Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETY7XxRYE3rEsib5EMwpcotqnLFn2GfDx8Rjto4fnBQU/0/34352e3138332e31322e302f32322d3234203d3e20323639323533.roa
File:                     34352e3138332e31322e302f32322d3234203d3e20323639323533.roa (raw, json)
Hash identifier:          h6chYbd9ahivI+l6mHcnjl1vD+SrOfszkiCilzktlmg=
Subject key identifier:   3C:CE:E3:6A:C9:09:5D:10:16:EA:D4:DD:16:44:92:2F:DB:B5:01:00
Certificate issuer:       /CN=5ED670EBE4193BCCA670C5C5663BED62670EB3F5
Certificate serial:       0D2C5D323990B1E7FBE802515CAF9D07BC203C8F
Authority key identifier: 5E:D6:70:EB:E4:19:3B:CC:A6:70:C5:C5:66:3B:ED:62:67:0E:B3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ED670EBE4193BCCA670C5C5663BED62670EB3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETY7XxRYE3rEsib5EMwpcotqnLFn2GfDx8Rjto4fnBQU/0/34352e3138332e31322e302f32322d3234203d3e20323639323533.roa
Signing time:             Wed 12 Oct 2022 02:00:00 +0000
ROA not before:           Wed 12 Oct 2022 01:55:00 +0000
ROA not after:            Wed 11 Oct 2023 02:00:00 +0000
asID:                     269253
IP address blocks:        45.183.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2c:5d:32:39:90:b1:e7:fb:e8:02:51:5c:af:9d:07:bc:20:3c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ED670EBE4193BCCA670C5C5663BED62670EB3F5
        Validity
            Not Before: Oct 12 01:55:00 2022 GMT
            Not After : Oct 11 02:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:69:47:58:75:9e:dd:d5:b0:8f:b5:22:a5:
                    59:05:a0:87:bb:2f:0a:a4:d3:b4:b5:ab:1c:07:51:
                    ad:38:c7:71:f3:a9:7b:06:08:b8:d1:cc:5e:cd:7f:
                    8e:bc:ff:6d:eb:a9:45:e6:86:1a:75:8b:3d:fc:6b:
                    7a:20:9d:26:ff:c4:75:e8:13:1a:00:40:ea:e1:db:
                    39:97:97:08:06:47:0c:90:87:62:48:ae:6f:fb:ba:
                    88:08:ed:8a:e5:d7:f7:de:20:9b:f1:84:d0:93:1a:
                    1a:d0:4c:b3:c0:08:9c:fc:5b:b5:69:47:09:36:1e:
                    b9:7e:0d:75:a8:9d:a5:74:1a:a1:34:b6:9d:aa:76:
                    55:a5:12:11:94:47:77:23:cb:43:bb:8e:2a:52:05:
                    4b:34:40:65:22:d6:c3:ec:0d:32:02:28:36:57:a1:
                    82:c2:05:ac:25:06:da:1a:29:fa:64:1f:47:cd:d0:
                    77:d5:6f:7e:1c:53:e8:a0:0b:7b:22:e6:4c:16:2c:
                    64:2c:65:a3:fb:2b:5d:43:7c:b4:dc:f0:f9:1f:df:
                    a4:a2:a2:5e:5b:c8:62:93:04:fb:86:dc:9a:d6:cb:
                    6e:49:7f:c9:14:3d:83:66:d2:6d:ad:b6:b3:1b:8e:
                    91:3c:bb:d8:37:77:e7:bb:60:8f:8f:2d:72:18:00:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CE:E3:6A:C9:09:5D:10:16:EA:D4:DD:16:44:92:2F:DB:B5:01:00
            X509v3 Authority Key Identifier:
                keyid:5E:D6:70:EB:E4:19:3B:CC:A6:70:C5:C5:66:3B:ED:62:67:0E:B3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETY7XxRYE3rEsib5EMwpcotqnLFn2GfDx8Rjto4fnBQU/0/5ED670EBE4193BCCA670C5C5663BED62670EB3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ED670EBE4193BCCA670C5C5663BED62670EB3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETY7XxRYE3rEsib5EMwpcotqnLFn2GfDx8Rjto4fnBQU/0/34352e3138332e31322e302f32322d3234203d3e20323639323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:a7:1e:6c:1e:ad:76:72:ac:60:3d:f2:0b:b3:6d:d5:6d:
         f9:cb:d2:52:7c:3e:9f:17:90:2c:6d:0b:b4:3b:e2:82:14:a9:
         d9:fc:0c:c2:ee:9d:02:03:8c:a3:34:2e:d4:15:6c:ae:2a:6c:
         24:38:7b:ae:fa:3b:e6:54:22:bf:bb:9d:44:b6:24:00:31:87:
         b0:31:20:73:58:e1:75:5c:c5:f0:e6:e3:af:8f:93:97:10:d2:
         52:bf:21:85:bf:f3:a6:1d:0e:6d:0f:4f:97:f4:97:9a:82:b2:
         d7:cc:5c:c1:90:78:e7:c1:d3:c6:ae:a7:8f:f0:d5:8e:48:7c:
         6c:b5:ff:8c:af:d3:7f:58:4a:72:3d:0f:9d:c9:d6:c5:6f:d7:
         20:56:fa:1c:45:a6:1a:ef:ba:99:a2:a5:7b:49:c4:00:e6:d3:
         17:92:7f:13:56:ec:a4:6f:22:39:70:fb:f5:9f:fb:d0:ec:64:
         1d:21:dc:3b:f8:60:71:6f:db:05:fc:44:d8:c5:9c:b6:0b:63:
         50:13:ea:cd:19:71:d5:4a:f5:1d:57:57:69:2c:35:91:51:66:
         57:23:ab:d6:73:da:4d:bf:e4:2e:ef:64:0f:0a:ba:97:35:6c:
         ba:c4:53:26:a3:e1:4d:43:54:5b:9f:49:c9:6e:2f:02:34:a8:
         92:c5:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org