:df:88:04:09:b5:fd:47:4d:b8:a2:e8:d3:c1:ee:
                    85:48:f0:b4:14:ef:d7:d5:c6:f1:ca:ce:30:a4:6c:
                    26:9b:31:4e:eb:aa:b6:00:13:35:9a:2b:ec:5d:9a:
                    6b:61:a3:30:f7:de:d8:bf:28:c2:08:84:11:2c:cc:
                    be:ce:eb:c8:67:13:97:52:b2:f9:dd:fb:8c:71:4a:
                    d6:f2:11:6f:d6:e0:b5:e0:bc:78:f5:77:63:64:aa:
                    9a:28:2d:5b:1f:c2:81:cd:77:0e:70:aa:00:a0:73:
                    8c:e6:19:dc:1c:f6:7d:09:32:68:56:65:82:60:fd:
                    8e:03:33:a1:35:fc:87:3f:b1:30:41:b1:f6:55:c3:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EB:A5:48:57:75:CF:B9:EA:6C:1A:B0:A8:0F:D5:1F:C6:DA:44:CB
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232342e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:14:8b:f1:cb:3a:10:b9:40:b2:52:66:f8:25:53:ef:a7:cf:
         70:d2:29:cf:70:aa:8a:1d:f2:bd:27:f7:02:84:ee:34:6f:f3:
         7e:f3:e0:ac:ee:e1:8c:85:8c:f1:f0:e9:72:c9:4c:55:af:94:
         52:71:2a:89:6a:18:dd:97:8e:62:4b:a6:f7:92:bd:dc:c5:dc:
         94:10:14:1a:fd:b6:9b:57:16:1c:0a:c6:83:79:9f:b9:94:ca:
         9f:a1:ea:93:da:f4:63:27:e1:eb:86:2f:0e:4d:69:59:f9:6b:
         51:07:7b:31:40:94:5d:c0:fd:5a:77:60:df:af:17:f5:c6:84:
         0a:b4:bc:48:43:7a:3a:9c:c1:f6:5c:93:ea:90:15:7c:29:81:
         68:f5:ef:ba:61:6b:fe:9e:9e:2c:06:01:96:2d:bb:62:a9:77:
         6b:36:0c:bd:d9:65:e9:cd:72:ee:57:5e:d6:50:3f:1e:00:8f:
         97:03:4d:94:21:de:03:ea:50:58:48:1f:1f:5f:db:75:38:2e:
         63:e8:99:02:90:a6:84:ae:2f:b2:a1:0d:f5:4b:27:d1:71:6c:
         f2:c7:f1:ea:c2:6a:68:ca:2e:5f:2e:69:2f:01:0a:a5:84:55:
         2e:8d:42:80:a7:45:d2:f0:83:e3:ca:21:0a:b6:51:12:5a:f0:
         43:46:f9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org