Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39392e302f32342d3234203d3e20323636303931.roa
File:                     34352e352e39392e302f32342d3234203d3e20323636303931.roa (raw, json)
Hash identifier:          8Cs6Dw439HQj41nEtjn98IwhHwlBTZg/DRHEz5QNGTk=
Subject key identifier:   48:56:A9:1E:25:2C:0D:78:23:59:A7:C4:46:FE:55:CD:E2:CC:D7:08
Certificate issuer:       /CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
Certificate serial:       35EC54C5492916DF13CAFEFA99C3D15A8AD37D20
Authority key identifier: 54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39392e302f32342d3234203d3e20323636303931.roa
Signing time:             Wed 28 Feb 2024 14:10:58 +0000
ROA not before:           Wed 28 Feb 2024 14:05:58 +0000
ROA not after:            Wed 26 Feb 2025 14:10:58 +0000
asID:                     266091
IP address blocks:        45.5.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ec:54:c5:49:29:16:df:13:ca:fe:fa:99:c3:d1:5a:8a:d3:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
        Validity
            Not Before: Feb 28 14:05:58 2024 GMT
            Not After : Feb 26 14:10:58 2025 GMT
        Subject: CN=4856A91E252C0D782359A7C446FE55CDE2CCD708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:a7:c2:eb:ec:4a:d3:8f:47:6a:c7:65:3b:
                    9e:3b:45:39:d8:a2:0e:91:95:b1:3c:4c:7b:71:e3:
                    16:10:9b:1b:af:db:c9:1c:0b:e9:f5:6b:aa:b8:38:
                    e0:88:75:c9:12:e4:7e:61:82:56:85:19:d8:c0:23:
                    aa:0e:ca:ff:c4:c8:0a:96:5c:57:db:9b:9e:96:e0:
                    7c:73:c6:15:6e:96:20:6d:71:f2:df:f2:cb:f5:4a:
                    4d:82:c3:d5:a9:f8:03:d0:2b:7b:d3:46:98:67:ea:
                    d3:39:05:a5:87:2b:da:3d:11:e2:4e:2d:d1:a6:cf:
                    ee:38:fb:01:3f:79:6a:34:03:fe:05:92:5b:29:1e:
                    dc:13:ef:e6:3f:c0:f5:23:d0:11:cb:53:da:b0:b0:
                    7d:dc:23:15:29:74:b4:9c:91:8e:e1:74:19:84:71:
                    4d:38:ef:5c:90:b3:37:83:29:92:d5:d3:1c:04:3c:
                    a9:07:1e:53:69:87:5f:33:a5:5a:46:e6:80:3c:94:
                    aa:bf:6c:24:fb:e5:27:81:b9:40:18:a9:f7:15:86:
                    fe:50:9e:d9:d3:a6:db:58:bc:9d:2e:99:70:bc:46:
                    16:a0:f9:9b:97:8b:8c:4b:3c:1f:08:2a:df:ac:2c:
                    c0:1c:55:da:76:d0:c8:88:40:70:d3:35:54:69:01:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:56:A9:1E:25:2C:0D:78:23:59:A7:C4:46:FE:55:CD:E2:CC:D7:08
            X509v3 Authority Key Identifier:
                keyid:54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39392e302f32342d3234203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:7a:ef:da:1c:27:55:e4:0e:74:72:7f:fb:76:8c:bb:93:d3:
         9e:db:32:16:6b:ec:1a:fa:dd:48:94:7e:fb:b4:ce:9c:95:ad:
         3a:c7:82:2e:d1:16:3f:04:c2:46:c4:f2:fb:a0:ce:69:95:ca:
         a1:60:38:04:0a:1a:8c:94:a5:54:f2:b0:ad:95:c3:d5:32:33:
         dd:43:c3:db:2c:4a:23:72:8a:4d:d7:66:e0:b2:a8:1c:46:0b:
         15:49:38:c8:b6:6c:cc:b6:95:09:92:a4:ab:dc:a4:25:72:c1:
         8a:f0:04:5e:34:23:1f:f4:da:7d:ce:b3:87:cd:c6:93:97:24:
         01:41:9a:a6:9f:92:c0:44:79:3a:f3:12:26:18:f6:99:c2:03:
         72:7f:27:56:92:f1:73:07:08:76:a4:99:e2:99:3e:cd:2a:29:
         4a:17:d8:0b:bf:71:10:e5:ed:97:44:9c:49:fc:3f:af:0d:a0:
         01:1b:b9:de:cd:9d:93:43:c1:db:e9:70:67:65:5b:f9:48:85:
         fc:0b:ca:0f:50:49:76:19:c6:3e:00:d5:42:39:79:af:54:ef:
         6d:e8:20:c5:93:c4:d0:20:9d:cd:9f:f1:d8:dc:de:47:82:18:
         1e:4d:76:3b:a0:d4:a2:32:2a:e5:5c:6b:6a:1e:8c:bd:93:1c:
         91:bc:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org