Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/34352e352e31362e302f32322d3332203d3e20323636303833.roa
File:                     34352e352e31362e302f32322d3332203d3e20323636303833.roa (raw, json)
Hash identifier:          4CAn6SMVIyskXFQmsZGMMF/bfvAgGimwIchUGHqDDLk=
Subject key identifier:   19:AC:08:64:46:11:AA:9B:D0:35:4F:2F:CC:60:76:50:94:A2:CB:63
Certificate issuer:       /CN=135ECCE292820FACED489F750FF2F4CF89DED601
Certificate serial:       5066EA6043F94AF6B42FCB5CB667FB014FD02535
Authority key identifier: 13:5E:CC:E2:92:82:0F:AC:ED:48:9F:75:0F:F2:F4:CF:89:DE:D6:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/135ECCE292820FACED489F750FF2F4CF89DED601.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/34352e352e31362e302f32322d3332203d3e20323636303833.roa
Signing time:             Wed 25 Jan 2023 21:42:46 +0000
ROA not before:           Wed 25 Jan 2023 21:37:46 +0000
ROA not after:            Wed 24 Jan 2024 21:42:46 +0000
asID:                     266083
IP address blocks:        45.5.16.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:66:ea:60:43:f9:4a:f6:b4:2f:cb:5c:b6:67:fb:01:4f:d0:25:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135ECCE292820FACED489F750FF2F4CF89DED601
        Validity
            Not Before: Jan 25 21:37:46 2023 GMT
            Not After : Jan 24 21:42:46 2024 GMT
        Subject: CN=19AC08644611AA9BD0354F2FCC60765094A2CB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:11:ec:1a:17:2d:36:e5:e0:60:ea:56:86:
                    df:55:ad:f4:47:c7:b8:58:49:3f:f2:7b:be:bb:04:
                    0f:a1:92:08:7e:55:7d:5a:44:3b:41:10:2b:97:0c:
                    ee:91:f6:1e:7b:af:55:af:5b:b9:ad:cc:30:36:5c:
                    a6:3d:c8:78:53:ba:4a:aa:44:d7:45:12:0a:03:4e:
                    80:f3:e1:7f:a0:bb:c3:5e:e9:85:a0:c8:6e:66:68:
                    77:11:80:5c:10:1d:0c:63:2e:d5:f9:3b:ac:d9:ae:
                    1d:f4:29:25:42:e6:5c:fd:ff:76:3c:ac:1b:d7:31:
                    b3:e3:75:8f:10:d4:ba:4d:1b:98:67:e0:68:e1:b5:
                    d7:a4:eb:c1:1b:93:c6:f6:e4:e4:ce:4c:99:87:10:
                    88:06:22:06:f5:8b:f0:6f:83:d6:ea:e7:40:36:1b:
                    ec:e8:e5:84:f6:20:e4:3d:d2:e3:45:85:bd:50:43:
                    9f:eb:bd:32:52:0b:6e:7e:d8:c1:42:4d:58:11:23:
                    8d:56:ba:d4:71:f1:d6:88:d1:e3:5d:bd:cf:95:99:
                    b4:3c:40:12:39:8e:9e:93:f7:95:4d:9c:40:37:e8:
                    73:41:2d:89:1a:15:76:1f:cb:b2:6b:3c:a7:9c:65:
                    5d:0e:78:7c:29:e4:6f:01:86:b7:88:7e:1b:0f:0f:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AC:08:64:46:11:AA:9B:D0:35:4F:2F:CC:60:76:50:94:A2:CB:63
            X509v3 Authority Key Identifier:
                keyid:13:5E:CC:E2:92:82:0F:AC:ED:48:9F:75:0F:F2:F4:CF:89:DE:D6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/135ECCE292820FACED489F750FF2F4CF89DED601.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/135ECCE292820FACED489F750FF2F4CF89DED601.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/34352e352e31362e302f32322d3332203d3e20323636303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         df:26:8c:5e:91:22:fa:0b:2b:5d:e5:6d:b5:39:7b:f5:11:c5:
         17:06:22:80:fb:90:6f:e9:8b:68:5b:c6:69:12:4c:d0:c9:ee:
         4b:d5:9d:31:a2:e7:0c:8a:7a:2e:cc:e2:af:dc:95:52:6e:24:
         1b:df:c2:a4:51:77:cb:1c:0d:c1:57:7a:2c:11:b8:9d:28:77:
         6f:59:a9:1a:f2:bf:69:38:4a:6f:33:4e:7c:7c:e1:a2:63:bd:
         48:3b:04:1d:6b:df:9b:64:f0:55:36:7c:9b:d1:45:52:d1:7e:
         45:63:ee:bc:16:55:83:23:00:5e:3d:d7:4f:4d:51:77:2b:31:
         51:59:8d:7f:6e:d1:6d:a8:56:45:0e:4b:5b:b7:93:af:43:ef:
         94:ae:09:f0:a1:24:67:1a:f5:b0:bd:f5:8e:5d:4b:09:f9:03:
         bb:5c:29:b1:a2:2b:68:98:9c:1b:ff:47:95:a6:1d:12:8e:06:
         ba:11:91:9e:5d:86:77:da:1e:41:55:23:65:01:3a:3e:3c:49:
         9f:fa:d3:d9:04:79:aa:1e:eb:d4:5d:f2:82:c5:7a:b2:44:4f:
         7d:a2:af:d6:32:68:e2:ee:2a:29:bc:07:9a:b5:4b:95:cc:73:
         51:aa:fe:b8:87:25:a8:a7:84:50:61:37:57:b8:41:c2:b5:f3:
         1a:6f:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org