Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32332d3233203d3e20323636303933.roa
File:                     34352e352e34302e302f32332d3233203d3e20323636303933.roa (raw, json)
Hash identifier:          9MOQcB2lgDA1FwXv7OQJWc9pE4DQTp5sdO+IIIGEbZ8=
Subject key identifier:   30:07:3A:BE:DB:D7:92:D3:55:B5:7F:D1:DC:52:BB:DE:C8:B4:63:D3
Certificate issuer:       /CN=E1D9EB842082B43F6E898575309037B17491B4B1
Certificate serial:       5BD47D849297A064F4DA86FB2D0737EF67608E3B
Authority key identifier: E1:D9:EB:84:20:82:B4:3F:6E:89:85:75:30:90:37:B1:74:91:B4:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1D9EB842082B43F6E898575309037B17491B4B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32332d3233203d3e20323636303933.roa
Signing time:             Wed 26 Jan 2022 13:24:40 +0000
ROA not before:           Wed 26 Jan 2022 13:19:40 +0000
ROA not after:            Wed 25 Jan 2023 13:24:40 +0000
asID:                     266093
IP address blocks:        45.5.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d4:7d:84:92:97:a0:64:f4:da:86:fb:2d:07:37:ef:67:60:8e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1D9EB842082B43F6E898575309037B17491B4B1
        Validity
            Not Before: Jan 26 13:19:40 2022 GMT
            Not After : Jan 25 13:24:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:23:4c:33:29:26:5c:70:1b:ae:70:3a:73:
                    3b:c7:20:29:e5:28:7f:08:14:a7:a2:d2:e6:66:83:
                    05:d1:98:ed:68:8c:bd:3c:e9:ab:07:85:bf:80:fc:
                    96:94:a0:80:5b:8a:68:88:f3:1a:3b:b3:85:02:e6:
                    f3:3c:9e:c0:50:d0:32:0b:49:73:0f:7c:9f:92:c1:
                    99:a2:3f:a6:84:7b:74:61:0a:54:2f:19:2a:77:17:
                    36:75:6d:4e:65:d1:f9:49:25:32:e5:43:96:b8:df:
                    67:8e:04:a7:a9:62:6d:ab:df:21:5f:eb:b8:ca:44:
                    a2:96:6c:bc:ff:0c:f1:cf:28:be:2d:a4:a2:22:77:
                    06:12:4a:87:e9:c2:03:48:15:ce:fc:b3:ee:01:4a:
                    35:be:59:ae:5d:e3:fa:78:af:7f:c4:55:b0:6c:a4:
                    1d:c5:88:90:f6:67:df:60:2a:2b:b7:d7:de:fb:7e:
                    50:7c:be:11:c7:cf:5f:66:b7:cb:b2:f5:a4:e7:ef:
                    4a:2a:76:c4:a8:d1:a6:68:ab:82:48:ad:34:1d:91:
                    f3:17:f3:48:20:c1:2d:1e:81:0d:96:6a:55:e4:9e:
                    e5:b0:93:5d:08:60:c9:51:c9:07:8b:fa:47:23:c1:
                    b2:70:36:4e:28:0c:21:4b:28:1c:11:b8:4c:da:99:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:3A:BE:DB:D7:92:D3:55:B5:7F:D1:DC:52:BB:DE:C8:B4:63:D3
            X509v3 Authority Key Identifier:
                keyid:E1:D9:EB:84:20:82:B4:3F:6E:89:85:75:30:90:37:B1:74:91:B4:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/E1D9EB842082B43F6E898575309037B17491B4B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1D9EB842082B43F6E898575309037B17491B4B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32332d3233203d3e20323636303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:25:97:4f:d7:bc:79:ab:a9:66:15:b7:48:2e:61:70:e6:
         e0:49:21:d7:5d:f8:a3:db:3e:32:54:4d:ff:1a:24:5f:d5:7d:
         3e:22:0f:2b:78:2d:6f:f5:4f:ee:30:09:ac:e0:60:05:34:40:
         e7:d9:04:f7:43:19:84:a4:dc:ac:de:ea:62:69:5f:2d:27:a7:
         f6:a5:90:1e:9c:c4:f5:59:93:b4:3a:f8:97:2f:6a:f2:01:09:
         27:63:88:6d:27:fa:71:e3:ba:0c:93:7b:9c:4a:ac:2e:97:fc:
         54:24:79:44:23:d6:32:b2:83:de:91:5b:9a:9c:10:32:a3:5f:
         df:a2:fc:7e:43:04:70:b0:ef:24:d0:4c:f4:41:aa:3c:45:2a:
         94:71:f4:d1:3a:19:2d:33:a7:6c:5b:f3:17:8d:5a:17:47:67:
         82:f4:47:86:ac:25:00:bd:bb:fe:90:18:e4:42:9b:8e:84:5a:
         02:b1:37:e6:f0:51:fe:5a:d5:3c:f4:2b:57:17:00:d9:c0:31:
         47:c3:6e:fd:69:92:07:8d:08:53:5c:d7:4c:2a:b2:aa:59:d5:
         bd:52:f9:c6:e9:07:72:b4:ea:d7:b0:c3:a9:a8:40:99:1f:e5:
         4c:25:27:62:70:4b:59:be:ca:f3:c7:37:71:c0:a2:9f:31:09:
         c6:68:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org