Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3332203d3e20323636303933.roa
File:                     34352e352e34302e302f32322d3332203d3e20323636303933.roa (raw, json)
Hash identifier:          Dg4AsO3CqUfqSj9rKJlh+3uzmj4A6Wrqm8ElfPoVvj4=
Subject key identifier:   90:D9:76:DA:12:86:CE:2B:B8:01:0F:96:AE:16:E8:44:96:A9:AB:67
Certificate issuer:       /CN=75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636
Certificate serial:       036A7FFB4B46C135EFBE2FDC7CF1CE5DA9894834
Authority key identifier: 75:B7:C7:7C:ED:B8:5D:E1:34:AD:46:DF:92:CA:9D:EB:D0:AB:76:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3332203d3e20323636303933.roa
Signing time:             Wed 08 Nov 2023 12:24:09 +0000
ROA not before:           Wed 08 Nov 2023 12:19:09 +0000
ROA not after:            Wed 06 Nov 2024 12:24:09 +0000
asID:                     266093
IP address blocks:        45.5.40.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6a:7f:fb:4b:46:c1:35:ef:be:2f:dc:7c:f1:ce:5d:a9:89:48:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636
        Validity
            Not Before: Nov  8 12:19:09 2023 GMT
            Not After : Nov  6 12:24:09 2024 GMT
        Subject: CN=90D976DA1286CE2BB8010F96AE16E84496A9AB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:3f:5f:ab:3c:bc:9a:43:c3:fa:0a:d7:f1:
                    6c:03:e9:69:76:44:d8:9e:14:94:17:08:9e:b3:2b:
                    91:cc:19:ce:0b:d5:56:df:01:91:a3:da:00:25:54:
                    87:77:04:fc:8c:a7:e0:b8:21:12:6c:6e:a9:81:e9:
                    25:fc:54:47:d9:3f:36:1a:7b:1c:bf:ae:de:ca:c9:
                    54:e5:2a:72:24:6b:92:18:cf:2c:10:3b:fc:17:2b:
                    7d:0d:89:f4:90:d9:26:ed:64:0a:3b:77:20:2e:97:
                    29:d9:09:34:0c:63:5c:7a:9c:71:c5:1b:46:f4:fd:
                    26:e3:7b:61:44:a4:7c:50:ef:45:b3:91:eb:b4:e4:
                    41:cd:8b:8a:78:c8:a7:21:b1:e4:b1:ad:72:d1:6f:
                    4a:ac:c0:c0:22:c4:75:ba:12:62:6b:15:c3:d2:ad:
                    51:32:07:7d:23:27:77:6a:6d:d3:11:db:7b:af:ba:
                    82:e8:70:b5:b1:ef:f1:c1:9f:00:d7:b7:8c:c3:82:
                    23:f5:9f:7a:bf:ac:66:e3:62:02:b1:59:be:14:6e:
                    43:d8:f5:05:7e:4d:36:d5:af:2d:b0:1a:a3:68:fb:
                    5e:94:dc:27:c1:30:50:a5:56:2d:7a:07:f6:e1:89:
                    e7:0f:b8:1d:ea:04:d4:34:76:39:91:53:22:74:f9:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D9:76:DA:12:86:CE:2B:B8:01:0F:96:AE:16:E8:44:96:A9:AB:67
            X509v3 Authority Key Identifier:
                keyid:75:B7:C7:7C:ED:B8:5D:E1:34:AD:46:DF:92:CA:9D:EB:D0:AB:76:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3332203d3e20323636303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:03:29:26:09:f4:e5:74:1d:9d:c4:fd:cf:01:97:e1:bf:6b:
         e6:1a:c6:38:12:37:62:20:67:c8:3b:66:e5:3a:2f:eb:fc:ab:
         6c:84:a5:d2:67:c2:d8:22:f1:eb:79:52:a5:be:46:02:88:86:
         1a:44:81:50:69:b3:d7:ef:22:66:aa:c5:ab:e2:e6:4f:a1:67:
         ea:9c:db:09:fa:93:2d:cb:b2:22:7f:63:5c:60:30:46:80:50:
         f9:99:f8:ec:37:27:e5:35:b9:fc:cc:3d:7c:f5:85:87:da:38:
         c2:63:21:0f:fc:93:c3:7f:51:5f:94:a0:e0:ac:dc:d0:2b:69:
         e8:bf:7c:4c:48:68:2d:e9:67:1c:2d:75:52:3a:49:06:97:23:
         f9:0d:99:33:e8:7b:fb:7e:c4:d5:f8:1b:f1:9d:63:e7:a3:29:
         f9:2a:9a:e8:79:f2:71:d5:32:39:15:91:be:1d:bd:54:97:80:
         54:06:96:c6:83:c1:96:21:0d:40:9e:56:69:1b:c0:83:0e:fb:
         21:48:b8:1b:bb:a5:1f:7a:32:68:8c:39:b3:2b:f7:bf:e3:89:
         bb:6f:22:bf:9f:76:38:a6:22:e2:53:40:88:b0:e6:61:2b:32:
         c7:0b:50:ce:f2:6a:d5:3e:78:e6:c2:1f:29:0c:37:98:8e:18:
         72:3e:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org