Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32342d3234203d3e20323636303935.roa
File:                     34352e352e3130302e302f32342d3234203d3e20323636303935.roa (raw, json)
Hash identifier:          BSU9s2chcDolScfAZrhBZlQDRS1TEWC8/LA0DDT4mhw=
Subject key identifier:   52:F8:7D:30:64:DC:A1:24:B1:E9:57:FE:31:4B:9C:67:88:8B:9A:F2
Certificate issuer:       /CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
Certificate serial:       0F18892D6D634D0DE83BAFBCA2446220FB00C140
Authority key identifier: 2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32342d3234203d3e20323636303935.roa
Signing time:             Wed 10 Jan 2024 14:17:59 +0000
ROA not before:           Wed 10 Jan 2024 14:12:59 +0000
ROA not after:            Wed 08 Jan 2025 14:17:59 +0000
asID:                     266095
IP address blocks:        45.5.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:18:89:2d:6d:63:4d:0d:e8:3b:af:bc:a2:44:62:20:fb:00:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
        Validity
            Not Before: Jan 10 14:12:59 2024 GMT
            Not After : Jan  8 14:17:59 2025 GMT
        Subject: CN=52F87D3064DCA124B1E957FE314B9C67888B9AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:12:d6:5f:55:9c:e7:a9:7d:1d:b7:97:10:
                    f4:ff:09:fb:36:af:8c:70:27:7e:43:61:ae:25:1b:
                    fb:87:3a:b3:2c:c5:4a:de:eb:37:db:f6:16:1a:9d:
                    d3:b8:e0:c8:d6:0b:45:89:b6:1f:d2:c0:50:7f:72:
                    76:70:d9:a7:3a:1d:d9:78:14:80:50:6d:c6:e8:35:
                    18:74:81:90:86:6e:9e:c7:1f:60:08:2b:cb:05:65:
                    95:dd:f4:4a:9f:aa:d1:0c:a4:db:30:3c:23:a3:4c:
                    fd:41:c9:56:45:25:98:6f:d3:d7:7f:ba:6b:2a:02:
                    9d:81:07:14:21:31:07:dc:c2:77:8a:0e:4f:23:4b:
                    ae:fa:6a:c1:d3:b6:c7:a4:e9:a4:ef:7c:f9:e8:c3:
                    79:ab:2c:4d:79:ae:aa:74:44:d5:df:9f:b4:34:f5:
                    01:e9:22:40:85:97:6a:8f:e2:36:58:bd:ca:36:d4:
                    e2:b6:ff:70:5f:cb:e3:d5:89:8c:75:51:31:b4:da:
                    29:aa:3a:d3:88:03:68:d4:e0:9f:e7:7a:d5:d4:7b:
                    62:ee:cf:3a:30:8a:9f:c8:fa:da:92:4b:13:71:f9:
                    c0:c2:83:1d:96:12:d4:41:58:f8:ac:d5:ab:7f:ca:
                    9b:f2:da:7f:5d:15:6e:01:16:f1:62:1c:6b:95:65:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F8:7D:30:64:DC:A1:24:B1:E9:57:FE:31:4B:9C:67:88:8B:9A:F2
            X509v3 Authority Key Identifier:
                keyid:2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32342d3234203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:0c:ee:56:9e:76:72:ed:4b:20:80:a8:ee:be:e5:1b:b8:ad:
         8d:15:f2:38:6b:33:9a:88:cc:05:8d:2f:2f:97:ec:0f:26:ad:
         45:5c:6b:e0:99:e8:db:49:61:b2:96:f0:c8:26:a9:6a:3d:49:
         bb:c2:ac:6e:0b:b8:b5:06:dd:13:09:4b:7c:34:90:2e:b9:39:
         51:2b:a7:ba:6c:e7:9d:67:59:3e:54:41:b9:98:34:35:0b:7b:
         bd:88:76:a6:a4:cd:be:9c:5e:cf:af:d5:a9:c3:52:68:12:1e:
         68:93:d5:99:0d:d1:29:52:d5:49:c3:2c:93:29:2c:ac:5e:4f:
         73:c2:db:4c:ca:66:57:5a:10:e8:8d:3e:a9:3c:41:21:85:60:
         d4:17:ec:92:09:29:25:5b:ed:ec:a1:95:27:5a:59:7f:fb:6e:
         72:ca:77:23:91:b3:46:a7:5e:cd:5f:e4:33:66:51:fe:89:8b:
         8d:1d:62:7e:5b:92:9c:96:4c:39:b6:21:a0:de:4f:8e:93:8d:
         54:c7:aa:58:48:d4:e6:e9:35:1e:83:19:b7:86:35:2a:b5:8f:
         da:a9:cf:09:95:86:fc:d7:d6:95:94:77:ba:1e:25:44:60:8b:
         dc:7b:a9:dc:57:33:3e:83:6b:01:75:7d:ba:7e:11:85:1b:de:
         de:bc:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org