Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35332e302f32342d3234203d3e20323636303430.roa
File:                     34352e342e35332e302f32342d3234203d3e20323636303430.roa (raw, json)
Hash identifier:          pWcc9xp+j6QotdPE7trsMF4Eqt3jScH39KkFElDDNfA=
Subject key identifier:   B2:0E:D8:BC:79:AE:29:2B:37:44:FF:C4:80:0D:EB:8A:A9:68:73:40
Certificate issuer:       /CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
Certificate serial:       7FB75626F859D348D270594F8B0B5963FF4E15E9
Authority key identifier: 7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35332e302f32342d3234203d3e20323636303430.roa
Signing time:             Tue 13 Dec 2022 13:00:43 +0000
ROA not before:           Tue 13 Dec 2022 12:55:43 +0000
ROA not after:            Tue 12 Dec 2023 13:00:43 +0000
asID:                     266040
IP address blocks:        45.4.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b7:56:26:f8:59:d3:48:d2:70:59:4f:8b:0b:59:63:ff:4e:15:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
        Validity
            Not Before: Dec 13 12:55:43 2022 GMT
            Not After : Dec 12 13:00:43 2023 GMT
        Subject: CN=B20ED8BC79AE292B3744FFC4800DEB8AA9687340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:90:f6:1b:50:30:7b:d6:94:49:a0:c8:14:
                    39:48:e2:7d:69:9b:c7:40:44:e5:bf:61:58:13:c9:
                    c2:39:d5:e8:1f:c2:1a:80:37:09:1b:86:3f:76:cf:
                    d6:3b:90:77:90:09:8d:53:62:a0:50:32:a5:16:6d:
                    ce:d1:02:23:a1:24:c7:99:77:ef:81:db:35:de:2f:
                    58:6e:49:66:ca:9a:6d:29:8f:ac:b6:cc:f6:ac:05:
                    31:ca:0f:af:cb:2d:f1:37:1a:0f:dc:cc:93:d1:aa:
                    73:35:de:83:4b:b1:47:5d:3d:29:32:17:da:13:18:
                    66:48:08:94:c9:84:b3:a3:37:ce:4b:e4:e1:c9:f4:
                    2c:65:84:2f:58:c0:eb:88:5d:d2:7d:9f:88:a8:f1:
                    9b:0e:f6:bf:df:33:43:bf:dd:58:65:28:3a:65:3f:
                    59:ae:70:8e:6c:96:71:9f:e1:f9:c4:82:79:74:c1:
                    39:81:b9:41:07:36:6e:30:39:a9:4c:01:41:ef:e8:
                    2f:e2:f1:00:f5:9f:4f:4a:e0:09:dd:e9:4e:25:9f:
                    2d:34:8c:c5:75:d5:b1:72:5d:0c:81:73:fd:a3:71:
                    f4:97:2d:2c:6e:34:e4:13:d5:cf:8a:10:1d:01:0c:
                    14:c5:28:22:68:93:03:e9:ec:68:ae:98:3d:83:57:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:D8:BC:79:AE:29:2B:37:44:FF:C4:80:0D:EB:8A:A9:68:73:40
            X509v3 Authority Key Identifier:
                keyid:7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35332e302f32342d3234203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:c3:43:f3:6e:37:e0:a3:5a:c7:e3:07:11:53:6f:65:2a:95:
         47:ac:54:4a:ac:77:41:87:08:22:3c:6e:14:f8:36:58:c2:cf:
         b7:0c:6c:70:3e:09:da:14:60:44:3a:16:dc:36:8f:41:c2:38:
         45:88:4b:7f:03:b9:c9:1d:77:bb:57:02:c7:fd:3e:e2:bc:d7:
         46:4c:4a:54:06:2c:ee:08:5b:91:3c:2b:d6:28:f1:44:bc:8f:
         52:3b:76:45:65:d7:0b:bb:22:a9:4c:5b:14:ca:12:d8:d5:9b:
         87:38:56:94:83:3e:e2:9f:41:1c:35:9f:d3:97:79:74:6d:55:
         a2:8e:c2:29:93:56:21:c2:1d:0e:5c:1f:07:ae:a9:51:17:59:
         d3:41:5b:84:5a:b8:95:af:6a:e7:4d:1b:44:2e:2f:9b:76:34:
         5b:42:0d:fd:29:3c:79:b9:4e:0e:d3:56:cf:0b:5b:6b:d7:82:
         7a:40:13:d8:a3:5b:01:17:e2:4b:7f:78:d4:92:a3:2d:03:a9:
         84:da:6b:36:7e:f8:f3:26:10:cc:95:12:88:aa:d5:ec:f2:0a:
         b4:d1:c0:85:28:49:cc:12:62:7c:d4:ee:e4:7e:28:d4:93:67:
         fe:94:b6:0c:e5:14:f7:2e:52:9b:c0:c6:3e:c0:7d:9e:91:1f:
         de:31:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org