Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32322d3232203d3e20323636303935.roa
File:                     34352e352e3130302e302f32322d3232203d3e20323636303935.roa (raw, json)
Hash identifier:          6lsZEr/BWJ6cNXIVYz+lboGdG/dpVIQVAEadVgW6gEA=
Subject key identifier:   1D:57:17:88:62:0A:90:4F:3E:64:D4:86:90:AD:B2:D6:D7:05:2A:F7
Certificate issuer:       /CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
Certificate serial:       753F95E3C8FE25EC5047E4A7DD207F60F4E7986E
Authority key identifier: 2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32322d3232203d3e20323636303935.roa
Signing time:             Wed 10 Jan 2024 14:17:59 +0000
ROA not before:           Wed 10 Jan 2024 14:12:59 +0000
ROA not after:            Wed 08 Jan 2025 14:17:59 +0000
asID:                     266095
IP address blocks:        45.5.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3f:95:e3:c8:fe:25:ec:50:47:e4:a7:dd:20:7f:60:f4:e7:98:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
        Validity
            Not Before: Jan 10 14:12:59 2024 GMT
            Not After : Jan  8 14:17:59 2025 GMT
        Subject: CN=1D571788620A904F3E64D48690ADB2D6D7052AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:7e:59:bf:0e:c7:12:1e:dd:9c:0c:d1:71:
                    13:05:38:29:d7:32:2b:87:38:f5:cf:25:07:a7:51:
                    e0:09:43:a6:98:40:af:80:65:de:1d:e8:c4:e8:93:
                    cd:ef:9e:92:7b:37:6e:9e:b8:f8:d5:61:56:25:71:
                    4f:53:40:c8:fb:da:5a:3f:66:e0:38:8d:47:c9:e4:
                    ed:18:57:2f:69:cd:c3:53:81:a9:11:4e:7d:32:0a:
                    53:bb:13:07:ad:ea:ac:04:76:1a:0d:42:f3:45:02:
                    e1:c7:03:c4:13:6e:df:d5:9c:6d:32:ae:4a:01:2e:
                    1c:3d:00:f0:dc:b9:a7:f0:dc:6f:9d:09:c9:87:3d:
                    01:d3:fb:17:c3:46:fa:b7:b9:26:75:75:b7:a3:51:
                    23:33:14:b6:0a:10:c9:c9:a7:38:08:25:53:89:85:
                    c1:2a:27:90:2f:6e:17:21:b0:eb:6b:9a:a4:b3:3f:
                    40:fa:60:30:b3:a8:e5:05:21:7e:59:fe:b9:58:05:
                    0a:99:aa:26:5e:54:35:f1:48:49:31:42:a1:a3:34:
                    39:c7:4d:28:a0:b8:b2:a5:ef:93:e9:28:e5:1b:24:
                    2c:3c:54:f6:f8:72:af:a1:15:f3:a9:62:fe:33:30:
                    1d:7f:ef:25:d2:4e:4a:6e:61:a2:3c:dd:22:ff:75:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:57:17:88:62:0A:90:4F:3E:64:D4:86:90:AD:B2:D6:D7:05:2A:F7
            X509v3 Authority Key Identifier:
                keyid:2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32322d3232203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:0d:27:4a:22:a7:bc:1d:f1:5e:a3:28:79:55:d9:6c:f2:2b:
         7f:09:55:bd:4a:32:27:75:aa:04:73:77:55:1b:c9:9f:90:87:
         83:7e:25:19:04:65:61:f9:6c:69:70:b7:9f:53:a3:c7:68:87:
         c3:4f:eb:a6:35:fd:ac:3d:9b:5b:e9:03:7a:26:c4:91:5c:96:
         e1:07:d4:bd:1d:96:04:b7:bd:34:72:b9:ac:dc:60:f0:fa:07:
         8f:66:7c:a9:e3:84:b4:9e:46:68:58:f7:09:87:7d:1c:62:67:
         13:3d:88:fb:dc:85:03:71:af:91:0f:2d:f9:b7:91:ba:d8:af:
         99:fc:b3:af:6e:09:a9:9e:7e:94:48:95:f9:c3:a4:a7:6d:62:
         10:85:15:4e:61:a5:00:38:83:1d:61:3e:57:c3:2d:2f:f8:8c:
         54:83:0f:32:d3:a8:87:b8:df:50:f2:bc:f1:cf:6c:82:ce:f0:
         a6:29:e4:7f:39:21:8d:ff:37:d2:2c:df:32:84:cd:5b:c0:fb:
         3a:5e:63:17:2a:74:36:9e:95:8d:2f:03:8d:dc:03:c3:6c:cc:
         70:47:4b:ac:ef:bb:aa:ac:21:44:0b:22:a0:46:31:10:e9:36:
         54:5d:60:aa:7a:f4:79:99:74:f4:de:ec:63:fd:21:06:03:c0:
         58:61:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org