Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e34392e302f32342d3234203d3e20323636393431.roa
File:                     34352e3232352e34392e302f32342d3234203d3e20323636393431.roa (raw, json)
Hash identifier:          1B+ha5HSsuSRWtDGWdjSfkWLthym7zjPXJSRHhFAQHc=
Subject key identifier:   07:51:D9:A1:CB:6F:FF:60:A6:64:00:FC:88:29:8C:3E:D7:F9:16:55
Certificate issuer:       /CN=5940C19E46A00D616E69354C6F425903A1505095
Certificate serial:       34912C6EA1A28E76135201892E9F1976EEE65F8C
Authority key identifier: 59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e34392e302f32342d3234203d3e20323636393431.roa
Signing time:             Fri 19 May 2023 18:12:52 +0000
ROA not before:           Fri 19 May 2023 18:07:52 +0000
ROA not after:            Fri 17 May 2024 18:12:52 +0000
asID:                     266941
IP address blocks:        45.225.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:91:2c:6e:a1:a2:8e:76:13:52:01:89:2e:9f:19:76:ee:e6:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5940C19E46A00D616E69354C6F425903A1505095
        Validity
            Not Before: May 19 18:07:52 2023 GMT
            Not After : May 17 18:12:52 2024 GMT
        Subject: CN=0751D9A1CB6FFF60A66400FC88298C3ED7F91655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:a1:c3:87:7b:07:fd:eb:e7:d6:cf:a0:0a:
                    c5:06:62:2c:8d:d7:f5:cc:a8:91:2f:5f:0c:8b:74:
                    08:e5:1e:47:96:b6:45:03:26:e0:4b:86:82:a9:2f:
                    8a:09:bb:bb:03:b7:75:a2:68:8e:ca:49:bf:b8:8b:
                    17:e5:93:64:f2:2d:e2:76:4d:1a:a5:7d:c2:97:96:
                    7d:35:8b:e8:3b:d8:25:4b:3e:36:eb:7e:c8:c3:6f:
                    2a:5a:26:ec:e2:44:16:48:e1:5e:20:7c:77:2a:e8:
                    82:2d:c3:91:73:cd:24:22:8a:91:47:81:22:68:9d:
                    31:4f:46:d4:26:12:ae:c2:37:a7:92:83:22:ed:30:
                    1e:ff:f0:e1:8e:7e:01:bd:43:91:a0:32:e6:bb:1b:
                    c0:34:df:5c:0b:35:74:02:7a:e3:93:fa:85:02:da:
                    ad:ed:64:6a:f1:60:2a:97:43:27:1b:ce:01:67:e9:
                    f9:7d:a0:8f:f1:29:8b:e9:b8:1b:18:cb:15:48:c1:
                    2d:2b:fe:c3:ae:07:cd:4a:c6:4e:a6:f5:b7:0d:25:
                    26:25:5b:82:17:b4:b2:1f:98:e4:c3:69:0e:ca:2b:
                    6a:65:f4:65:b9:49:72:74:15:e6:8a:dc:6f:cb:38:
                    d2:36:6c:b2:1e:98:54:95:12:1e:db:5f:7e:72:81:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:D9:A1:CB:6F:FF:60:A6:64:00:FC:88:29:8C:3E:D7:F9:16:55
            X509v3 Authority Key Identifier:
                keyid:59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e34392e302f32342d3234203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:74:3d:82:22:35:42:13:5f:53:fc:ba:a4:2a:e0:da:8f:c1:
         d1:56:08:37:91:fe:6b:2b:e4:d3:cb:50:bc:1c:41:0d:44:64:
         9c:43:63:ce:65:df:36:8a:42:9b:9d:a7:ff:47:15:ed:16:19:
         10:87:81:5e:7b:22:76:b0:06:11:db:0a:22:6e:be:52:36:b9:
         f9:c0:1a:4a:e1:65:6d:9e:df:85:1d:80:57:57:15:4b:de:37:
         db:85:48:19:99:23:0e:c5:8c:52:ba:18:82:8d:bb:7a:2f:05:
         7b:c3:6c:75:96:d6:9f:ca:15:52:a4:44:e0:78:09:7e:de:24:
         9e:c6:ee:09:0c:c1:c2:b4:22:34:e4:c7:ec:41:df:1c:3a:73:
         dd:3a:6a:15:6c:a4:28:06:1b:10:8b:b2:3b:2e:d3:72:47:41:
         37:95:1e:2f:76:9d:3e:78:31:71:6a:de:e2:ed:d0:9d:fe:02:
         cc:fa:e4:f4:68:8f:55:2e:7a:6f:0d:a8:fb:53:67:c0:3a:2b:
         8d:1e:dd:d3:4e:0c:ef:8e:6e:b4:fc:60:34:3b:d6:69:f8:e4:
         50:c7:b4:d3:e4:41:9f:a6:17:10:90:d6:e5:83:e0:94:24:8a:
         97:f8:d8:b7:67:5d:53:0d:e0:67:39:a3:28:bf:5d:fe:f3:60:
         06:ce:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org