Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34322e302f32332d3233203d3e20323636303933.roa
File:                     34352e352e34322e302f32332d3233203d3e20323636303933.roa (raw, json)
Hash identifier:          4wSX+u66gHRuv6gAlpZfkwn7NebNQP+m1FT5je5cuRk=
Subject key identifier:   22:F2:F0:9E:DB:45:DC:32:BC:73:4F:91:4E:45:92:FC:96:95:4F:F2
Certificate issuer:       /CN=510070C535E134D7C9941777DF3730EC6B804737
Certificate serial:       4B5444A6168F65F17CCFA5CB3F05CB9D23B479A2
Authority key identifier: 51:00:70:C5:35:E1:34:D7:C9:94:17:77:DF:37:30:EC:6B:80:47:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510070C535E134D7C9941777DF3730EC6B804737.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34322e302f32332d3233203d3e20323636303933.roa
Signing time:             Mon 06 May 2024 13:12:28 +0000
ROA not before:           Mon 06 May 2024 13:07:28 +0000
ROA not after:            Mon 05 May 2025 13:12:28 +0000
asID:                     266093
IP address blocks:        45.5.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:54:44:a6:16:8f:65:f1:7c:cf:a5:cb:3f:05:cb:9d:23:b4:79:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510070C535E134D7C9941777DF3730EC6B804737
        Validity
            Not Before: May  6 13:07:28 2024 GMT
            Not After : May  5 13:12:28 2025 GMT
        Subject: CN=22F2F09EDB45DC32BC734F914E4592FC96954FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:fa:20:16:a5:cd:77:f8:5d:63:53:dc:27:
                    e3:d1:28:6f:bd:91:ca:41:c6:f9:dd:28:2f:5d:03:
                    d3:ed:c1:e6:ae:ad:f2:c8:2b:69:23:b7:09:6a:b4:
                    70:9a:6b:ad:b5:d4:e0:c7:21:1a:4c:dd:2b:3b:2c:
                    97:25:b8:5d:67:9e:29:6e:8f:a4:3d:1c:7f:9c:c7:
                    68:ec:a4:a3:61:29:a2:43:af:5f:53:f7:9d:fe:72:
                    db:1a:9c:71:fc:2d:f0:8b:b5:c5:c1:69:f1:2a:b9:
                    65:70:b3:c5:2e:8c:66:4a:2a:7e:66:51:59:32:87:
                    60:c8:0c:02:a6:78:54:02:8f:83:9c:da:8f:41:e7:
                    9c:e8:17:59:f4:41:f8:a1:d6:af:ae:04:5b:9c:c0:
                    e1:66:b2:c1:4c:94:c6:67:5a:de:08:85:d2:74:81:
                    3e:a6:73:21:cb:1a:7b:ab:39:b2:95:42:e2:29:35:
                    ae:cb:9f:09:16:ad:bc:3e:d1:75:18:83:ea:42:7a:
                    91:85:f2:92:d6:69:ea:a3:36:d1:2f:e1:73:3e:fb:
                    4f:92:a2:62:75:70:d4:fb:10:1e:e0:75:a0:9f:f0:
                    a9:70:85:75:cb:3a:8f:55:e2:c7:f8:59:09:4b:44:
                    fe:a9:c5:a4:93:73:06:b9:ef:41:ca:54:4c:c2:70:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F2:F0:9E:DB:45:DC:32:BC:73:4F:91:4E:45:92:FC:96:95:4F:F2
            X509v3 Authority Key Identifier:
                keyid:51:00:70:C5:35:E1:34:D7:C9:94:17:77:DF:37:30:EC:6B:80:47:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/510070C535E134D7C9941777DF3730EC6B804737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510070C535E134D7C9941777DF3730EC6B804737.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34322e302f32332d3233203d3e20323636303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:04:47:73:f8:64:0d:74:62:c4:ef:e3:90:f5:93:8c:54:0f:
         c6:5f:84:e9:42:b4:50:6e:ae:71:9f:fb:0d:e4:68:aa:45:64:
         83:0e:cb:f2:d2:ba:57:c2:02:e7:0c:5c:28:08:5d:66:09:3a:
         a1:70:36:79:34:e4:79:b3:a4:0a:d8:24:9f:4c:24:2e:29:e3:
         5f:0e:72:bd:1d:37:22:ed:64:3f:99:f0:76:e0:0d:20:1c:4d:
         cd:fa:e1:0d:18:46:33:2f:e5:ca:31:73:f0:db:b8:ed:48:76:
         d9:aa:ab:69:5b:85:39:bd:7f:ea:93:96:f0:9b:c9:17:24:1e:
         58:03:95:84:85:b3:16:7b:60:1d:bd:17:65:8a:3c:6c:cb:a1:
         84:76:e5:48:c4:49:46:83:06:42:6d:22:13:01:df:dd:7d:8a:
         92:91:46:83:f1:e2:ae:c8:f9:29:08:6e:0a:41:ac:8c:70:eb:
         eb:e7:ff:9a:f0:4a:16:59:dd:b4:28:40:ab:7d:39:7b:cb:98:
         8d:24:23:b4:bf:b1:3c:c4:70:f9:f9:c9:41:c1:29:cf:36:51:
         f6:a6:73:20:a8:40:30:cf:35:a7:1a:38:cc:7d:10:c0:00:10:
         e2:c3:54:4c:26:67:75:34:55:01:6a:7a:aa:e8:58:b7:92:7e:
         cb:ae:cb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:42 2024 by rpki-client on console-ams.rpki-client.org