Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35352e302f32342d3234203d3e20323636303430.roa
File:                     34352e342e35352e302f32342d3234203d3e20323636303430.roa (raw, json)
Hash identifier:          S2hOJ5pIIrt+PGbUSSZSMBOyX8wTFmDxWs6JNsbmnFM=
Subject key identifier:   82:80:D7:0A:D2:C1:73:B7:69:BF:73:0F:F3:C5:E3:19:55:39:37:2F
Certificate issuer:       /CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
Certificate serial:       5A38DE4310D79AABEE33B9FBDBA25E7A186068F4
Authority key identifier: 7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35352e302f32342d3234203d3e20323636303430.roa
Signing time:             Tue 13 Dec 2022 13:00:49 +0000
ROA not before:           Tue 13 Dec 2022 12:55:49 +0000
ROA not after:            Tue 12 Dec 2023 13:00:49 +0000
asID:                     266040
IP address blocks:        45.4.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:38:de:43:10:d7:9a:ab:ee:33:b9:fb:db:a2:5e:7a:18:60:68:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00
        Validity
            Not Before: Dec 13 12:55:49 2022 GMT
            Not After : Dec 12 13:00:49 2023 GMT
        Subject: CN=8280D70AD2C173B769BF730FF3C5E3195539372F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:00:b0:10:91:ca:62:3e:8a:a7:3b:4f:ed:
                    d8:c8:f9:34:a4:5d:de:92:d5:32:35:08:ea:5f:91:
                    8b:85:b5:de:66:b8:15:9f:19:2b:6e:fc:a7:9b:7e:
                    21:8b:c7:dd:d4:dc:e4:b6:19:e3:6f:e5:38:f0:ca:
                    94:30:e0:f8:37:aa:97:f1:08:63:54:0a:40:70:ef:
                    5d:6d:9d:61:dc:ed:61:1b:2f:d9:ff:ea:ad:3b:b6:
                    d8:98:23:6b:a5:94:df:5d:8c:bc:f5:9e:49:4c:f8:
                    8e:69:36:7c:3a:4d:c2:3a:e0:ba:88:cd:e4:19:b9:
                    5f:b7:17:ee:d0:9f:f9:33:1d:b8:e2:b2:5b:50:5d:
                    56:19:38:2c:87:e1:7f:ec:f8:c5:cb:4a:1c:86:bd:
                    dd:64:db:75:7d:4d:22:7b:76:4e:73:8b:e0:0c:75:
                    d3:85:f0:0a:aa:2c:77:ed:b2:47:9a:77:84:82:25:
                    96:fe:40:0c:be:0e:35:f2:69:8b:c9:4b:be:79:bb:
                    40:2f:80:50:77:10:1d:bb:fe:c4:55:84:97:e6:94:
                    1c:4d:a3:d2:3a:ae:be:ad:da:09:9b:96:ef:87:b5:
                    1d:26:cc:de:7a:86:4d:2f:ab:8a:16:87:d6:db:40:
                    69:26:ed:0c:22:bb:e5:b7:87:e6:1b:30:fc:25:26:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:80:D7:0A:D2:C1:73:B7:69:BF:73:0F:F3:C5:E3:19:55:39:37:2F
            X509v3 Authority Key Identifier:
                keyid:7B:BE:00:C9:4F:B1:D2:09:B3:96:CD:1E:FC:5E:B0:DE:45:95:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BBE00C94FB1D209B396CD1EFC5EB0DE45951E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35352e302f32342d3234203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:5d:34:db:76:42:2a:0b:ac:f6:e9:4d:f7:81:69:bc:42:00:
         15:50:c2:5a:4f:5e:ce:19:14:be:ec:09:4f:40:83:6b:be:40:
         67:50:58:36:28:a2:10:20:ab:01:44:2b:1c:7f:ba:08:27:8f:
         03:74:e8:a4:ef:bf:bb:1a:99:90:31:73:52:4b:5b:6a:cd:93:
         c1:dd:a3:2b:93:a6:b6:c8:75:2f:62:72:8c:53:18:b4:2f:10:
         d0:37:f7:79:46:94:e0:0f:7b:1d:a9:fc:b0:53:76:0c:e7:ad:
         b7:a4:14:bd:79:6e:49:33:37:e9:50:4b:bc:19:12:18:e8:25:
         03:3d:92:71:3e:e9:34:4d:8d:20:fa:6c:67:db:85:79:65:e4:
         68:75:32:75:a9:e4:56:03:08:eb:25:7b:0c:e0:1a:8e:fd:c9:
         5e:51:63:87:9d:43:14:6b:20:2d:49:91:5d:28:5b:8b:82:01:
         6b:5e:42:e3:0d:8d:58:74:3a:ba:d0:fa:b0:c1:ea:a3:9f:24:
         8b:e2:82:4d:34:ad:aa:54:a4:e9:cf:59:b7:af:59:65:e1:c0:
         82:58:26:98:24:dd:eb:71:f2:0c:4f:53:ee:55:38:9c:37:ed:
         24:27:5c:65:3b:bd:ea:d6:f6:ca:69:48:23:57:7a:c8:e2:ba:
         c7:79:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org