Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3332203d3e20323633343237.roa
File:                     34352e3136322e3234302e302f32322d3332203d3e20323633343237.roa (raw, json)
Hash identifier:          MiDGYogkZJG5opbDLX+sORUH3Fgz5SZ3eWcwRF1zTKs=
Subject key identifier:   53:FB:20:01:52:9B:33:33:B6:E8:75:C4:6A:49:C6:9F:50:4D:0E:F1
Certificate issuer:       /CN=52BFE68872F7B80B9A500C430D620459628C64FC
Certificate serial:       77FBE7CA26EE41F492ABA2CB86C2A58863032396
Authority key identifier: 52:BF:E6:88:72:F7:B8:0B:9A:50:0C:43:0D:62:04:59:62:8C:64:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BFE68872F7B80B9A500C430D620459628C64FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3332203d3e20323633343237.roa
Signing time:             Tue 28 Feb 2023 13:33:24 +0000
ROA not before:           Tue 28 Feb 2023 13:28:24 +0000
ROA not after:            Tue 27 Feb 2024 13:33:24 +0000
asID:                     263427
IP address blocks:        45.162.240.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fb:e7:ca:26:ee:41:f4:92:ab:a2:cb:86:c2:a5:88:63:03:23:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52BFE68872F7B80B9A500C430D620459628C64FC
        Validity
            Not Before: Feb 28 13:28:24 2023 GMT
            Not After : Feb 27 13:33:24 2024 GMT
        Subject: CN=53FB2001529B3333B6E875C46A49C69F504D0EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:e3:66:4b:5f:cb:b1:da:83:cb:a4:9d:e9:
                    1a:10:04:e9:4f:3d:69:44:ce:98:af:c5:fa:ba:5d:
                    cd:10:84:fe:3c:4e:e2:02:fe:55:a1:d9:70:1e:46:
                    97:03:85:b8:2b:70:a7:f2:3d:fc:09:a7:0a:2d:97:
                    41:5e:e3:70:11:52:b3:d4:ed:86:55:16:17:d2:f7:
                    45:b6:b4:4c:78:46:d1:d4:38:3d:b1:3d:35:7e:48:
                    39:c0:8b:7c:95:e6:0b:9a:81:d3:43:48:ca:89:0b:
                    8f:c9:b1:58:3e:85:0e:33:77:ae:00:01:53:ff:1c:
                    4c:95:5f:6c:be:70:ad:07:f0:1b:77:f4:28:7c:9b:
                    c4:04:3e:e7:bd:c7:6d:d5:6a:c8:fc:19:9b:88:44:
                    1f:4d:8d:17:6d:4b:4d:cc:ef:fe:28:3b:19:bc:5a:
                    cf:fb:d0:73:11:a0:98:f2:ae:bd:86:6a:a2:92:ab:
                    d4:57:b7:ed:16:6f:28:d6:f1:00:24:2f:69:14:8b:
                    6f:70:e0:6f:72:80:35:44:8f:92:60:31:73:92:45:
                    a3:44:1a:47:2e:82:a9:48:5a:7d:7f:11:a6:5a:64:
                    3a:25:e8:97:49:cf:58:1c:7c:60:f1:0b:25:69:06:
                    a2:f2:a3:93:1e:a8:f6:4a:b7:fd:0e:91:36:a9:5e:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:20:01:52:9B:33:33:B6:E8:75:C4:6A:49:C6:9F:50:4D:0E:F1
            X509v3 Authority Key Identifier:
                keyid:52:BF:E6:88:72:F7:B8:0B:9A:50:0C:43:0D:62:04:59:62:8C:64:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/52BFE68872F7B80B9A500C430D620459628C64FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BFE68872F7B80B9A500C430D620459628C64FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3332203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:3b:51:dc:0c:89:d7:ab:eb:70:37:d1:63:f7:74:1b:3e:
         9c:5c:e6:cc:5f:63:60:29:2d:bb:ed:49:9b:83:95:5e:a7:d9:
         51:75:28:ac:ee:43:9b:39:9c:64:bd:cf:3c:2e:3e:a8:63:12:
         88:47:32:22:30:d9:fc:20:2b:a7:bc:9f:26:b7:e7:04:b0:f3:
         b3:34:a3:6c:ba:cd:db:6b:13:32:ef:9f:80:4d:88:c0:09:94:
         b3:7a:36:64:7d:93:a8:32:10:9f:7f:48:ee:69:f5:59:e1:cd:
         3e:be:f0:60:cf:b0:4a:c6:79:b0:6e:b9:53:f2:b6:98:85:a6:
         ed:37:7d:1f:61:da:20:99:09:f3:f4:a3:65:49:25:60:50:36:
         5a:e4:b9:97:ca:0b:a4:44:6d:02:0c:ed:6c:8d:56:62:64:69:
         d8:7b:7e:44:0c:08:e5:a2:e3:47:5f:74:c9:52:81:12:57:de:
         6a:dd:bf:38:61:a2:29:52:00:ad:c4:6e:91:cf:a3:44:75:b2:
         69:92:51:34:a6:82:c1:eb:fa:b5:0c:7e:4e:2f:93:87:61:e1:
         c4:02:4d:1c:4d:f9:d5:e9:1b:f1:97:34:78:b4:0b:bb:12:ab:
         04:44:45:a7:7a:fd:2a:92:2a:85:fe:54:be:4e:06:13:23:9d:
         45:a4:86:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org