Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139342e302f32332d3234203d3e20323636363037.roa
File:                     34352e372e3139342e302f32332d3234203d3e20323636363037.roa (raw, json)
Hash identifier:          g3CVPOhsUW2lFuyJXm8uYc35+iKg7Zl6OaagZEjPgL8=
Subject key identifier:   69:5A:36:56:C4:38:51:24:4A:8F:F1:C7:68:1B:69:8C:49:7E:77:A5
Certificate issuer:       /CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
Certificate serial:       554AB4690F6A09C2C033099E7E6218F48578C098
Authority key identifier: 52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139342e302f32332d3234203d3e20323636363037.roa
Signing time:             Thu 23 Nov 2023 00:35:03 +0000
ROA not before:           Thu 23 Nov 2023 00:30:03 +0000
ROA not after:            Thu 21 Nov 2024 00:35:03 +0000
asID:                     266607
IP address blocks:        45.7.194.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4a:b4:69:0f:6a:09:c2:c0:33:09:9e:7e:62:18:f4:85:78:c0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
        Validity
            Not Before: Nov 23 00:30:03 2023 GMT
            Not After : Nov 21 00:35:03 2024 GMT
        Subject: CN=695A3656C43851244A8FF1C7681B698C497E77A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:f8:fa:14:1f:b2:d5:83:9a:95:b8:6d:be:
                    d2:1b:a6:e0:d6:f2:23:c7:9a:26:41:4c:07:dc:61:
                    53:9f:3d:50:7e:68:08:a7:b5:66:92:51:99:80:64:
                    c4:e1:2d:70:79:e4:38:4f:0a:23:89:a4:c1:ff:bc:
                    84:8e:c9:c1:15:56:6a:2d:4f:21:90:d0:cb:e3:63:
                    e7:60:ff:3b:e1:e6:73:35:f4:18:9d:8e:42:eb:27:
                    c6:26:17:29:d3:b5:c7:78:87:09:13:0b:5b:57:4e:
                    5b:ff:98:0c:d7:d3:05:3b:42:49:bd:96:db:78:93:
                    e6:8f:5e:4a:55:55:f4:78:33:41:dd:08:15:5c:92:
                    a3:07:b2:80:66:38:23:60:60:9d:ac:5d:04:b5:79:
                    54:3b:37:5f:ec:88:07:dd:92:38:15:ab:7f:b0:9c:
                    9d:6b:6f:48:06:e7:52:24:83:5d:8b:f9:c9:ed:a6:
                    6e:c7:fb:88:be:4d:d7:c8:53:33:b7:23:60:d1:aa:
                    89:a3:3b:4c:04:74:51:1e:2b:e6:77:52:20:cd:60:
                    07:87:a1:04:aa:bd:6a:ab:88:73:82:25:bf:73:a8:
                    4e:f8:67:53:98:e9:0d:6c:67:98:67:1c:90:27:3c:
                    14:a7:56:a7:78:27:7e:c3:94:ec:41:04:03:a8:44:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5A:36:56:C4:38:51:24:4A:8F:F1:C7:68:1B:69:8C:49:7E:77:A5
            X509v3 Authority Key Identifier:
                keyid:52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139342e302f32332d3234203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:96:83:00:a2:0d:5d:5a:ff:25:15:31:8a:ee:67:31:e8:
         5d:c7:4b:f7:d2:71:6a:bb:97:d1:c4:a6:95:64:30:6f:38:95:
         3f:ad:46:8d:6c:7a:ee:8d:49:35:95:72:49:73:d4:e9:e6:5f:
         bd:ab:60:3e:3e:93:70:93:4b:78:4d:82:87:2e:86:b2:9c:6c:
         fa:82:5c:e3:2b:25:b5:93:ec:11:1f:da:d3:d5:f5:d0:d1:d4:
         55:f6:e2:c4:22:a4:fc:ce:db:23:aa:39:ee:c6:0c:80:74:e4:
         a0:71:bd:44:00:52:34:0a:3c:7f:c6:91:a1:ca:0d:4f:78:23:
         ef:38:96:ad:ee:d3:9d:6a:b1:97:6f:17:2e:b0:e9:4b:e8:ca:
         63:5d:35:20:cd:9e:c0:74:98:29:3d:ba:a1:25:ff:80:44:69:
         35:a3:8e:bd:f9:16:04:35:48:b9:7b:fa:bc:ff:43:59:ba:64:
         0d:2e:82:b8:ff:7c:33:02:02:ec:66:38:30:53:08:64:fa:04:
         55:84:5d:a3:49:2d:58:53:58:21:57:1e:90:fc:6f:d6:6c:11:
         ae:0e:d1:26:c1:80:5d:65:d3:5f:c1:a3:43:68:12:86:c2:e0:
         ed:60:dd:e1:a5:78:4f:ab:28:d0:2d:57:52:80:f6:4d:1c:40:
         34:04:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org