Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39372e302f32342d3234203d3e20323636303931.roa
File:                     34352e352e39372e302f32342d3234203d3e20323636303931.roa (raw, json)
Hash identifier:          ZB50lIiZUEfZvqeqG3HkahcFbDWDRZTGWIDF+mMnQuw=
Subject key identifier:   CB:B1:67:A8:2C:25:81:C1:01:46:52:A0:C8:7E:81:C4:61:C6:3C:04
Certificate issuer:       /CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
Certificate serial:       0E405E15610FA0A2081DAB155E8990C949D6E2E4
Authority key identifier: 54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39372e302f32342d3234203d3e20323636303931.roa
Signing time:             Wed 28 Feb 2024 14:11:04 +0000
ROA not before:           Wed 28 Feb 2024 14:06:04 +0000
ROA not after:            Wed 26 Feb 2025 14:11:04 +0000
asID:                     266091
IP address blocks:        45.5.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:40:5e:15:61:0f:a0:a2:08:1d:ab:15:5e:89:90:c9:49:d6:e2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
        Validity
            Not Before: Feb 28 14:06:04 2024 GMT
            Not After : Feb 26 14:11:04 2025 GMT
        Subject: CN=CBB167A82C2581C1014652A0C87E81C461C63C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:d9:19:f8:79:cc:e2:1f:06:72:97:27:8d:
                    dc:67:3b:a5:ed:b7:a4:32:e6:8d:62:b6:6c:20:81:
                    b4:94:52:51:0a:74:0e:1a:9a:46:3f:00:7e:8b:3c:
                    32:df:87:e0:00:94:5d:2f:25:94:04:ed:14:20:65:
                    0f:9b:c8:d2:a0:18:e3:f0:45:ba:5e:e5:c0:33:8f:
                    77:46:e4:b8:cd:0d:29:9a:ce:d3:3c:90:7d:a3:f6:
                    e4:f6:57:50:8f:ef:6d:3c:04:dd:9c:f7:fa:80:97:
                    90:92:a6:73:6c:1f:f7:6e:8e:cc:77:18:a7:fb:bd:
                    85:c6:21:ec:37:11:7e:b7:e8:ab:0a:92:6d:f6:2f:
                    17:66:b8:4f:18:c8:10:ca:17:19:93:15:90:0e:b1:
                    b1:95:ca:f8:4a:3c:1a:9c:d2:40:ee:aa:f6:97:cc:
                    c0:b7:bc:e8:ef:30:35:da:29:75:86:79:21:46:3c:
                    19:39:e1:e1:c4:de:1e:b9:67:e8:57:11:f6:24:14:
                    d3:de:32:dd:bb:1b:95:7f:57:3f:69:6c:c1:39:f8:
                    b5:80:0f:dc:6b:2d:0e:42:06:bb:e5:92:30:3e:87:
                    24:8d:1b:20:e3:9e:2a:4e:13:cf:9d:b4:c9:c2:a5:
                    0a:c1:a4:02:2a:49:75:1c:3a:bc:41:4f:c7:86:cc:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B1:67:A8:2C:25:81:C1:01:46:52:A0:C8:7E:81:C4:61:C6:3C:04
            X509v3 Authority Key Identifier:
                keyid:54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39372e302f32342d3234203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:de:c1:2c:da:d0:bc:36:85:e9:a1:10:e7:69:59:0b:95:df:
         0b:c4:4e:c9:cd:91:05:9d:dd:ef:47:fb:c9:eb:bc:33:84:38:
         07:83:69:2d:0a:77:ce:7e:97:d3:2c:0a:c9:c1:6f:06:7c:15:
         15:cf:c9:f5:b0:54:52:c1:05:18:fc:59:a3:fa:7f:36:44:50:
         08:3a:ed:53:48:e7:24:ed:89:89:db:f4:4a:a5:8d:0b:d7:23:
         3d:09:bb:15:31:e3:4a:39:47:3c:39:53:a5:67:3c:09:f3:21:
         28:be:5e:fa:c4:ea:0d:1a:d1:5d:f6:cb:77:5e:27:bb:be:91:
         73:f5:95:66:61:4f:ef:a2:99:56:d7:24:c0:86:46:1a:aa:58:
         8d:50:4f:39:92:bb:6b:24:05:0c:eb:aa:33:c2:8d:85:05:3f:
         b6:d2:0c:c4:62:c5:dd:9c:8f:1d:6d:85:7b:13:45:a0:6f:5d:
         c8:8b:58:9d:00:3d:91:54:1d:69:2b:c0:68:4a:af:ff:93:4d:
         ae:61:ac:ae:96:8c:0f:9d:11:c1:0c:f8:d5:a9:5d:14:9c:c4:
         8d:80:84:8b:39:ce:5e:5e:c8:08:8c:72:7d:2c:1a:6c:59:a9:
         9b:8a:08:e3:72:2e:b3:e2:38:69:27:30:e2:61:92:52:1a:7c:
         6a:e8:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org