Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/0/34352e372e35322e302f32322d3234203d3e20323733333435.roa
File:                     34352e372e35322e302f32322d3234203d3e20323733333435.roa (raw, json)
Hash identifier:          wL7c/5igI3Pq2U+G1GQX2A9JiXxkhbntpMGHaDMqhl4=
Subject key identifier:   4D:E2:36:16:57:9B:47:F1:3B:D9:FE:AB:7C:01:F8:CC:CC:CA:C7:F3
Certificate issuer:       /CN=0C563147D3FB071E05A32F1A4A087312EBF5E448
Certificate serial:       6AFA68BAB85BA023591F2FA1E42E247A4E00263C
Authority key identifier: 0C:56:31:47:D3:FB:07:1E:05:A3:2F:1A:4A:08:73:12:EB:F5:E4:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C563147D3FB071E05A32F1A4A087312EBF5E448.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/0/34352e372e35322e302f32322d3234203d3e20323733333435.roa
Signing time:             Tue 06 Feb 2024 20:38:35 +0000
ROA not before:           Tue 06 Feb 2024 20:33:35 +0000
ROA not after:            Tue 04 Feb 2025 20:38:35 +0000
asID:                     273345
IP address blocks:        45.7.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fa:68:ba:b8:5b:a0:23:59:1f:2f:a1:e4:2e:24:7a:4e:00:26:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C563147D3FB071E05A32F1A4A087312EBF5E448
        Validity
            Not Before: Feb  6 20:33:35 2024 GMT
            Not After : Feb  4 20:38:35 2025 GMT
        Subject: CN=4DE23616579B47F13BD9FEAB7C01F8CCCCCAC7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:01:5a:f0:73:e2:5d:d9:c9:2c:28:0b:ed:
                    c1:91:2f:3b:cc:7e:b4:2d:b1:b8:19:c0:7e:1c:86:
                    1b:86:db:c9:cc:36:42:92:47:84:7c:1a:62:c9:ee:
                    90:cb:c9:74:70:99:94:2e:80:9e:e0:46:b6:c4:80:
                    03:fa:67:6d:d8:2f:af:f9:56:5f:8a:82:b2:97:ff:
                    1c:88:02:25:2d:23:26:18:e7:e5:de:6f:e6:26:53:
                    ff:c8:5e:eb:e8:b7:27:af:ff:a6:bc:e0:f4:5e:6b:
                    9a:bc:f5:a7:ce:06:b2:48:9a:d2:06:10:5a:08:54:
                    42:c2:17:cc:eb:09:9a:43:61:c7:0a:3f:82:0e:ca:
                    9e:c2:b1:2d:4a:6a:e6:1b:f8:cb:e8:6a:08:74:0f:
                    52:57:fd:71:13:ca:da:0b:ce:7f:a0:3d:db:f4:81:
                    8b:f9:cf:11:cb:51:28:78:e5:13:7d:b5:f0:d1:68:
                    b2:6d:e2:ab:5f:1f:62:58:f6:90:10:f3:7c:8b:59:
                    a3:17:ea:ba:63:d7:34:a6:fc:fc:f6:c5:87:85:e4:
                    b9:93:4c:1a:c9:ba:27:02:d8:71:f0:e3:ee:01:b7:
                    54:ff:4a:59:5e:06:c9:a2:21:4e:8b:18:b3:8e:81:
                    a5:db:c1:42:d9:1f:5b:96:31:7e:d3:ce:78:6c:64:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:36:16:57:9B:47:F1:3B:D9:FE:AB:7C:01:F8:CC:CC:CA:C7:F3
            X509v3 Authority Key Identifier:
                keyid:0C:56:31:47:D3:FB:07:1E:05:A3:2F:1A:4A:08:73:12:EB:F5:E4:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/0/0C563147D3FB071E05A32F1A4A087312EBF5E448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C563147D3FB071E05A32F1A4A087312EBF5E448.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/0/34352e372e35322e302f32322d3234203d3e20323733333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:8d:ab:52:17:71:e4:7c:ab:e2:e2:4c:be:a0:4a:73:23:cf:
         f3:b8:27:bf:ce:01:d8:13:0c:fd:66:40:67:65:f5:f8:44:32:
         98:9a:3f:d9:cf:bd:14:0c:c1:cf:bc:c6:d9:de:a1:da:77:e9:
         c1:d7:74:fb:f4:58:b1:ee:fc:f2:ad:f9:46:50:44:d8:84:4e:
         be:26:9f:99:b9:1f:71:f7:ef:a3:c2:f1:cc:c3:33:e3:87:91:
         1a:10:7a:6e:3a:2d:f4:ed:f6:0e:c6:e6:4a:39:da:21:25:76:
         df:69:38:a5:0c:74:df:ac:c9:1d:35:a4:d6:76:57:d7:6c:c5:
         66:1c:6e:ea:d2:e9:96:e6:ac:15:de:56:39:3a:97:d7:b4:7b:
         55:23:2e:3d:ff:61:47:ab:55:82:fb:ee:42:2f:91:15:9b:93:
         d0:64:8d:c0:4c:6e:ec:79:ab:f2:4b:1f:9d:8b:4b:68:17:8d:
         6c:28:08:a9:bf:5f:6f:75:e5:7f:e4:aa:d1:37:21:b5:49:bc:
         7c:5d:4c:21:86:ac:98:19:b7:dc:80:46:35:50:1d:f3:12:fb:
         7c:f2:fd:ce:ee:9c:34:c6:21:dc:65:0e:2e:7f:76:47:b0:ff:
         fa:45:e3:37:d6:5c:8e:33:6d:ce:cb:75:96:2d:00:cd:3f:23:
         27:bd:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org