Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135322e302f32322d3232203d3e20323637333238.roa
File:                     34352e3233332e3135322e302f32322d3232203d3e20323637333238.roa (raw, json)
Hash identifier:          syIUqyhJAgGIXPEE5tBbWJo68QP0qJ0ed+fnN8NRXqg=
Subject key identifier:   16:EC:36:3E:5D:DB:40:6E:E9:8A:30:65:A4:5A:87:DF:E8:B8:F7:D0
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       45F25406A486F589B8A46B4E93CCBA957F06F07F
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135322e302f32322d3232203d3e20323637333238.roa
Signing time:             Wed 03 May 2023 19:02:03 +0000
ROA not before:           Wed 03 May 2023 18:57:03 +0000
ROA not after:            Wed 01 May 2024 19:02:03 +0000
asID:                     267328
IP address blocks:        45.233.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f2:54:06:a4:86:f5:89:b8:a4:6b:4e:93:cc:ba:95:7f:06:f0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: May  3 18:57:03 2023 GMT
            Not After : May  1 19:02:03 2024 GMT
        Subject: CN=16EC363E5DDB406EE98A3065A45A87DFE8B8F7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:e0:6f:0b:a0:56:e9:f9:85:51:8a:90:f2:
                    c2:55:ac:d9:f2:f4:1b:85:58:eb:cf:b4:16:e8:d4:
                    eb:ac:6b:b7:1f:91:eb:a3:6b:38:01:84:21:21:86:
                    57:44:37:26:5d:ed:f8:cb:32:e4:c6:6f:a2:c1:4d:
                    1d:e1:31:f9:f5:1e:82:f6:bc:cb:49:1f:b8:35:28:
                    30:b7:68:73:ac:b1:6d:63:2c:2a:45:79:2b:e1:5a:
                    47:c4:de:ad:2f:f8:80:3d:c5:03:51:c5:79:23:3d:
                    9d:4b:16:b5:dd:81:ef:57:9d:a1:ac:c6:a3:69:51:
                    46:12:42:e3:e0:52:46:26:7d:0f:15:62:75:f8:07:
                    56:c1:e8:c9:29:84:75:2e:9e:c3:9d:cc:4d:a9:bb:
                    e4:e8:99:80:a3:b6:17:2b:b6:50:b9:ee:56:95:88:
                    7b:48:3a:5f:50:47:e5:95:09:c0:f3:d9:9e:9f:d0:
                    bf:a4:b8:0f:f0:0d:d0:98:21:d9:9e:fd:b7:2f:ea:
                    5b:81:80:cc:d6:b4:0f:06:e7:b5:a5:9d:98:fe:19:
                    8a:c1:4f:f0:ca:a7:6d:03:07:39:bd:63:1e:a2:0c:
                    06:6b:56:aa:cc:7b:d5:54:96:85:f8:ef:db:35:48:
                    66:84:ac:f3:a5:49:fb:ea:85:f1:e6:69:75:d8:bb:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EC:36:3E:5D:DB:40:6E:E9:8A:30:65:A4:5A:87:DF:E8:B8:F7:D0
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135322e302f32322d3232203d3e20323637333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:05:c2:0d:fd:9a:d1:28:ad:e0:66:87:c2:9b:ee:54:57:73:
         61:0a:f5:c5:db:42:85:de:3d:98:06:5e:d4:7a:80:6d:95:4d:
         40:d0:bb:0b:dc:1e:d6:96:f5:0c:54:1e:34:a7:f3:4c:5f:3c:
         60:49:85:9f:d9:b2:45:89:ea:de:5f:29:9b:5b:9e:d9:56:b9:
         40:28:c6:28:56:ea:45:bd:5f:83:d1:b9:b3:1d:30:c2:fb:4e:
         54:82:7b:16:c7:b5:f0:17:be:7b:df:f6:26:91:80:d2:5e:5a:
         49:35:b5:f0:fa:f8:1e:bb:2a:17:96:10:f2:ae:19:be:5c:df:
         1e:ca:00:9c:76:78:16:49:ee:80:23:29:cd:8d:87:5e:c2:c3:
         5a:52:56:9e:0c:2d:5d:f1:9a:fe:ca:fa:9d:8a:2e:c7:ad:7a:
         5c:a2:fd:62:a5:be:e3:f3:99:9f:39:3f:4e:3a:e6:6d:6b:27:
         33:a6:3a:49:d3:27:cd:83:13:6a:d4:1b:75:99:66:77:91:92:
         0e:ce:4e:68:84:c2:c7:85:f4:ff:0e:8b:66:6e:84:54:79:a2:
         49:9b:5a:03:f3:a6:d9:2c:b8:45:f6:0d:ec:72:54:e9:61:57:
         6a:68:2d:e4:2b:2e:23:45:05:c1:05:e4:f9:d9:0e:18:13:4e:
         55:db:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org