Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32342d3234203d3e20323636313233.roa
File:                     34352e352e3232302e302f32342d3234203d3e20323636313233.roa (raw, json)
Hash identifier:          FPSrfQRieHDXYMLk9xc/ztw9eLGj4ixi7xF5a6R+3Fo=
Subject key identifier:   49:46:A6:A7:EF:ED:35:E4:70:7D:75:EE:BA:EC:D0:DD:D6:87:86:D5
Certificate issuer:       /CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
Certificate serial:       3D44C3ECF0600F9AAC3A7B55CE55FFF44FE4CA97
Authority key identifier: 83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32342d3234203d3e20323636313233.roa
Signing time:             Mon 09 May 2022 17:55:00 +0000
ROA not before:           Mon 09 May 2022 17:50:00 +0000
ROA not after:            Mon 08 May 2023 17:55:00 +0000
asID:                     266123
IP address blocks:        45.5.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:44:c3:ec:f0:60:0f:9a:ac:3a:7b:55:ce:55:ff:f4:4f:e4:ca:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
        Validity
            Not Before: May  9 17:50:00 2022 GMT
            Not After : May  8 17:55:00 2023 GMT
        Subject: CN=4946A6A7EFED35E4707D75EEBAECD0DDD68786D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:91:6e:dc:c9:f5:f1:8c:08:42:a8:8f:d8:
                    96:89:8c:c8:20:7e:71:9e:2f:4c:bd:e2:5f:f9:c5:
                    2a:c0:8d:a3:34:ce:71:0d:dd:9c:95:cd:9f:8e:6a:
                    f2:b1:7f:5e:25:1f:a2:ab:50:f9:6f:ba:24:e8:9f:
                    d8:51:a6:a8:58:0e:40:d2:0a:fa:f4:34:cd:54:13:
                    6f:87:87:15:0e:d6:4b:b4:67:a0:1f:f1:3f:f5:e9:
                    06:cb:cb:fa:12:f2:a1:73:2e:a6:18:9e:97:e7:1a:
                    e5:ab:a7:15:fe:4f:80:67:2d:d9:4c:ea:77:a2:ad:
                    64:0c:c2:61:0b:4e:50:d8:a9:7c:4e:db:a9:22:74:
                    94:b9:f7:55:31:9d:fd:0d:2a:71:6a:3b:65:cf:b9:
                    b8:52:80:15:9c:b6:05:d0:83:e1:19:55:58:0b:2b:
                    81:03:ca:35:c1:cb:d1:21:c6:c6:82:da:f0:8b:bc:
                    ec:ab:1c:1e:ac:80:89:82:30:a4:00:01:b4:17:34:
                    e0:44:5b:73:19:0b:2a:97:f1:7c:be:2b:03:1a:15:
                    d4:1a:4f:52:fe:cb:e8:4c:7e:7d:ab:97:b1:a8:70:
                    d5:21:0a:6b:67:89:e9:33:a1:bc:7c:db:f3:c3:01:
                    81:7a:f6:df:1e:c4:a0:a6:80:88:da:da:36:95:3d:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:46:A6:A7:EF:ED:35:E4:70:7D:75:EE:BA:EC:D0:DD:D6:87:86:D5
            X509v3 Authority Key Identifier:
                keyid:83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32342d3234203d3e20323636313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:62:1e:2b:16:c0:fd:71:a5:1d:74:cf:8c:ce:dc:68:c7:60:
         a8:6c:11:24:e6:31:10:42:80:a8:ee:e8:1e:a4:5d:cf:4b:d9:
         5e:f9:c6:9e:51:6c:cd:56:d4:e3:d5:b8:b7:06:c1:86:32:ff:
         3a:29:9f:e9:a3:fc:d1:0a:a3:4c:21:05:5d:51:ae:59:3a:a3:
         b8:f9:0e:fe:17:29:53:2f:17:db:83:d4:9d:90:07:e9:35:e6:
         9a:31:33:68:cc:b6:20:ff:8b:41:e6:69:da:35:3d:59:f5:96:
         1a:65:5f:52:3c:90:18:58:74:40:2f:9a:10:de:4e:3b:33:97:
         f3:fe:2c:7e:ca:a9:a9:6e:7e:8c:f3:ef:62:d4:cb:f5:b7:11:
         5b:e7:1f:2d:ce:ad:28:91:3c:fd:7a:95:d5:b2:e2:e9:69:9d:
         19:cd:3a:6c:df:71:a0:26:ef:ce:2d:77:a6:63:81:96:a8:6e:
         ca:22:36:94:39:d4:3e:54:49:07:1f:d8:9b:7a:eb:7d:e0:19:
         42:77:f8:44:85:b9:26:d4:f8:33:2f:fd:c4:49:0d:e2:ef:e2:
         95:17:7f:c3:fb:c8:57:33:5d:0c:9c:fa:8b:df:63:9d:79:15:
         46:64:0c:93:98:2b:5c:f4:13:c2:a6:b7:3b:d1:61:f7:d0:1b:
         1b:cc:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org