Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32342d3234203d3e20323639303536.roa
File:                     34352e3137382e3230342e302f32342d3234203d3e20323639303536.roa (raw, json)
Hash identifier:          REcg6TNQ11xbn+Jv5iwRAUD/93zbTR3iDOupeU3A40c=
Subject key identifier:   30:C3:71:99:FA:DF:3A:F9:95:3C:0F:7E:9A:43:F3:A4:2F:A3:D7:7B
Certificate issuer:       /CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
Certificate serial:       109B47542BBC63D700AA60526879FD90B19626A2
Authority key identifier: 44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32342d3234203d3e20323639303536.roa
Signing time:             Thu 10 Nov 2022 18:40:21 +0000
ROA not before:           Thu 10 Nov 2022 18:35:21 +0000
ROA not after:            Thu 09 Nov 2023 18:40:21 +0000
asID:                     269056
IP address blocks:        45.178.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9b:47:54:2b:bc:63:d7:00:aa:60:52:68:79:fd:90:b1:96:26:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
        Validity
            Not Before: Nov 10 18:35:21 2022 GMT
            Not After : Nov  9 18:40:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:10:4a:63:99:40:c1:a0:27:f8:2f:33:bf:
                    1b:2b:1f:39:09:3f:f2:3c:a7:ff:ae:43:75:9c:14:
                    a8:25:11:0a:13:e4:bd:98:e4:68:a4:99:db:6f:2e:
                    02:56:98:ef:71:ae:39:a8:2a:93:8c:55:5e:90:a5:
                    77:e4:46:5f:f2:c5:e0:23:a4:2c:d0:9d:1e:e0:a6:
                    28:e9:9f:da:5b:af:e8:c6:b9:2b:a5:74:ac:19:14:
                    1c:03:f6:3f:0f:20:ca:be:02:84:2f:32:f5:81:de:
                    5e:7a:48:58:9f:8b:64:34:91:f8:e6:75:a0:23:04:
                    c2:f6:82:69:88:26:76:63:53:da:37:0c:dd:33:55:
                    e2:a3:fc:70:0a:99:0f:5d:7a:d8:60:46:66:d2:c1:
                    a7:f2:db:f5:fc:33:14:e0:94:91:ed:10:e1:ee:c5:
                    00:54:a4:31:31:27:20:a9:3b:ca:7c:14:87:7e:d2:
                    18:8f:6e:70:b2:39:d1:fe:a7:a5:39:16:f5:2e:3b:
                    ac:0d:dd:03:00:6f:de:a3:68:06:bd:78:d2:04:51:
                    de:30:de:b9:a6:16:01:63:48:7d:f5:8e:d3:15:74:
                    c7:fd:b2:d2:19:bc:a2:02:1e:e5:c9:1a:e4:14:56:
                    41:b3:87:6b:01:d8:8d:16:a7:87:d2:0a:30:a7:01:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:71:99:FA:DF:3A:F9:95:3C:0F:7E:9A:43:F3:A4:2F:A3:D7:7B
            X509v3 Authority Key Identifier:
                keyid:44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32342d3234203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:62:a3:38:ce:f8:2e:66:67:5b:e1:13:b6:d7:9f:75:1f:f7:
         41:39:9c:5e:b3:66:15:94:b2:b7:01:5e:87:d8:43:c1:a1:db:
         7b:49:05:fd:4d:c5:b5:67:0e:b3:c6:2a:04:38:43:21:78:48:
         23:7c:8c:78:5d:30:83:17:90:c7:9b:aa:87:b9:d8:36:4d:4a:
         3e:2a:83:7c:a4:93:46:8b:cd:48:6f:6f:e9:b3:df:6f:e7:87:
         1a:f0:6b:ed:83:8b:c4:ca:7c:04:36:2f:60:94:cf:68:df:55:
         07:42:57:d7:b3:4c:ac:df:d3:71:4e:1b:94:71:74:73:af:9f:
         3e:87:be:2b:b6:61:c3:9f:d8:70:85:25:85:d1:63:d2:6b:e3:
         f7:15:6f:da:8a:cd:41:8c:a5:b0:a7:d4:4a:3c:96:90:05:b3:
         d3:88:c7:db:d5:01:ef:ce:bc:d2:99:6b:5c:f3:47:8f:a8:6b:
         73:ba:6b:c8:19:d0:a8:2c:fa:82:45:7a:53:e5:02:df:9c:ef:
         69:57:a5:fc:9c:23:5d:82:bc:78:fc:5c:8b:c6:65:11:53:6e:
         0c:e1:89:64:2c:67:08:3c:2c:e5:8b:57:77:13:dc:0d:9d:04:
         23:1f:99:16:b9:fa:be:82:c8:22:49:dd:72:d1:0c:bd:e4:7f:
         ae:08:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:40 2024 by rpki-client on console-fra.rpki-client.org