Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/34352e352e3231322e302f32322d3234203d3e20323636313031.roa
File:                     34352e352e3231322e302f32322d3234203d3e20323636313031.roa (raw, json)
Hash identifier:          hYVNt3NU01CISdIdjj68GnPyaKlNeK75qXOShKrZxsg=
Subject key identifier:   00:A6:AC:7E:2E:35:C5:E9:96:21:8F:CC:5D:03:CF:E2:39:DA:6E:A0
Certificate issuer:       /CN=8C4651A3308D8202B96BFAF56F107E60A6D6277C
Certificate serial:       3139EDACEA25C3B2FF5F0F3B54F114002EB0BE21
Authority key identifier: 8C:46:51:A3:30:8D:82:02:B9:6B:FA:F5:6F:10:7E:60:A6:D6:27:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4651A3308D8202B96BFAF56F107E60A6D6277C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/34352e352e3231322e302f32322d3234203d3e20323636313031.roa
Signing time:             Tue 02 Apr 2024 23:17:45 +0000
ROA not before:           Tue 02 Apr 2024 23:12:45 +0000
ROA not after:            Tue 01 Apr 2025 23:17:45 +0000
asID:                     266101
IP address blocks:        45.5.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:39:ed:ac:ea:25:c3:b2:ff:5f:0f:3b:54:f1:14:00:2e:b0:be:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4651A3308D8202B96BFAF56F107E60A6D6277C
        Validity
            Not Before: Apr  2 23:12:45 2024 GMT
            Not After : Apr  1 23:17:45 2025 GMT
        Subject: CN=00A6AC7E2E35C5E996218FCC5D03CFE239DA6EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:fd:60:38:ca:b0:a4:17:29:4d:e5:07:67:
                    07:77:31:45:1f:f5:31:cc:f1:fc:6b:3a:e3:8d:6b:
                    b7:41:3d:07:4b:dd:de:83:cb:6c:d3:25:a9:e9:a0:
                    1b:7b:3d:7c:27:e9:f1:13:29:50:9d:5b:9e:77:a7:
                    e7:db:92:88:c4:d4:71:03:4f:4b:50:27:f0:f4:eb:
                    21:83:f1:96:a1:68:03:8e:fc:0d:f0:63:78:65:44:
                    89:6b:7d:be:96:c8:c1:4f:d0:35:af:60:9e:64:94:
                    c0:f1:4e:28:e4:9c:04:db:28:f8:b4:8a:fe:ae:ee:
                    87:24:e7:94:f8:42:ad:73:b8:b1:7c:ce:0b:5e:fd:
                    44:44:79:7b:82:d2:ee:0c:4f:99:44:41:32:0c:03:
                    4b:f2:53:e1:1c:f0:02:95:c9:f3:8d:58:fd:95:92:
                    3e:b8:cc:f7:fa:2e:65:70:f2:4c:99:76:5b:2b:e9:
                    2f:10:b6:1b:77:93:8a:56:74:6d:ea:17:dc:0f:da:
                    b6:1e:c9:d4:b0:39:c0:36:29:5a:5e:a0:db:48:c5:
                    48:ef:1c:4f:06:fc:12:31:be:5e:ba:4d:d5:ed:a4:
                    ab:7a:fc:b3:2e:27:f4:7f:32:85:8f:10:d4:a6:ec:
                    a6:c8:38:3e:3f:cb:e6:14:ec:4e:c8:3a:57:60:68:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:AC:7E:2E:35:C5:E9:96:21:8F:CC:5D:03:CF:E2:39:DA:6E:A0
            X509v3 Authority Key Identifier:
                keyid:8C:46:51:A3:30:8D:82:02:B9:6B:FA:F5:6F:10:7E:60:A6:D6:27:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/8C4651A3308D8202B96BFAF56F107E60A6D6277C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4651A3308D8202B96BFAF56F107E60A6D6277C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/34352e352e3231322e302f32322d3234203d3e20323636313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:c7:26:01:7f:1d:2f:0b:92:37:fb:66:91:14:0f:96:28:
         8c:d0:42:66:c1:6f:46:bc:ec:c0:8a:88:21:d5:e4:ec:63:66:
         b8:d4:90:77:56:0a:ae:92:f3:19:20:82:c5:e2:25:c1:cf:91:
         87:1a:7b:7e:ef:cc:5d:95:7c:bf:38:f9:0c:01:5e:1d:17:ee:
         e6:c8:39:2b:60:05:e1:21:f2:a9:15:a7:2e:ef:af:0a:9b:6b:
         51:f6:e3:86:ee:02:2a:b0:b5:16:40:57:b3:92:e1:e0:83:10:
         3f:64:79:bb:fc:17:18:5a:23:1a:43:8a:ab:26:a6:9e:67:47:
         d3:8d:5b:0b:09:82:fd:a3:f6:b4:cf:ef:16:5a:bf:86:a1:fe:
         6d:b6:70:9a:d3:bb:94:ed:f0:7c:85:62:e2:66:f2:4c:1c:5b:
         73:fe:80:fd:09:ec:fe:18:10:7f:29:ce:7b:80:af:96:23:ce:
         ab:7f:93:74:d2:e1:52:56:64:93:a6:39:0e:a4:d8:9d:a9:8b:
         fc:b1:c2:94:92:ed:17:32:2a:dc:b7:01:7d:b9:1a:60:9f:cf:
         ac:7f:30:1d:66:8a:65:87:fc:34:b4:c2:19:56:c3:eb:48:00:
         df:c9:7b:1d:cb:17:b6:e9:e4:7c:86:31:9d:d2:cd:93:19:8d:
         b5:41:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org