Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32322d3234203d3e20323636303438.roa
File:                     34352e342e3131362e302f32322d3234203d3e20323636303438.roa (raw, json)
Hash identifier:          +thnLdwi7xTgNAPsxVdUElWVr4Y0kSFnsY5LdV9ikjI=
Subject key identifier:   04:E7:40:17:CA:6D:13:02:D3:19:DE:9D:F7:03:D9:90:5F:60:88:55
Certificate issuer:       /CN=75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE
Certificate serial:       441C00F578F5DD7CA1D934C9A54F938EB0EA0955
Authority key identifier: 75:92:9E:53:33:E7:D7:81:D3:AC:3F:C1:DE:1E:5B:A2:E9:74:B0:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32322d3234203d3e20323636303438.roa
Signing time:             Mon 04 Jul 2022 21:00:00 +0000
ROA not before:           Mon 04 Jul 2022 20:55:00 +0000
ROA not after:            Mon 03 Jul 2023 21:00:00 +0000
asID:                     266048
IP address blocks:        45.4.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1c:00:f5:78:f5:dd:7c:a1:d9:34:c9:a5:4f:93:8e:b0:ea:09:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE
        Validity
            Not Before: Jul  4 20:55:00 2022 GMT
            Not After : Jul  3 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:3e:3d:18:8d:51:31:e9:be:9a:d4:a5:85:
                    1e:dd:45:8b:d9:1b:e0:69:be:0a:7f:86:cb:2d:9f:
                    32:62:f8:e7:78:3e:e4:b7:02:de:68:8e:a3:9a:63:
                    85:ed:68:b9:78:63:48:a1:1f:9f:01:df:ba:2b:97:
                    bb:73:e2:a1:6c:4b:d7:55:c2:55:a4:d4:83:17:46:
                    11:70:07:6d:a9:12:4e:63:8c:4f:15:3a:fa:12:cb:
                    8b:18:d5:3e:8f:2a:0d:ff:9a:b0:c3:3c:a9:e4:dc:
                    62:7e:82:29:72:d8:dc:23:d7:ec:b5:c5:55:d6:59:
                    bc:9b:53:83:7e:45:b5:d1:a6:09:35:5f:d0:cd:e2:
                    5e:16:d1:ad:b3:78:aa:43:f8:ee:c6:3f:2f:3a:1b:
                    6a:4e:16:1a:61:17:c1:b6:1e:49:9a:fc:be:a7:40:
                    76:12:10:fe:cc:61:40:94:0b:85:7b:cf:ae:c8:fa:
                    c9:e8:03:d3:67:9e:b5:88:e4:aa:7f:cb:cc:10:2f:
                    bc:e3:18:e1:e7:ba:06:89:4c:c3:6a:15:b5:71:78:
                    d9:b7:de:0a:5d:d2:81:6d:97:21:85:57:cd:50:9d:
                    20:ca:dc:22:72:50:8c:1f:8f:ff:a6:1a:40:26:b2:
                    3a:18:d4:41:0d:34:fa:8d:10:28:af:69:a4:b7:c5:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E7:40:17:CA:6D:13:02:D3:19:DE:9D:F7:03:D9:90:5F:60:88:55
            X509v3 Authority Key Identifier:
                keyid:75:92:9E:53:33:E7:D7:81:D3:AC:3F:C1:DE:1E:5B:A2:E9:74:B0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32322d3234203d3e20323636303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:f8:95:fb:3d:86:ba:cf:c5:90:ea:18:49:58:f4:ee:1e:d2:
         2d:5f:f6:31:ec:5e:da:4a:81:ea:50:49:10:c7:7a:c0:6a:8c:
         c7:04:a1:95:71:a7:6c:f4:fe:1b:80:a0:8d:51:ee:fd:4e:f0:
         81:c0:af:87:d1:8e:b5:08:5a:ed:a8:0c:be:3d:60:49:d6:e3:
         20:5d:00:5f:e3:68:29:47:98:3a:83:75:d0:5f:69:42:cd:89:
         ad:37:7b:5e:a4:4b:46:f5:45:0e:3e:e0:26:e8:43:c4:c6:b8:
         f2:16:07:dd:10:d7:0f:d0:af:bd:ed:2a:fa:cd:e5:19:28:3f:
         98:9b:e1:59:3c:d0:86:f3:a1:c6:29:eb:db:bd:fb:16:20:a1:
         2e:39:ec:f4:35:24:2c:2c:63:b5:a1:83:fa:92:91:69:49:1a:
         d6:6e:35:cb:03:c8:1f:4f:62:e6:1a:77:f0:bd:df:04:d0:41:
         34:ab:79:57:64:2c:a5:82:7c:99:01:ec:c0:92:bf:86:53:70:
         64:0f:26:ac:07:6f:2c:c4:30:6f:f2:47:1e:58:27:b0:33:6c:
         40:7f:2c:7c:c0:49:ba:df:b3:11:2d:1f:7d:37:4f:a3:a6:55:
         a9:50:f5:f9:43:cc:87:23:88:2b:f7:f4:ad:cf:fe:9f:74:16:
         73:6d:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org