Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/34352e3138372e3233322e302f32322d3234203d3e20323639353037.roa
File:                     34352e3138372e3233322e302f32322d3234203d3e20323639353037.roa (raw, json)
Hash identifier:          KJXfSdEK/F5c+FWLV8xlN2tpxDiUzJYXRNSHAGXkFc8=
Subject key identifier:   CD:63:A2:FB:53:5B:45:65:B6:47:F2:88:2C:9C:C3:F4:F0:6D:06:9A
Certificate issuer:       /CN=FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7
Certificate serial:       614363FEA5D719DDE9C3AAB0D77D1E7E30A86057
Authority key identifier: FB:7F:7A:B2:33:D9:2C:DB:B9:AB:0F:85:98:ED:11:CE:CC:B3:B1:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/34352e3138372e3233322e302f32322d3234203d3e20323639353037.roa
Signing time:             Wed 12 Apr 2023 15:19:09 +0000
ROA not before:           Wed 12 Apr 2023 15:14:09 +0000
ROA not after:            Wed 10 Apr 2024 15:19:09 +0000
asID:                     269507
IP address blocks:        45.187.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:43:63:fe:a5:d7:19:dd:e9:c3:aa:b0:d7:7d:1e:7e:30:a8:60:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7
        Validity
            Not Before: Apr 12 15:14:09 2023 GMT
            Not After : Apr 10 15:19:09 2024 GMT
        Subject: CN=CD63A2FB535B4565B647F2882C9CC3F4F06D069A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:d0:4b:4b:6b:05:00:18:0b:da:c8:92:70:
                    ae:dd:d8:ea:77:65:50:b4:d4:43:b5:45:0d:a7:62:
                    c1:30:32:18:96:83:26:c3:f9:1a:78:74:4a:29:81:
                    1a:bd:67:c2:e9:c8:f2:5f:60:35:fb:35:a8:38:c7:
                    8c:75:db:37:ab:2d:52:07:69:a3:cf:c9:4f:d6:a7:
                    ae:75:19:20:0a:a1:03:31:de:6c:50:ee:25:41:ca:
                    d9:a9:61:39:94:33:96:f0:48:47:4c:1b:bd:79:e3:
                    e5:86:b5:c6:50:56:eb:d1:05:f4:11:08:f7:1c:0e:
                    01:a3:7c:cc:b0:dc:89:14:3a:53:ca:06:84:aa:e4:
                    19:86:54:b8:39:c3:79:98:f2:db:d6:43:a7:31:22:
                    f7:67:eb:05:6f:a1:13:36:b2:bf:be:f7:6a:58:a6:
                    28:b4:b6:1f:d5:63:01:4f:7c:fc:3b:66:a7:41:a8:
                    01:e0:a7:e9:e6:7a:1f:8e:36:1f:d4:e0:29:8c:3b:
                    c7:3a:dd:9b:1a:f2:aa:ac:99:e3:7f:25:8f:af:d1:
                    75:d7:47:a3:34:1e:a3:f4:33:dc:d4:68:09:21:88:
                    7c:a5:9d:fb:15:47:9a:ae:fb:e7:e4:54:b3:42:78:
                    73:0c:e7:79:02:14:58:06:01:75:f6:67:f2:7d:9b:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:A2:FB:53:5B:45:65:B6:47:F2:88:2C:9C:C3:F4:F0:6D:06:9A
            X509v3 Authority Key Identifier:
                keyid:FB:7F:7A:B2:33:D9:2C:DB:B9:AB:0F:85:98:ED:11:CE:CC:B3:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/34352e3138372e3233322e302f32322d3234203d3e20323639353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:29:7c:07:f1:c7:7e:fb:24:3d:6a:43:ec:49:99:df:70:93:
         06:75:4d:92:d7:6b:54:a4:82:9c:e3:66:e1:8e:de:74:61:e5:
         7f:da:56:3d:37:9e:5c:5c:cf:0e:21:95:ad:5b:c5:f5:79:35:
         c6:5d:c7:da:4c:1c:90:3b:27:b0:3e:35:51:ed:a0:60:2f:43:
         e9:56:e9:48:9a:7d:08:e3:7a:cb:72:c2:3a:5a:bc:45:78:9b:
         a6:06:28:f5:b7:b1:a0:ba:17:81:78:21:9f:6d:6c:f3:4b:00:
         46:ca:fe:cc:e6:95:5f:34:4b:02:cc:8b:2e:cc:5d:b4:64:43:
         a6:42:9e:9d:02:7d:74:52:d5:5b:6b:6d:ed:6f:d9:68:8b:c1:
         c8:3c:66:ac:35:ec:32:07:f9:11:0b:ba:0f:72:f2:a7:06:d1:
         dd:6c:ad:f3:9c:63:72:10:b5:60:a0:38:80:4a:ec:d6:22:08:
         93:03:d1:a7:8b:d8:bb:dd:3f:1c:64:7e:8d:73:47:ca:7a:3a:
         6e:b9:f0:66:6d:6c:92:4f:6b:15:66:9d:78:2d:8c:b0:78:31:
         b0:a0:6c:8c:37:b2:08:dd:8b:9b:4f:88:4c:96:89:fa:17:96:
         a4:a2:15:bf:17:1d:c8:c3:9d:dc:a3:49:f5:0f:5c:7b:0f:73:
         14:6a:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org