Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232322e302f32342d3234203d3e20323636313233.roa
File:                     34352e352e3232322e302f32342d3234203d3e20323636313233.roa (raw, json)
Hash identifier:          SZ5IwwF+LCMWeFPNg6ZB4grXutd3U7yOkHxcOvGi0dc=
Subject key identifier:   B7:DD:B1:1E:66:98:5E:E3:4B:29:BC:76:68:9B:FA:72:7A:E6:42:16
Certificate issuer:       /CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
Certificate serial:       020FC1FD57125DF9FFF35083EF69914D73CED373
Authority key identifier: 83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232322e302f32342d3234203d3e20323636313233.roa
Signing time:             Mon 09 May 2022 17:54:59 +0000
ROA not before:           Mon 09 May 2022 17:49:59 +0000
ROA not after:            Mon 08 May 2023 17:54:59 +0000
asID:                     266123
IP address blocks:        45.5.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0f:c1:fd:57:12:5d:f9:ff:f3:50:83:ef:69:91:4d:73:ce:d3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
        Validity
            Not Before: May  9 17:49:59 2022 GMT
            Not After : May  8 17:54:59 2023 GMT
        Subject: CN=B7DDB11E66985EE34B29BC76689BFA727AE64216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:07:8e:46:ee:04:d4:df:db:c1:c4:9a:6f:
                    72:b7:3a:ca:32:e7:d8:ca:f9:b2:e7:cc:d2:d1:b3:
                    ed:be:ea:fd:0b:14:a1:64:5f:d4:36:6c:b2:0a:5e:
                    91:c9:87:f3:6e:78:0c:87:74:16:67:f9:30:fc:9a:
                    2b:45:aa:80:f4:19:75:27:a4:f8:d5:2a:92:a2:75:
                    a8:46:46:91:fc:f9:53:d8:bb:1d:41:f2:00:53:e1:
                    c2:48:1c:84:1f:17:39:e7:8a:e0:1a:7b:a5:65:96:
                    49:c9:35:ad:16:be:fb:ac:0c:f8:b8:a9:2a:f0:f9:
                    1f:22:4b:7b:f7:97:64:fa:0c:f7:4c:9c:fd:7e:5c:
                    2c:98:70:0f:07:80:e8:7a:55:59:e5:36:f2:b7:fc:
                    3e:cc:03:a5:fb:71:dc:80:a4:7e:8e:12:74:d9:f7:
                    c6:b9:e0:5f:98:a8:33:39:40:4a:3d:04:ee:39:67:
                    fc:89:0f:a1:18:90:f6:96:c3:8e:8d:48:fd:75:54:
                    c5:5b:4d:29:d7:53:19:56:e2:5f:0a:a2:e2:72:a7:
                    c0:32:fb:e3:ad:53:57:5e:07:ef:4d:f1:17:fa:71:
                    33:3f:af:07:53:72:3e:c4:13:e6:45:20:ee:c3:21:
                    2a:68:69:48:14:55:b0:cf:4c:6d:4c:91:10:05:bc:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DD:B1:1E:66:98:5E:E3:4B:29:BC:76:68:9B:FA:72:7A:E6:42:16
            X509v3 Authority Key Identifier:
                keyid:83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232322e302f32342d3234203d3e20323636313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:e7:c6:d5:9f:44:57:6e:89:86:88:29:98:75:71:c0:e1:
         bb:c8:d5:fa:b8:cf:9c:cd:8d:f9:3f:85:ff:32:a7:99:00:a5:
         f8:34:59:ec:c3:a8:ce:c0:86:56:9e:b7:1a:2e:99:99:7d:4f:
         75:f4:bc:81:95:7c:91:f4:03:83:a5:d3:34:ce:a2:3f:bf:96:
         df:4a:f0:5e:2e:80:4c:ff:53:13:d4:3b:b1:23:1f:d4:4d:7e:
         e0:64:25:ce:e3:d9:7b:8d:b5:9f:23:50:ed:a2:ec:6d:ad:08:
         7c:cd:f6:de:37:b4:99:47:02:d0:41:b3:88:80:db:99:ca:9d:
         cc:5d:dc:7b:34:30:08:8c:db:c2:a8:19:6c:9e:be:c2:6b:dc:
         5c:77:80:5e:69:9b:29:b3:b2:f1:fc:15:9f:8c:3e:ff:21:4d:
         fd:bf:04:fc:b1:43:f7:ec:83:3f:cb:1a:6b:20:8b:fa:40:62:
         16:c3:54:d2:a0:41:3d:51:21:2a:90:23:ce:a0:28:50:4a:d0:
         a8:28:05:8f:dc:63:1e:2e:a0:bf:e0:3b:e3:5f:db:2d:c8:8c:
         7a:52:20:54:90:b3:6a:82:0f:a1:88:1e:0e:55:7d:36:21:a2:
         7d:01:1f:e9:d6:39:d2:c2:7c:6f:64:41:7f:6d:a5:ec:6d:18:
         73:45:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org