Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa
File:                     34352e3232362e35322e302f32322d3234203d3e20323636393835.roa (raw, json)
Hash identifier:          /PE8SwN45Zz+XhXytSECHC0TqLLfXNGIqcTDbeSECx8=
Subject key identifier:   07:B9:E7:04:96:EF:CA:6D:16:48:B9:59:FF:52:99:A2:9C:B3:A1:46
Certificate issuer:       /CN=C5949E0114CEC27739D4FFD39EAF9EC469F3325D
Certificate serial:       7EAEF309768444BA88CB72DB858893D6B065AE7A
Authority key identifier: C5:94:9E:01:14:CE:C2:77:39:D4:FF:D3:9E:AF:9E:C4:69:F3:32:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa
Signing time:             Tue 20 Feb 2024 02:00:00 +0000
ROA not before:           Tue 20 Feb 2024 01:55:00 +0000
ROA not after:            Tue 18 Feb 2025 02:00:00 +0000
asID:                     266985
IP address blocks:        45.226.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ae:f3:09:76:84:44:ba:88:cb:72:db:85:88:93:d6:b0:65:ae:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5949E0114CEC27739D4FFD39EAF9EC469F3325D
        Validity
            Not Before: Feb 20 01:55:00 2024 GMT
            Not After : Feb 18 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:80:d9:88:a4:b9:09:08:11:e1:d0:6a:09:
                    77:3b:65:ec:f3:e1:fa:d7:de:4b:d6:b4:13:86:81:
                    6b:91:1e:75:07:ba:49:99:d1:99:4b:4c:d9:71:74:
                    dc:11:d8:c9:36:d1:91:74:89:d6:65:32:92:c7:96:
                    74:8f:a1:cf:cf:40:cb:a1:43:4d:e4:a7:44:83:48:
                    a6:0e:d3:4b:ab:a1:36:75:b7:4a:df:b4:50:99:6a:
                    88:7f:70:8e:c2:e9:ea:f5:27:a0:a3:bd:b8:45:07:
                    d1:a4:ea:d0:95:ea:e0:6e:a9:5b:8d:19:3d:88:66:
                    1c:79:d6:fc:d9:e0:cf:55:75:25:dd:f0:f3:5d:b9:
                    6c:61:9d:99:fd:c4:4a:4b:2a:67:fa:78:b0:ff:6c:
                    ee:89:71:f4:36:70:33:ec:e6:bd:27:1f:d5:6f:66:
                    e8:35:1d:c0:0b:fe:cc:a5:a6:90:06:b4:26:66:1e:
                    63:02:e3:c5:68:4d:6f:43:f0:86:8b:1a:bc:17:ce:
                    82:e1:36:81:c5:dd:e0:43:27:c2:e0:78:9d:bc:a9:
                    19:b6:ea:16:28:81:c4:d7:a8:d3:a8:6d:f1:72:01:
                    32:e0:51:ac:6c:be:15:d7:35:5a:4f:05:d6:4c:d4:
                    89:79:34:70:cf:3d:ec:60:48:79:b0:41:23:bc:ec:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B9:E7:04:96:EF:CA:6D:16:48:B9:59:FF:52:99:A2:9C:B3:A1:46
            X509v3 Authority Key Identifier:
                keyid:C5:94:9E:01:14:CE:C2:77:39:D4:FF:D3:9E:AF:9E:C4:69:F3:32:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/34352e3232362e35322e302f32322d3234203d3e20323636393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:2d:73:af:06:00:7b:ae:5c:d0:1b:19:d5:ed:39:0f:c8:
         fe:ab:d6:a2:e1:ea:40:98:b0:3e:03:3e:bf:31:f9:0f:fc:2b:
         91:56:f0:c8:e2:54:b9:bf:21:cd:75:62:32:c6:95:19:8e:c9:
         91:5d:47:d9:54:9b:97:6f:88:75:86:8a:94:b4:f6:2d:c7:96:
         9a:cf:48:5a:c5:5e:e0:66:8b:d8:65:e6:0c:fa:f4:9d:20:ff:
         21:48:74:89:41:95:fb:b6:5f:bb:61:1e:ea:f3:d4:3f:76:4d:
         f3:32:03:e6:44:6f:09:d3:9c:f6:1c:f1:67:d3:80:e6:1e:77:
         f3:e7:b6:10:c9:d8:74:fe:0c:0f:7a:2b:fa:8b:70:72:a4:69:
         b8:c5:f7:c9:ec:a6:eb:92:df:c5:09:28:db:fe:63:de:23:11:
         4b:c3:3f:40:3f:7c:be:ed:76:96:66:7e:8e:2e:fb:15:a4:38:
         d6:fe:5e:58:28:ea:27:94:16:ba:30:54:2a:d4:d9:9c:50:95:
         58:7c:40:dc:dd:97:8a:77:d7:e8:68:49:28:9d:ee:28:e0:ce:
         5c:ab:8c:17:c4:48:50:3c:7e:d0:46:52:23:f6:22:7d:5b:5b:
         9e:f1:46:2b:e7:33:63:49:ce:ca:bf:f8:53:96:6e:0c:20:4a:
         6b:66:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org