Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232312e302f32342d3234203d3e20323636313233.roa
File:                     34352e352e3232312e302f32342d3234203d3e20323636313233.roa (raw, json)
Hash identifier:          WfLqi8gJau0dcV9LNoHlNYxcUjWLBfMUfl3V0ZgOTeo=
Subject key identifier:   AE:0D:96:91:99:91:D2:54:6B:B6:31:4F:7B:99:DC:58:42:74:A4:05
Certificate issuer:       /CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
Certificate serial:       0FC233C0F59B19225B4F089F4C9F1034C3D06C16
Authority key identifier: 83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232312e302f32342d3234203d3e20323636313233.roa
Signing time:             Mon 09 May 2022 17:55:00 +0000
ROA not before:           Mon 09 May 2022 17:50:00 +0000
ROA not after:            Mon 08 May 2023 17:55:00 +0000
asID:                     266123
IP address blocks:        45.5.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c2:33:c0:f5:9b:19:22:5b:4f:08:9f:4c:9f:10:34:c3:d0:6c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
        Validity
            Not Before: May  9 17:50:00 2022 GMT
            Not After : May  8 17:55:00 2023 GMT
        Subject: CN=AE0D96919991D2546BB6314F7B99DC584274A405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:ec:b8:f3:2c:59:ec:38:dc:f4:9c:55:1f:
                    4e:ba:f2:c1:36:9a:4a:82:07:2e:03:9e:3e:db:52:
                    1a:be:3a:1c:13:37:29:4f:30:85:17:cd:83:06:c6:
                    ef:09:f0:23:d6:21:7b:f0:9e:8c:e7:e3:55:14:23:
                    fc:b1:21:5b:d7:06:02:c8:9f:26:8c:0b:8f:71:3d:
                    18:bc:db:dc:84:4f:5f:ae:c2:c6:36:59:6d:8d:02:
                    64:59:3b:26:3c:ec:f4:e8:7b:9d:5d:79:60:0b:48:
                    f1:02:b4:0f:98:fe:7a:45:e0:de:fd:f9:c7:e2:17:
                    0b:ec:ac:73:36:ab:62:d2:02:2d:3e:c4:b9:2e:43:
                    36:98:20:eb:a6:09:df:28:bf:80:ad:92:f3:2d:e6:
                    1a:62:51:f8:84:c4:f7:ec:fe:12:2f:03:b8:1a:51:
                    e7:51:df:1b:ae:39:16:9c:03:59:3e:2c:38:52:ac:
                    fd:45:ff:a9:27:85:d9:7a:3c:d0:b6:36:7d:bb:a1:
                    0d:ff:08:c6:f6:0c:08:4e:d1:91:6b:b4:d3:39:f5:
                    65:4b:53:af:a9:37:c5:d2:c7:60:78:67:18:8a:c8:
                    cb:39:b2:75:7b:79:1b:7b:76:32:26:aa:17:b6:86:
                    ce:64:d5:19:a7:c6:85:17:6c:89:bb:48:17:09:9f:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:96:91:99:91:D2:54:6B:B6:31:4F:7B:99:DC:58:42:74:A4:05
            X509v3 Authority Key Identifier:
                keyid:83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232312e302f32342d3234203d3e20323636313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:21:23:34:55:cd:c9:93:b8:0d:fb:5e:63:be:3f:82:20:c5:
         1a:bd:79:04:07:ad:23:26:f6:f0:17:29:30:0e:b6:a9:3d:79:
         a1:5a:32:84:ba:e5:47:ea:e7:eb:26:a8:70:e3:31:3a:d8:91:
         f3:aa:9a:67:11:3c:09:ab:c5:ae:32:4f:fb:7b:61:a9:fd:de:
         c1:f9:5a:3c:e8:15:32:1b:cf:a2:c2:a4:97:1f:26:26:79:00:
         3c:83:06:ff:28:ef:2e:0e:2f:d2:16:e0:c8:7b:ef:67:0b:d5:
         c3:15:90:e0:25:d0:11:1c:36:2d:d2:29:b9:e8:dd:78:ac:f8:
         c5:9f:43:09:40:ba:b9:7f:b9:30:bf:5e:fd:4d:19:95:b0:1c:
         bd:d1:36:9b:4e:94:60:ac:88:90:8a:98:a1:70:24:ca:dc:f0:
         51:e2:10:84:f1:f8:35:7a:52:e8:3b:7b:9e:ce:a8:d1:fd:1c:
         7a:fd:8f:75:2b:dc:bf:26:ac:72:e7:6f:e1:6e:9b:c8:24:75:
         68:0a:65:be:cc:81:96:65:46:dd:2e:e2:36:6e:a6:38:06:3e:
         6d:19:0a:b2:25:18:ff:d0:99:eb:d3:46:8f:84:c7:ab:f6:31:
         d2:ef:3b:3b:87:5a:d3:bb:58:e6:fb:40:1f:7a:e8:c0:d4:1c:
         9d:1e:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org