Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/0/34352e352e3231322e302f32322d3234203d3e20323636313031.roa
File:                     34352e352e3231322e302f32322d3234203d3e20323636313031.roa (raw, json)
Hash identifier:          RPDI4v2FU6VV+lxwvkhinj/aWZYsLmgF74Rd4NzU+AU=
Subject key identifier:   CD:12:16:C8:EE:29:A2:AB:32:42:AB:06:38:FC:D9:CB:5C:BE:22:78
Certificate issuer:       /CN=6F5235A07BE2112EF77598049545376B4D51493A
Certificate serial:       6449B0EA682D85A053346741112DCD4BC4587B3F
Authority key identifier: 6F:52:35:A0:7B:E2:11:2E:F7:75:98:04:95:45:37:6B:4D:51:49:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F5235A07BE2112EF77598049545376B4D51493A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/0/34352e352e3231322e302f32322d3234203d3e20323636313031.roa
Signing time:             Thu 03 Aug 2023 19:33:02 +0000
ROA not before:           Thu 03 Aug 2023 19:28:02 +0000
ROA not after:            Thu 01 Aug 2024 19:33:02 +0000
asID:                     266101
IP address blocks:        45.5.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:49:b0:ea:68:2d:85:a0:53:34:67:41:11:2d:cd:4b:c4:58:7b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5235A07BE2112EF77598049545376B4D51493A
        Validity
            Not Before: Aug  3 19:28:02 2023 GMT
            Not After : Aug  1 19:33:02 2024 GMT
        Subject: CN=CD1216C8EE29A2AB3242AB0638FCD9CB5CBE2278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:7a:35:5e:dd:dc:b8:8f:6d:6e:c4:71:b4:
                    37:e8:19:13:60:06:4e:59:88:6d:a8:06:09:9a:fd:
                    40:ad:32:b1:07:63:dd:fe:f6:e4:ce:c9:60:29:e0:
                    8f:be:67:5a:ad:bd:cf:48:03:f2:01:95:fd:a4:2a:
                    25:47:ba:0d:2e:21:30:85:bf:ff:5e:4c:f6:9e:56:
                    a1:36:ab:5b:7e:41:26:eb:d1:be:9c:86:22:66:dc:
                    91:e4:97:3b:1f:6d:96:43:f8:b4:fc:47:5b:1d:92:
                    4a:2a:bd:e4:c1:48:af:2c:80:6a:79:d8:2a:32:8a:
                    d7:d0:d3:14:bd:54:ae:1f:c3:71:0d:7c:31:4a:23:
                    8e:3f:31:d5:17:cd:b8:2c:ff:3c:df:51:c8:b6:bc:
                    94:cc:f2:5c:42:8a:32:28:e7:39:b1:4d:8f:99:d8:
                    07:05:1f:0b:d1:17:1e:c5:15:27:f6:52:a2:4d:c6:
                    94:c8:f1:67:85:b0:63:69:78:db:34:7e:29:5d:cc:
                    41:89:f2:d4:e0:c0:d4:39:0d:b5:e1:cd:d5:7b:8d:
                    a9:50:70:de:be:04:e0:5b:5c:62:ff:d8:0f:be:66:
                    ed:fb:d5:2b:77:dc:d6:7d:e3:02:6a:92:65:04:c9:
                    2b:ca:da:03:5b:ab:29:48:9f:57:54:28:3d:74:10:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:12:16:C8:EE:29:A2:AB:32:42:AB:06:38:FC:D9:CB:5C:BE:22:78
            X509v3 Authority Key Identifier:
                keyid:6F:52:35:A0:7B:E2:11:2E:F7:75:98:04:95:45:37:6B:4D:51:49:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/0/6F5235A07BE2112EF77598049545376B4D51493A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F5235A07BE2112EF77598049545376B4D51493A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/0/34352e352e3231322e302f32322d3234203d3e20323636313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:bf:6d:1d:e7:4a:29:58:ce:f6:d3:9e:98:85:e7:37:7f:
         e7:22:c4:8c:e6:dd:85:5f:64:fb:f6:a0:91:d9:93:27:fd:90:
         30:d0:88:58:2b:39:27:7e:5f:92:71:c0:b6:c1:ee:c1:d9:dc:
         1f:b0:a7:f0:b4:9a:d2:6f:77:04:4f:6e:5d:9c:00:04:63:f5:
         cd:3b:18:31:92:e2:34:9c:cb:33:a1:3d:39:19:a3:a5:f8:9b:
         ca:6d:55:4a:1d:24:4d:69:58:64:3e:12:0a:96:ae:c6:05:9f:
         59:37:c4:e8:fa:56:21:40:8c:c7:0c:b6:8c:8d:f1:93:0c:ee:
         b6:48:f7:12:8f:11:fc:b3:2a:09:f8:3c:20:bb:92:33:6b:ff:
         26:c0:db:05:f5:46:41:a8:78:ea:e8:d2:a0:eb:b0:f4:95:ab:
         81:06:40:dd:e3:ba:7a:ac:f4:b8:fd:cc:01:1c:5b:7f:ff:9c:
         3c:be:5f:04:9b:2a:51:af:ee:d6:91:1a:20:ad:55:de:1a:bc:
         2f:94:ef:64:4e:11:6e:6f:d5:ab:a5:74:26:5e:7d:e7:f1:b6:
         f3:8d:04:45:d6:a5:41:f0:fc:34:66:53:37:b5:25:b5:80:1f:
         b9:f5:18:c8:51:30:6d:8c:d0:d9:d9:c5:41:82:6c:33:46:36:
         e5:8b:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org