Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32342d3234203d3e20323636303430.roa
File:                     34352e342e35322e302f32342d3234203d3e20323636303430.roa (raw, json)
Hash identifier:          ADLus4PfaJz1ue181kciBbWvO8x7v0n75cdwbqlozIE=
Subject key identifier:   30:CF:42:9F:21:F8:AA:2C:3B:53:29:00:55:82:38:4E:93:59:48:2A
Certificate issuer:       /CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
Certificate serial:       37E65A109AC5196F9C0D530E66AF118639EC52BB
Authority key identifier: 7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32342d3234203d3e20323636303430.roa
Signing time:             Tue 13 Dec 2022 13:00:41 +0000
ROA not before:           Tue 13 Dec 2022 12:55:41 +0000
ROA not after:            Tue 12 Dec 2023 13:00:41 +0000
asID:                     266040
IP address blocks:        45.4.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e6:5a:10:9a:c5:19:6f:9c:0d:53:0e:66:af:11:86:39:ec:52:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
        Validity
            Not Before: Dec 13 12:55:41 2022 GMT
            Not After : Dec 12 13:00:41 2023 GMT
        Subject: CN=30CF429F21F8AA2C3B5329005582384E9359482A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:36:03:23:78:cb:bb:8a:44:8b:0f:cf:9b:6c:
                    db:30:83:22:c8:ff:7a:86:e6:f1:35:aa:be:6d:53:
                    0b:77:26:60:16:c5:c6:56:94:41:76:74:6a:79:cf:
                    47:27:50:37:9f:56:9c:1c:7b:c8:95:23:16:62:5b:
                    41:36:39:43:67:9e:1f:cf:83:63:c4:1c:fb:d8:54:
                    15:ca:27:35:fb:d9:ba:86:83:1f:74:3e:43:4f:40:
                    52:b0:9a:48:e1:ce:19:ea:e5:81:b5:ec:66:94:ea:
                    c5:41:d7:cf:5c:81:ab:ac:92:c4:2e:45:e0:d2:2c:
                    41:09:dc:e3:11:5f:5c:c5:80:a8:e5:eb:be:60:f9:
                    98:98:82:0d:5b:e3:75:75:47:13:2e:8d:09:8b:5a:
                    86:d6:c1:ed:3c:f9:7e:cb:e3:cd:42:dd:8f:2f:c0:
                    3d:d6:98:c5:90:3a:c5:82:77:4d:2b:ad:d0:d6:19:
                    2f:48:2e:fc:3a:7c:96:bb:80:36:3a:1e:b4:1c:4d:
                    ec:b5:d2:31:dd:fe:17:fc:65:f5:42:61:34:d9:20:
                    d4:3c:df:0c:0e:05:13:1d:55:5e:4c:15:b8:bc:db:
                    85:05:44:ed:b4:17:68:4a:25:ba:15:2b:e8:6e:22:
                    9c:bf:ba:72:59:68:1e:58:a4:f0:27:e8:55:3f:b1:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:42:9F:21:F8:AA:2C:3B:53:29:00:55:82:38:4E:93:59:48:2A
            X509v3 Authority Key Identifier:
                keyid:7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32342d3234203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:a1:9b:4f:46:6c:d6:f9:5a:35:ec:b9:4e:9e:97:e8:37:
         f2:db:c7:e8:2d:0e:01:03:21:f2:53:ee:55:22:8a:3d:93:6f:
         5a:ff:54:9c:1e:84:72:83:46:b1:f4:00:80:63:71:48:8f:7c:
         21:14:a9:03:25:e6:55:a4:59:d6:90:b8:83:2b:bc:35:76:01:
         1f:c9:f2:85:90:c6:1d:78:ff:99:81:8a:8c:48:96:d1:1e:72:
         d1:a8:b1:50:b7:c5:19:ca:f0:45:f0:17:12:44:c4:a3:bf:56:
         ed:6b:b7:8e:7d:30:6f:aa:97:5b:da:59:38:64:83:9e:e5:dd:
         4b:f3:f4:d2:e0:25:82:bd:11:58:ef:b9:f6:bf:4f:8f:b9:1e:
         44:69:91:7c:94:e0:a1:e1:c7:e9:dd:26:bc:32:1e:34:a4:de:
         a8:68:e9:02:30:c4:78:0f:f4:c3:5e:95:f6:df:9b:04:3a:6c:
         f4:bd:44:d8:b2:0c:3d:e8:83:01:06:43:f8:13:5e:db:18:1d:
         19:6a:4c:8c:0b:fc:e8:d9:a0:d4:e3:cf:14:ef:50:6e:13:80:
         bd:f9:51:d5:a6:7e:83:4b:6d:99:4e:3d:4f:a5:ad:30:f4:cd:
         3a:db:a5:a0:4b:aa:59:e2:02:ff:3b:b9:4d:59:5b:8e:0c:25:
         d9:25:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org