Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3232203d3e20323636303931.roa
File:                     34352e352e39362e302f32322d3232203d3e20323636303931.roa (raw, json)
Hash identifier:          iSQjUR+OLI3tdvOldhut/vlntESCEhlDc/o436C1LXg=
Subject key identifier:   FE:C6:91:B0:6A:FC:A1:19:E6:CA:5B:DF:3F:80:EE:46:9D:4B:B3:DC
Certificate issuer:       /CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
Certificate serial:       4BD004E7AA955E1FD5263994EFC7735D5FC755E2
Authority key identifier: 54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3232203d3e20323636303931.roa
Signing time:             Wed 28 Feb 2024 14:11:09 +0000
ROA not before:           Wed 28 Feb 2024 14:06:09 +0000
ROA not after:            Wed 26 Feb 2025 14:11:09 +0000
asID:                     266091
IP address blocks:        45.5.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d0:04:e7:aa:95:5e:1f:d5:26:39:94:ef:c7:73:5d:5f:c7:55:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
        Validity
            Not Before: Feb 28 14:06:09 2024 GMT
            Not After : Feb 26 14:11:09 2025 GMT
        Subject: CN=FEC691B06AFCA119E6CA5BDF3F80EE469D4BB3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:dd:f7:1b:34:6e:9d:33:12:61:b6:c7:8a:
                    14:00:82:98:0b:22:d6:e6:2d:b4:a9:e7:73:35:0e:
                    81:58:1e:9e:c9:f0:03:41:c6:b6:c1:24:2e:6a:4f:
                    d8:22:a3:0d:72:48:ab:35:7f:49:00:26:35:a6:8e:
                    21:e9:5c:71:f2:31:54:48:95:b4:78:9c:4d:91:5a:
                    0e:b8:ca:81:06:52:8c:a1:66:fc:a7:bb:2d:7a:02:
                    e1:98:a9:1f:7e:91:63:39:5e:e5:14:fa:9f:81:23:
                    2f:83:80:4b:f4:cf:71:24:71:3a:f3:f4:81:28:d5:
                    93:39:7a:54:88:60:4c:de:f5:ab:c5:64:23:fc:66:
                    9d:d9:a5:7a:58:1a:da:cd:5b:c2:09:7b:b2:44:a2:
                    d8:4b:72:ee:9e:e7:18:62:9b:40:8f:fc:35:5e:4d:
                    31:49:a9:9d:62:34:33:c3:8f:53:5e:60:db:11:df:
                    b8:a1:b4:65:ff:63:6f:6a:2e:c4:0e:4a:18:59:76:
                    c8:1e:54:98:bf:a1:96:87:7b:a2:b4:a5:0f:56:48:
                    6c:79:d3:ad:72:8e:68:73:96:d0:d8:a4:c6:3f:1b:
                    61:de:98:30:6c:0e:85:6b:80:40:33:b2:9c:75:e7:
                    01:75:e8:d3:a7:e1:90:a0:f8:7a:e4:e1:06:d9:6f:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C6:91:B0:6A:FC:A1:19:E6:CA:5B:DF:3F:80:EE:46:9D:4B:B3:DC
            X509v3 Authority Key Identifier:
                keyid:54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3232203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:47:c2:44:72:9f:79:03:4f:61:3a:ec:a0:39:c9:d9:40:1c:
         dc:af:11:ea:95:9b:ec:f4:f3:7e:f8:d7:33:8a:ad:a6:bb:91:
         4c:d4:50:4b:eb:64:97:d6:75:1c:c1:f9:7c:cb:92:5d:99:bc:
         6f:63:15:01:f2:1a:64:eb:7d:8e:59:40:1a:c3:1d:03:51:e4:
         2a:76:cf:2e:98:73:85:6d:86:da:e6:76:c9:0f:b9:aa:f2:b4:
         ff:3c:3c:b9:01:ae:2a:2a:db:3e:0a:62:9a:30:ef:4c:ad:2a:
         93:bc:18:9b:70:ba:05:c9:c2:08:b7:2f:f3:c9:95:f5:77:6e:
         bc:99:07:67:bb:8d:84:98:63:1d:c3:f4:64:49:82:f3:06:53:
         eb:c1:67:32:16:42:b7:e5:18:6f:30:7f:5b:bb:a8:63:a1:1e:
         d7:bb:2d:98:2a:fe:6f:ad:46:c0:a2:c5:4a:cd:50:60:e4:7d:
         41:57:b8:74:df:41:cf:f7:36:a7:ff:9c:02:bf:9d:be:eb:e4:
         91:84:70:8f:0b:6b:9f:17:d9:a4:0f:c9:65:54:a2:fe:4b:f1:
         1b:cc:c2:08:15:b4:28:d0:f6:35:18:18:21:97:88:24:8a:26:
         27:2b:97:a5:07:df:f8:ba:d2:9d:c2:34:57:bd:96:0f:8b:69:
         ad:34:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org