Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/34352e3233342e3134382e302f32322d3232203d3e20323637333637.roa
File:                     34352e3233342e3134382e302f32322d3232203d3e20323637333637.roa (raw, json)
Hash identifier:          4fGWeXX5i0yajHtdb1em251cF/88akuGgAapleMB0vA=
Subject key identifier:   6A:B6:5A:38:78:82:00:5D:05:BE:E1:B8:0A:D5:46:4D:63:BB:89:60
Certificate issuer:       /CN=5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9
Certificate serial:       4801371604176ED01E160523B806BB1D8B49AAB9
Authority key identifier: 5D:5C:6E:4C:3E:C0:2C:34:4E:2F:9E:2B:C4:C0:B6:D7:87:98:96:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/34352e3233342e3134382e302f32322d3232203d3e20323637333637.roa
Signing time:             Tue 18 Jan 2022 20:34:14 +0000
ROA not before:           Tue 18 Jan 2022 20:29:14 +0000
ROA not after:            Tue 17 Jan 2023 20:34:14 +0000
asID:                     267367
IP address blocks:        45.234.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:01:37:16:04:17:6e:d0:1e:16:05:23:b8:06:bb:1d:8b:49:aa:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9
        Validity
            Not Before: Jan 18 20:29:14 2022 GMT
            Not After : Jan 17 20:34:14 2023 GMT
        Subject: CN=6AB65A387882005D05BEE1B80AD5464D63BB8960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:ac:b0:73:cd:1d:bb:16:98:02:ad:da:53:
                    73:50:0a:3f:47:c1:86:ec:49:57:ff:7e:75:d3:83:
                    bc:d5:fb:97:86:7b:f9:98:45:ce:08:47:09:ac:9a:
                    50:33:06:c7:02:e8:67:f0:7c:1f:c2:b6:d2:74:f5:
                    72:93:21:93:7d:c5:cc:69:af:c1:da:34:f9:ff:a7:
                    80:63:65:61:1f:fa:fd:f7:c1:4f:07:76:46:0d:c7:
                    9b:3b:93:49:43:35:21:0d:a3:7f:27:09:d4:04:47:
                    76:7a:f2:92:e9:1d:b0:68:22:a7:1f:c0:d7:7d:12:
                    b9:ed:c7:2f:9a:a2:b6:52:d2:25:ac:6b:40:d0:0b:
                    08:a9:d4:ed:2b:3a:18:d7:c4:6f:58:07:bc:ef:15:
                    8b:ef:1e:2f:9b:56:08:0c:19:a0:a7:cb:95:56:24:
                    73:80:0b:ce:7c:c1:c6:a7:cc:44:15:25:c3:e4:21:
                    b0:b9:b6:8a:a1:a2:24:33:07:d5:13:13:68:c2:b4:
                    b6:1a:ab:57:e9:ff:6f:4a:34:da:42:aa:11:55:ac:
                    43:68:9b:55:c4:ad:0b:7d:51:a6:a4:3c:3a:b8:ff:
                    41:d3:94:b2:5d:6d:c7:4a:b9:fc:e0:0a:fa:e2:b3:
                    d7:e8:63:e1:a8:e3:19:33:e5:1a:1b:17:3f:59:f1:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B6:5A:38:78:82:00:5D:05:BE:E1:B8:0A:D5:46:4D:63:BB:89:60
            X509v3 Authority Key Identifier:
                keyid:5D:5C:6E:4C:3E:C0:2C:34:4E:2F:9E:2B:C4:C0:B6:D7:87:98:96:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/34352e3233342e3134382e302f32322d3232203d3e20323637333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:55:20:47:6c:c7:01:4b:18:3b:c6:e1:af:00:43:19:e9:5c:
         6e:a6:0b:5d:99:6d:62:9d:3c:75:ca:ef:91:66:8e:99:f4:f5:
         b0:09:4f:ee:0d:e0:0a:d1:7c:9d:9a:7e:e8:20:ef:0d:50:53:
         82:73:b0:d4:74:de:81:eb:1d:6a:83:35:f7:f2:ad:50:6e:60:
         b2:ec:5e:d1:68:f4:b9:f5:2b:b0:95:5e:a1:cd:21:15:71:65:
         f5:3e:e7:d8:68:2b:67:3e:a7:f4:91:11:d5:39:8e:5c:3a:54:
         65:f2:11:aa:d9:70:dc:8b:9d:83:05:f4:2f:6d:40:8a:1e:d8:
         a2:65:ff:fd:cb:57:5d:b4:78:85:4d:6f:65:1a:92:0d:38:77:
         f8:a8:6d:f8:6a:58:6d:c9:a4:15:fe:0c:c1:b3:12:c5:1d:18:
         d3:e3:22:9f:aa:4d:9e:bf:60:9e:0a:88:a4:9b:f3:f4:37:26:
         14:ad:c0:3f:98:b0:b6:53:73:a6:3b:31:91:cf:b7:99:7c:27:
         8a:d3:7b:f3:a9:dc:61:6c:16:5f:7d:62:a8:19:1d:43:b3:60:
         61:fb:39:6e:4b:91:23:44:ba:35:38:34:bc:80:49:46:ad:2f:
         0a:3a:05:02:08:e4:0d:57:d3:60:9d:39:bb:58:be:56:72:db:
         77:fc:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org