Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3232203d3e20323636303933.roa
File:                     34352e352e34302e302f32322d3232203d3e20323636303933.roa (raw, json)
Hash identifier:          p/QRW3EkaV6QsrLj41id4wHqnp5jYGSoSoIp+oQENkI=
Subject key identifier:   AD:51:92:38:7E:89:8C:C6:44:47:76:E6:32:37:B1:91:5A:0D:25:53
Certificate issuer:       /CN=E1D9EB842082B43F6E898575309037B17491B4B1
Certificate serial:       53D098842354F54484701AB042ACC2EEF3AA3CE8
Authority key identifier: E1:D9:EB:84:20:82:B4:3F:6E:89:85:75:30:90:37:B1:74:91:B4:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1D9EB842082B43F6E898575309037B17491B4B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3232203d3e20323636303933.roa
Signing time:             Wed 26 Jan 2022 13:24:40 +0000
ROA not before:           Wed 26 Jan 2022 13:19:40 +0000
ROA not after:            Wed 25 Jan 2023 13:24:40 +0000
asID:                     266093
IP address blocks:        45.5.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d0:98:84:23:54:f5:44:84:70:1a:b0:42:ac:c2:ee:f3:aa:3c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1D9EB842082B43F6E898575309037B17491B4B1
        Validity
            Not Before: Jan 26 13:19:40 2022 GMT
            Not After : Jan 25 13:24:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:f9:bf:5c:bd:99:e8:60:7c:cc:65:f5:59:
                    b1:30:5c:75:e0:7d:4c:99:b5:ad:7f:80:4e:43:89:
                    bf:76:5c:2b:dc:b4:4c:e6:73:1d:9f:1d:84:1d:41:
                    27:3b:aa:f1:1e:a5:bc:d4:bd:d5:04:84:3a:25:f3:
                    45:a8:cf:c4:64:53:b7:6f:3c:6e:69:c8:52:99:4c:
                    73:63:cb:ac:d5:79:b7:3a:88:74:31:04:9f:f8:f0:
                    96:a4:69:0b:30:1f:4e:d4:ad:5f:a3:26:2a:c3:06:
                    29:cd:f6:71:42:a0:d3:45:42:33:85:e4:64:a3:cf:
                    b6:74:8e:6d:d8:2c:11:a9:aa:16:f8:21:7b:0a:e7:
                    47:19:4c:4a:fe:41:12:96:c4:54:03:84:71:4f:35:
                    dd:78:9f:fc:e6:89:b7:86:73:10:01:1e:d0:7a:a8:
                    b5:07:ac:ba:7c:03:2d:09:ab:00:3a:c9:76:f9:16:
                    3b:25:d8:d4:0e:a4:42:b1:13:5e:40:a1:22:a8:9e:
                    84:92:0b:c7:7a:74:71:37:75:34:09:43:67:e8:81:
                    7e:f4:50:11:4f:7e:28:38:11:9f:07:63:40:d7:b6:
                    bb:e9:72:07:3f:b7:bb:f8:22:8b:42:cb:8f:60:e1:
                    e9:94:23:87:3c:1f:76:61:33:d0:09:37:7c:a2:b0:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:51:92:38:7E:89:8C:C6:44:47:76:E6:32:37:B1:91:5A:0D:25:53
            X509v3 Authority Key Identifier:
                keyid:E1:D9:EB:84:20:82:B4:3F:6E:89:85:75:30:90:37:B1:74:91:B4:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/E1D9EB842082B43F6E898575309037B17491B4B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1D9EB842082B43F6E898575309037B17491B4B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3232203d3e20323636303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:61:6d:c2:22:69:fd:eb:b8:01:aa:56:27:6d:9a:15:16:67:
         79:95:6c:c8:7c:09:d8:b1:e3:4c:59:cc:cb:5d:f4:a5:53:b8:
         33:d5:8e:da:5b:27:f3:22:7c:f6:dd:d6:e5:b0:f5:fa:cc:d6:
         78:63:60:e3:15:1d:f3:f3:df:81:14:47:91:5b:fa:e1:89:db:
         11:76:cc:2f:e5:56:4a:80:f3:0f:b0:3a:37:98:43:ef:05:bf:
         67:75:08:c4:a0:42:f7:53:32:ca:1a:8e:53:7f:3c:cb:f7:f6:
         e0:7c:04:c7:3c:47:a0:1a:50:b6:3a:87:da:f9:31:51:a0:78:
         11:88:cd:54:69:da:61:ca:7b:39:55:c4:45:4a:9a:51:d7:ce:
         ed:71:dd:af:ff:0c:02:6e:5a:11:87:03:be:47:97:7e:e8:37:
         9b:66:46:f8:a9:49:ab:59:3b:30:bd:b1:94:d6:73:0f:be:67:
         2d:5b:24:df:dc:1e:00:9a:c9:05:82:09:91:20:ba:4b:42:3d:
         ab:76:d2:ed:2d:87:2a:fd:ca:44:bc:45:f7:2e:1b:23:31:ca:
         31:bb:5b:9d:4e:bb:1e:42:4c:e9:d1:9b:55:47:8b:17:6c:fc:
         48:7b:ac:65:de:0d:d7:b9:b3:a0:e1:35:6d:f3:f9:60:4b:5f:
         ab:e4:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:42 2024 by rpki-client on console-ams.rpki-client.org