Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
File:                     34352e3136362e342e302f32322d3332203d3e20323637393432.roa (raw, json)
Hash identifier:          40fhVykn7w/EZKAsxOkdHZ6BLpdEH9SzYwt/UqKuzis=
Subject key identifier:   57:66:E8:78:0F:0E:CD:36:9E:FA:67:AE:B1:1C:1E:29:07:74:F2:46
Certificate issuer:       /CN=03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217
Certificate serial:       7E5710D56ECE0A491FAB5B1023FF1AB76A9BA0B9
Authority key identifier: 03:D2:FF:5B:D5:B0:97:EE:BD:7B:DF:C2:7C:9F:DD:10:7C:DB:52:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
Signing time:             Wed 01 Mar 2023 13:29:32 +0000
ROA not before:           Wed 01 Mar 2023 13:24:32 +0000
ROA not after:            Wed 28 Feb 2024 13:29:32 +0000
asID:                     267942
IP address blocks:        45.166.4.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:57:10:d5:6e:ce:0a:49:1f:ab:5b:10:23:ff:1a:b7:6a:9b:a0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217
        Validity
            Not Before: Mar  1 13:24:32 2023 GMT
            Not After : Feb 28 13:29:32 2024 GMT
        Subject: CN=5766E8780F0ECD369EFA67AEB11C1E290774F246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:00:3a:44:d4:e0:bc:1b:27:94:55:da:50:
                    92:ee:82:fb:70:31:8e:5f:39:fa:d8:91:52:69:e7:
                    58:c8:d4:45:56:d5:1d:12:bc:ad:e4:bc:fb:e6:9a:
                    5e:9b:ab:92:36:1e:37:e0:69:67:35:3e:a2:ce:4e:
                    b7:ca:41:71:be:16:05:74:89:30:b2:b8:f5:0f:ba:
                    66:b5:f9:7e:26:32:e1:77:db:86:ac:9f:20:0c:f2:
                    84:92:5d:5d:c1:f0:11:9c:4b:15:86:07:26:c2:51:
                    98:32:9f:31:8c:63:29:2a:69:cb:d1:eb:ef:6b:93:
                    18:da:95:30:f6:0e:25:37:0a:90:8f:b5:ee:d8:99:
                    e8:72:8c:c8:70:77:e6:3e:1a:a3:af:45:06:e1:38:
                    18:32:2a:c2:09:d4:7b:92:91:72:83:a9:f4:16:83:
                    ba:da:ed:9a:ed:9f:e3:68:a8:1e:cd:91:c9:d1:e5:
                    97:56:24:40:29:eb:e9:d8:67:1b:b4:82:3b:2d:38:
                    b4:4b:c9:a6:99:84:38:c0:5d:52:b9:1e:b9:b8:86:
                    8e:d7:02:06:75:76:93:44:ac:33:13:55:9b:ee:0e:
                    4f:0b:8c:2f:7a:40:63:c7:8b:b9:58:5b:2c:42:c2:
                    4e:10:e8:cf:35:6f:8f:37:4f:d4:c7:43:65:a8:fc:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:E8:78:0F:0E:CD:36:9E:FA:67:AE:B1:1C:1E:29:07:74:F2:46
            X509v3 Authority Key Identifier:
                keyid:03:D2:FF:5B:D5:B0:97:EE:BD:7B:DF:C2:7C:9F:DD:10:7C:DB:52:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:3e:87:b2:df:be:9f:cc:65:a9:a6:1a:ab:a7:58:64:1c:
         ec:7d:bd:18:34:63:27:8b:20:31:97:ac:0c:df:70:58:df:47:
         07:73:02:a1:dc:f7:6c:a6:d2:d7:b9:2a:39:88:f8:97:47:fb:
         9b:e6:6b:05:79:ab:f4:04:e3:1c:80:30:5c:e3:39:a5:a7:74:
         d7:ee:cb:a9:c1:3a:f8:89:73:ac:a8:bb:5c:73:0b:ca:8a:0f:
         9b:58:75:df:91:f8:7d:6e:a9:d9:70:44:67:48:9e:2a:36:94:
         9b:56:99:64:c1:02:14:6e:8c:78:78:1d:8d:21:ff:e0:65:9d:
         60:d4:95:df:35:13:d6:30:b4:1a:31:8e:33:b0:78:db:b9:b2:
         f5:c4:7e:10:71:2d:71:da:9b:47:f8:7a:45:44:78:46:3d:dc:
         52:8c:56:12:24:f6:c8:34:20:cd:a2:f6:f4:ee:28:db:82:d6:
         2a:7a:eb:da:3c:cd:02:63:ad:00:a6:f5:0d:0d:5c:06:d7:66:
         fb:93:8f:47:57:23:0a:2d:be:16:8e:23:30:ec:1d:b4:16:50:
         0c:7f:a8:bb:ca:f4:8c:7e:8d:33:80:f9:c9:db:44:e9:c0:24:
         d3:c0:a7:bd:df:21:44:02:bb:7e:59:03:a8:62:ff:b7:88:4e:
         90:b4:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org