Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35342e302f32342d3234203d3e20323636303430.roa
File:                     34352e342e35342e302f32342d3234203d3e20323636303430.roa (raw, json)
Hash identifier:          xi8hzISuyWhf/cUF8fS1DENRH1V/IkV0fqsV5vU1uI4=
Subject key identifier:   5E:A5:79:20:9C:A4:A5:10:18:41:61:B5:CE:06:5D:38:E9:BF:0D:0D
Certificate issuer:       /CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
Certificate serial:       0D6FFEA9BA1F80BEA402C674AB0F9DBB0196EF7B
Authority key identifier: 7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35342e302f32342d3234203d3e20323636303430.roa
Signing time:             Tue 13 Dec 2022 13:00:46 +0000
ROA not before:           Tue 13 Dec 2022 12:55:46 +0000
ROA not after:            Tue 12 Dec 2023 13:00:46 +0000
asID:                     266040
IP address blocks:        45.4.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6f:fe:a9:ba:1f:80:be:a4:02:c6:74:ab:0f:9d:bb:01:96:ef:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
        Validity
            Not Before: Dec 13 12:55:46 2022 GMT
            Not After : Dec 12 13:00:46 2023 GMT
        Subject: CN=5EA579209CA4A510184161B5CE065D38E9BF0D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:a7:9d:65:ae:3a:ef:aa:7b:10:9f:50:cf:
                    bb:1d:0c:40:c3:91:80:cc:82:f7:7a:e1:70:30:41:
                    0d:33:ed:5e:d4:7c:bb:5a:26:b4:de:31:65:21:67:
                    68:df:dc:4a:7b:95:69:dd:d8:57:c2:21:0f:47:0a:
                    8f:15:51:95:2e:c0:61:cb:a1:4a:0f:3f:60:f8:e7:
                    ab:47:79:63:e5:80:45:6c:79:a2:48:95:e2:59:23:
                    06:4f:94:54:7b:e0:e4:71:dc:98:3d:86:cb:53:46:
                    76:0b:8d:f0:6f:fa:3e:aa:00:94:d0:b4:80:09:e0:
                    92:f9:c7:f7:ea:17:ed:35:f1:75:89:7f:22:11:9c:
                    c6:a3:3e:f4:88:ef:61:a0:06:ff:3a:2d:f7:22:42:
                    f4:d1:08:e8:1e:ac:77:53:71:cc:16:57:af:09:79:
                    f2:1e:60:0b:9f:19:d3:4b:02:b5:3c:8e:c5:0c:46:
                    9f:04:29:f2:2e:70:2e:2e:07:52:73:99:7e:6d:86:
                    99:69:96:3a:21:e2:be:af:b9:29:ed:aa:b3:7f:5f:
                    28:79:4a:b6:eb:a3:c6:4d:91:e4:10:fa:2b:59:62:
                    6e:90:2f:69:2e:b5:1d:41:7e:a2:b5:70:dc:bf:0a:
                    7e:21:32:c2:07:98:69:61:cc:73:28:68:08:b2:b6:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A5:79:20:9C:A4:A5:10:18:41:61:B5:CE:06:5D:38:E9:BF:0D:0D
            X509v3 Authority Key Identifier:
                keyid:7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35342e302f32342d3234203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:86:a8:fd:57:99:70:fe:60:e4:13:39:42:6e:5c:5c:43:
         b5:67:24:bd:e1:70:11:61:d3:dc:97:53:9a:21:63:a5:32:47:
         9d:5d:a5:84:a1:27:56:66:0a:a2:ac:30:2a:81:5d:ca:a8:19:
         d1:a9:5b:0c:60:6f:c4:e9:8b:fc:35:ce:8c:e5:59:d9:d5:bc:
         a8:2d:98:d5:47:c0:b6:b2:dc:d7:c2:1a:a8:e1:f4:64:29:b8:
         59:21:ea:f6:b4:8e:f1:c5:d7:e5:52:3e:f1:2f:ae:03:57:9a:
         cd:2b:1d:24:2c:d6:06:4c:e2:85:3e:78:dd:f9:7c:02:78:54:
         a1:59:69:ef:7b:28:fd:d0:03:19:01:7b:87:a6:4f:e4:95:c7:
         bb:9b:88:a7:d8:fe:33:a5:c6:cf:9c:61:b9:c9:b6:eb:5a:a4:
         e3:f8:4a:be:09:be:8d:0a:d3:e8:91:c9:07:d8:79:7e:f0:02:
         b1:f9:51:ab:22:bc:b7:91:12:3e:4e:4c:30:9d:b7:ce:25:e3:
         1d:92:80:b8:a0:7c:03:40:14:57:9a:57:ed:9b:4c:4f:fc:ec:
         a4:f9:ec:a3:94:55:d0:7b:3c:0f:25:6c:29:7d:eb:91:06:22:
         57:bf:aa:f9:d4:a6:0a:0b:e4:75:b9:5c:27:d0:0a:34:83:46:
         9b:61:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org