Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3232203d3e20323636303430.roa
File:                     34352e342e35322e302f32322d3232203d3e20323636303430.roa (raw, json)
Hash identifier:          HNTjW9d/gBVaTPBm7Dz5Aq5VT5d+z0dOKa9OICu1R5E=
Subject key identifier:   AD:81:D6:E0:AF:45:CF:C2:65:3D:49:14:F6:96:C6:10:5F:C2:C6:03
Certificate issuer:       /CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
Certificate serial:       3F1415FC25FFD921D43F766514AC36E0AF6D147A
Authority key identifier: 7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3232203d3e20323636303430.roa
Signing time:             Tue 13 Dec 2022 13:00:38 +0000
ROA not before:           Tue 13 Dec 2022 12:55:38 +0000
ROA not after:            Tue 12 Dec 2023 13:00:38 +0000
asID:                     266040
IP address blocks:        45.4.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:14:15:fc:25:ff:d9:21:d4:3f:76:65:14:ac:36:e0:af:6d:14:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
        Validity
            Not Before: Dec 13 12:55:38 2022 GMT
            Not After : Dec 12 13:00:38 2023 GMT
        Subject: CN=AD81D6E0AF45CFC2653D4914F696C6105FC2C603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:1b:eb:b6:9f:1a:03:e1:03:66:ac:ea:26:
                    a6:cc:43:e2:29:fb:4a:b9:ac:c5:d3:23:f0:3b:60:
                    a8:c7:f5:dc:68:a1:32:0a:d6:e6:09:8a:ea:fa:bd:
                    dd:6a:89:98:23:09:d5:f3:19:5b:03:e1:70:16:54:
                    f6:b5:c4:d5:8a:11:9e:23:04:6e:8c:c3:ca:99:2a:
                    23:ef:64:1a:3e:7b:e3:04:77:b0:d6:51:08:a4:82:
                    25:60:cb:4c:53:af:35:ba:41:17:b4:93:01:3b:fb:
                    63:cf:09:27:86:7e:8f:51:5b:36:b2:1e:b6:c6:f4:
                    0e:e0:86:be:c1:84:4d:04:a6:6e:b0:fd:7e:66:25:
                    e4:84:ab:68:db:8a:92:9b:37:ac:0b:b0:11:06:95:
                    b1:39:c6:ec:d6:a7:6e:de:12:d0:3d:54:73:e9:5a:
                    00:df:86:1f:5a:e1:0b:15:02:3a:b4:37:21:20:25:
                    20:a8:55:15:42:14:f9:e3:ae:32:95:a2:a4:d3:6b:
                    6c:ec:1d:6e:0d:48:03:ff:ad:b3:8a:d0:89:65:fd:
                    54:3e:6c:10:b8:0c:ad:90:80:dd:e9:20:f7:48:52:
                    c1:50:0b:32:77:ab:a6:14:5c:13:c0:92:44:32:27:
                    fb:4c:e8:6c:e0:d2:ef:a3:5a:e9:84:39:b8:28:ba:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:81:D6:E0:AF:45:CF:C2:65:3D:49:14:F6:96:C6:10:5F:C2:C6:03
            X509v3 Authority Key Identifier:
                keyid:7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3232203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:59:8f:76:7a:3a:e0:b9:70:f4:8b:55:32:62:5c:0a:94:
         e7:f0:a4:5b:1c:5c:0d:32:14:1d:c4:e8:a1:38:e6:b8:5e:3a:
         0d:b0:f0:3b:ba:36:9b:8c:be:19:25:91:98:59:97:1d:9c:48:
         0e:d1:dd:e8:f4:d9:92:fd:ba:6b:4c:00:58:31:6c:51:1c:6a:
         17:49:a9:63:e6:4a:91:7a:e0:51:7b:6e:c9:f1:0f:8b:46:61:
         c2:89:6b:c9:5e:9a:b7:14:65:f1:a7:fa:c4:e4:44:1d:65:f0:
         3c:bb:7a:2e:1a:77:34:c0:3d:83:63:c4:5a:f0:96:b0:1f:86:
         88:24:5a:46:9f:ab:f1:f0:41:8b:dc:02:63:bd:15:88:af:5c:
         f8:b5:0c:16:3b:2a:79:a9:e5:b4:db:27:bf:bb:db:2c:24:d5:
         5d:8f:cd:53:f3:89:83:79:9c:4d:a8:1c:1b:cd:e7:31:8d:89:
         b4:9d:5b:b2:f4:ae:37:1f:78:2a:47:28:52:e4:4d:c6:36:e3:
         31:1f:27:91:93:5e:9a:31:7c:e2:c9:22:a3:be:94:b1:1a:ee:
         d8:d2:79:a8:10:66:2a:c2:d4:bc:75:9b:35:2f:ce:50:cb:a3:
         91:ef:a5:02:a8:34:1e:33:54:9d:91:ba:5d:15:88:41:c4:f8:
         e7:1d:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org