Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32342d3234203d3e20323639303536.roa
File:                     34352e3137382e3230362e302f32342d3234203d3e20323639303536.roa (raw, json)
Hash identifier:          av7NMHoNif4tr1FvVQnqVh/uJIwr2lX8N2N3ZJdiN30=
Subject key identifier:   D7:98:EE:1E:CB:DA:4F:89:ED:1A:BD:98:CC:2B:97:AF:76:6F:E3:16
Certificate issuer:       /CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
Certificate serial:       5E46C36A8A730748067196473CFCB95CCE6098A7
Authority key identifier: 44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32342d3234203d3e20323639303536.roa
Signing time:             Thu 10 Nov 2022 18:40:21 +0000
ROA not before:           Thu 10 Nov 2022 18:35:21 +0000
ROA not after:            Thu 09 Nov 2023 18:40:21 +0000
asID:                     269056
IP address blocks:        45.178.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:46:c3:6a:8a:73:07:48:06:71:96:47:3c:fc:b9:5c:ce:60:98:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
        Validity
            Not Before: Nov 10 18:35:21 2022 GMT
            Not After : Nov  9 18:40:21 2023 GMT
        Subject: CN=3082010A0282010100C101E3CAD65B68202E0478CF44B05B8120D818DCE8D765B032BADE2537A7AEB20BFC75217C035610FE58AF69CD56287D2FB68F3AB6ED855C085D22609DE0100686C62EEBE8908EB2E225616A048C5DEA0DAFB52C88258FD3B932175AA4C9EFDF1EEF20F1EDE46419F4E40703549BC8D12D7322690E4DF13C6AECD8852887EACDF99867A9403854776F2EFD8F746C87FB37FB82A5045563C3790D9552CC7C197C8613F96DFC8F06CD38C3DAF6281076E828EE6E2F2D575D55ED6300963861ADD147CDD4AE9476C12485E9467C6B07D5AFCBC9B4956A360C85E1A1F5291E4FC4B0C212CCF85932189AFA8E6545751AF847D2D4C2D18FD401FB9728E29D0FD71A350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:e3:ca:d6:5b:68:20:2e:04:78:cf:44:b0:
                    5b:81:20:d8:18:dc:e8:d7:65:b0:32:ba:de:25:37:
                    a7:ae:b2:0b:fc:75:21:7c:03:56:10:fe:58:af:69:
                    cd:56:28:7d:2f:b6:8f:3a:b6:ed:85:5c:08:5d:22:
                    60:9d:e0:10:06:86:c6:2e:eb:e8:90:8e:b2:e2:25:
                    61:6a:04:8c:5d:ea:0d:af:b5:2c:88:25:8f:d3:b9:
                    32:17:5a:a4:c9:ef:df:1e:ef:20:f1:ed:e4:64:19:
                    f4:e4:07:03:54:9b:c8:d1:2d:73:22:69:0e:4d:f1:
                    3c:6a:ec:d8:85:28:87:ea:cd:f9:98:67:a9:40:38:
                    54:77:6f:2e:fd:8f:74:6c:87:fb:37:fb:82:a5:04:
                    55:63:c3:79:0d:95:52:cc:7c:19:7c:86:13:f9:6d:
                    fc:8f:06:cd:38:c3:da:f6:28:10:76:e8:28:ee:6e:
                    2f:2d:57:5d:55:ed:63:00:96:38:61:ad:d1:47:cd:
                    d4:ae:94:76:c1:24:85:e9:46:7c:6b:07:d5:af:cb:
                    c9:b4:95:6a:36:0c:85:e1:a1:f5:29:1e:4f:c4:b0:
                    c2:12:cc:f8:59:32:18:9a:fa:8e:65:45:75:1a:f8:
                    47:d2:d4:c2:d1:8f:d4:01:fb:97:28:e2:9d:0f:d7:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:98:EE:1E:CB:DA:4F:89:ED:1A:BD:98:CC:2B:97:AF:76:6F:E3:16
            X509v3 Authority Key Identifier:
                keyid:44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32342d3234203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:b1:e1:d8:c1:a7:c0:ff:aa:f9:24:d9:b7:ce:b1:37:05:3c:
         c9:f6:3b:ac:84:f9:4a:cc:de:58:a0:62:29:b2:0a:66:96:23:
         70:78:cf:ee:46:f6:64:28:6d:13:12:4f:0d:b5:a9:0b:8b:e5:
         cb:5b:c9:6a:36:79:d8:8a:8d:be:f7:41:de:e4:af:aa:dc:11:
         19:69:6e:0b:98:ea:52:82:5d:cc:c4:7c:35:bb:f6:bc:69:66:
         dd:9e:4e:70:8d:e7:85:aa:fe:91:21:36:5e:60:be:06:61:6d:
         7a:ff:e5:2a:de:8d:14:5b:42:c6:56:9a:21:bc:c2:25:a3:47:
         e2:a7:71:1f:a4:7e:e9:c5:3a:d7:66:7a:4c:08:e7:55:01:2d:
         44:42:da:51:b5:ca:13:9f:e3:49:2b:46:38:50:42:82:60:6d:
         fe:a3:db:98:13:db:12:da:54:fa:a8:ce:ed:f7:6a:e2:29:24:
         02:a7:e0:7d:0f:3e:9c:5b:29:8f:52:0a:a2:41:14:e4:0b:81:
         42:6b:b5:05:0d:a8:e0:ce:c5:03:e0:68:93:0e:eb:fe:80:9d:
         1d:90:ed:7a:2c:0f:d0:ba:0a:66:f1:55:58:e3:6e:55:c5:21:
         df:23:a6:8d:85:e4:f6:02:94:46:c4:94:ad:7f:d6:7f:82:9a:
         31:f7:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:40 2024 by rpki-client on console-fra.rpki-client.org