Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32332d3233203d3e20323636313233.roa
File:                     34352e352e3232302e302f32332d3233203d3e20323636313233.roa (raw, json)
Hash identifier:          sfMgmJ89ZJUWyoBOn+CvAgJTKb643N6KTZ3jPvSmFrE=
Subject key identifier:   38:A6:1F:C9:A7:C9:2C:D6:D7:A6:09:E0:12:DB:F3:61:4C:C9:18:30
Certificate issuer:       /CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
Certificate serial:       2BC3C348EDECE96A8C5E67E6EB88E81C9B1F2E87
Authority key identifier: 83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32332d3233203d3e20323636313233.roa
Signing time:             Mon 09 May 2022 17:55:01 +0000
ROA not before:           Mon 09 May 2022 17:50:01 +0000
ROA not after:            Mon 08 May 2023 17:55:01 +0000
asID:                     266123
IP address blocks:        45.5.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c3:c3:48:ed:ec:e9:6a:8c:5e:67:e6:eb:88:e8:1c:9b:1f:2e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
        Validity
            Not Before: May  9 17:50:01 2022 GMT
            Not After : May  8 17:55:01 2023 GMT
        Subject: CN=38A61FC9A7C92CD6D7A609E012DBF3614CC91830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:6e:b7:c1:9e:a4:7e:3a:39:ad:a0:0e:24:
                    c4:e5:19:00:85:64:4a:cd:42:35:18:3d:c3:ef:a8:
                    00:64:1d:34:54:07:7e:4c:a2:56:58:32:64:12:f3:
                    08:c3:44:94:0e:53:d7:8b:c0:0b:a4:f5:91:4e:52:
                    1e:0a:0d:cc:b2:9d:a7:06:eb:7c:90:9d:0d:62:63:
                    dd:0e:f0:b4:08:4b:fa:64:1c:ac:24:22:c6:4a:d3:
                    72:c8:80:fa:a1:b9:b5:39:b3:e3:b1:f7:e7:a6:e6:
                    22:52:a1:28:20:f1:b9:59:b3:c4:ea:bf:3e:f6:81:
                    50:88:c7:b8:6e:a5:58:93:da:a1:b1:b2:bb:ba:93:
                    f4:6a:59:e5:f0:a5:16:0d:07:b6:36:3c:90:5b:7f:
                    8b:df:93:63:bf:85:cd:1f:3e:94:37:02:2d:1a:2f:
                    05:7a:f7:44:c1:a7:40:cc:6f:9d:e2:e0:73:34:55:
                    c2:22:ba:59:73:40:a0:aa:a9:6d:25:3b:87:21:94:
                    a5:9b:50:fb:36:5a:a0:e8:e1:67:41:cf:c2:43:e9:
                    e8:49:75:42:f0:8a:24:7c:63:7a:fc:be:8a:5e:07:
                    c8:3a:3f:fc:44:51:90:44:59:f1:01:f7:25:4c:24:
                    0b:03:7a:b2:8b:c0:ab:2e:4c:58:99:d9:62:32:95:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A6:1F:C9:A7:C9:2C:D6:D7:A6:09:E0:12:DB:F3:61:4C:C9:18:30
            X509v3 Authority Key Identifier:
                keyid:83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32332d3233203d3e20323636313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:a1:aa:33:47:07:ab:89:fb:47:57:b3:a2:19:b0:b9:4c:
         8c:4b:aa:2b:89:7b:a7:f3:df:33:c0:61:db:cc:4e:a8:55:ae:
         8d:df:20:2b:e9:a6:56:f8:4d:2d:66:ea:9e:d1:50:de:4f:31:
         38:2b:73:3c:81:6b:be:87:3a:3b:05:98:50:c7:2d:4e:5f:8e:
         e9:24:05:39:d0:41:41:67:b0:5c:35:d3:67:90:23:28:04:6a:
         5e:94:bc:af:f2:8d:22:93:bf:8d:68:84:9c:c8:7a:64:73:83:
         63:f3:c3:6e:b3:19:01:f1:9b:03:dc:42:cd:bf:f8:82:f5:80:
         42:0a:e6:c7:d2:df:d1:04:43:2d:1e:06:08:db:aa:38:10:18:
         84:21:41:c0:eb:98:77:00:bb:a4:3b:5d:88:2c:b6:a6:7d:32:
         5f:e8:1d:bd:69:4a:e4:32:06:9d:58:45:73:a5:21:41:56:34:
         5d:d3:12:2f:a9:b6:bc:55:dd:5b:04:17:7f:3f:24:b3:f4:ab:
         94:38:2b:16:73:47:18:44:67:b5:7b:a1:60:a6:62:34:52:de:
         ae:32:2b:2d:14:94:bd:bd:08:0a:f1:79:40:8c:97:f5:f4:c5:
         52:ab:49:25:62:a3:9f:cb:67:f2:62:b5:85:d8:03:8d:e9:3f:
         99:03:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org