Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130322e302f32342d3234203d3e20323636303935.roa
File:                     34352e352e3130322e302f32342d3234203d3e20323636303935.roa (raw, json)
Hash identifier:          zoDk0uPPIQ27p19Qrj9p0O9U2qYlUi8fyVbznmfqrck=
Subject key identifier:   76:B1:94:17:C6:30:86:18:7F:E9:62:94:E3:7B:B0:62:D5:E0:B7:F7
Certificate issuer:       /CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
Certificate serial:       4A92C2A8C613984A3CE070C34E386A199F147A9F
Authority key identifier: 2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130322e302f32342d3234203d3e20323636303935.roa
Signing time:             Wed 10 Jan 2024 14:17:58 +0000
ROA not before:           Wed 10 Jan 2024 14:12:58 +0000
ROA not after:            Wed 08 Jan 2025 14:17:58 +0000
asID:                     266095
IP address blocks:        45.5.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:92:c2:a8:c6:13:98:4a:3c:e0:70:c3:4e:38:6a:19:9f:14:7a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
        Validity
            Not Before: Jan 10 14:12:58 2024 GMT
            Not After : Jan  8 14:17:58 2025 GMT
        Subject: CN=76B19417C63086187FE96294E37BB062D5E0B7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:c5:ab:89:d2:64:95:fb:72:1c:e7:cc:b2:
                    31:20:69:d2:30:28:d5:ad:68:93:99:b6:3f:36:f3:
                    da:28:a3:77:ac:50:d9:de:7f:5c:37:dc:f6:88:d3:
                    5d:c5:08:ea:49:b1:1b:68:e1:88:f7:4e:20:08:9b:
                    3b:f8:9f:97:e0:97:11:44:17:93:65:5d:78:0d:d4:
                    c9:91:c9:fc:02:f7:d6:43:94:e5:df:2c:28:05:9c:
                    be:de:af:d0:cf:ee:79:51:93:90:1f:fc:39:06:05:
                    56:0a:67:17:61:94:4b:c7:f5:51:e8:1b:8f:a6:48:
                    a3:e5:32:f5:a5:f5:29:06:77:2c:c2:18:f1:50:32:
                    98:95:c9:b7:03:e5:61:c9:4f:9f:6c:32:e1:77:80:
                    6d:29:ec:73:b2:75:c9:ad:1c:29:fd:39:af:5b:2b:
                    fd:3e:bb:ce:d4:7d:7a:3a:db:ab:4d:87:48:9a:13:
                    00:ec:40:7d:f8:38:d7:9c:51:04:10:d9:80:3f:5f:
                    b1:9e:3c:3e:52:f3:3b:10:29:7b:5d:73:b9:ff:f3:
                    28:2e:e5:60:53:13:f2:d3:91:c8:83:b1:f6:09:e0:
                    b2:c0:cd:05:da:00:13:fc:65:e8:c9:fa:10:f7:2d:
                    90:c8:f4:3e:35:f2:ec:7d:a7:aa:aa:30:f9:74:84:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:94:17:C6:30:86:18:7F:E9:62:94:E3:7B:B0:62:D5:E0:B7:F7
            X509v3 Authority Key Identifier:
                keyid:2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130322e302f32342d3234203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:7e:f4:aa:f4:9b:ef:ff:31:29:13:90:a3:bf:09:06:b4:ef:
         f8:2f:b5:06:45:4b:1c:80:a5:93:f6:10:a8:bc:9f:bc:c5:d4:
         99:7d:e9:3a:82:e1:d6:71:61:50:a7:41:ff:89:c3:34:f8:64:
         62:7c:20:c9:c6:87:f2:ba:6e:5d:6b:9f:01:15:77:b4:63:38:
         11:ef:50:09:86:82:8d:a4:35:b1:1b:fc:a1:4b:62:e8:97:08:
         b8:cf:2a:aa:37:7a:4b:64:2b:eb:7d:f7:c0:06:a6:53:4d:84:
         c7:b9:10:3e:c6:e8:f8:60:10:28:b5:1a:b5:65:f7:a2:a4:43:
         97:f9:2b:38:9a:58:64:61:00:a9:21:5e:5b:52:29:95:c0:f5:
         a0:1a:ce:a5:87:0f:81:8d:3e:22:3d:09:d0:57:f5:7d:14:8f:
         d6:0d:2c:cf:84:9c:4e:56:12:3b:e3:33:fb:36:8d:f2:99:6a:
         3a:9b:29:b7:ea:91:8b:fa:90:cd:4b:5b:59:39:fa:d6:11:5e:
         58:64:97:5a:0f:f0:08:b0:87:4a:43:cf:67:cc:b8:83:74:ad:
         01:2d:5b:f1:71:ee:40:8d:20:9a:38:06:8c:0d:d8:74:f4:f6:
         fc:14:0e:79:80:dc:d8:b4:64:d3:8a:90:3c:47:5e:c5:6c:bc:
         06:d8:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org