Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/1/34352e372e3134382e302f32322d3234203d3e20323636353836.roa
File:                     34352e372e3134382e302f32322d3234203d3e20323636353836.roa (raw, json)
Hash identifier:          gw4Q765ZNzBQILF8nsBEV7Gbtx2YKB5Xxo3oN+sv8KA=
Subject key identifier:   5B:88:02:38:DF:70:E9:0F:5A:E9:A8:01:65:75:8D:6A:D8:D7:56:01
Certificate issuer:       /CN=C0B2D6688BC1A85B2AAEEB7A9EC496CF16FB690A
Certificate serial:       08C74756F0C455585DBF304D4F2677762FC5BFAB
Authority key identifier: C0:B2:D6:68:8B:C1:A8:5B:2A:AE:EB:7A:9E:C4:96:CF:16:FB:69:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0B2D6688BC1A85B2AAEEB7A9EC496CF16FB690A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/1/34352e372e3134382e302f32322d3234203d3e20323636353836.roa
Signing time:             Mon 30 Jan 2023 12:26:16 +0000
ROA not before:           Mon 30 Jan 2023 12:21:16 +0000
ROA not after:            Mon 29 Jan 2024 12:26:16 +0000
asID:                     266586
IP address blocks:        45.7.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c7:47:56:f0:c4:55:58:5d:bf:30:4d:4f:26:77:76:2f:c5:bf:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0B2D6688BC1A85B2AAEEB7A9EC496CF16FB690A
        Validity
            Not Before: Jan 30 12:21:16 2023 GMT
            Not After : Jan 29 12:26:16 2024 GMT
        Subject: CN=5B880238DF70E90F5AE9A80165758D6AD8D75601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:8b:70:3d:e0:f8:62:7d:b7:56:e2:0e:0b:
                    3a:80:58:13:fe:c8:84:1b:c9:35:6b:88:8b:98:3b:
                    2c:35:d4:40:77:6a:bf:dd:73:b6:1e:6d:2b:d0:ec:
                    0f:d4:e9:1d:f3:35:ea:69:a6:7d:b7:d3:90:80:34:
                    9c:c5:1e:f9:28:ec:34:77:6b:9c:33:3f:b2:52:83:
                    d7:d8:87:4a:fc:c6:85:41:fa:75:be:e5:d6:8e:a0:
                    fc:6e:83:ae:67:c2:62:37:7f:2e:74:36:2a:84:e2:
                    d6:02:55:9c:23:fa:b1:11:b1:1f:e3:5d:15:9d:ea:
                    f5:48:1d:6c:97:be:cd:3c:bc:d0:44:2b:c2:56:80:
                    f3:54:f0:b7:26:80:d0:0a:f2:25:d2:e7:56:03:45:
                    2d:e6:83:d1:57:6e:cd:a9:ee:b9:60:cd:17:de:ff:
                    1c:7a:e6:fe:2b:9f:79:0a:0d:07:87:9d:93:f1:7d:
                    7d:4a:2c:77:87:e4:bd:64:91:c4:05:e3:46:85:70:
                    4a:89:0e:19:69:93:b5:fb:aa:1a:10:30:c9:56:1a:
                    41:62:0b:e6:ec:ec:f8:e0:ae:ca:60:ca:6b:4c:76:
                    6f:07:fb:8c:17:a3:ab:c1:7c:72:bb:f3:ef:d5:4b:
                    20:31:e4:7c:af:07:f1:33:d7:32:76:5c:17:16:88:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:88:02:38:DF:70:E9:0F:5A:E9:A8:01:65:75:8D:6A:D8:D7:56:01
            X509v3 Authority Key Identifier:
                keyid:C0:B2:D6:68:8B:C1:A8:5B:2A:AE:EB:7A:9E:C4:96:CF:16:FB:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/1/C0B2D6688BC1A85B2AAEEB7A9EC496CF16FB690A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0B2D6688BC1A85B2AAEEB7A9EC496CF16FB690A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/1/34352e372e3134382e302f32322d3234203d3e20323636353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:3d:b3:79:3b:2b:4e:b8:69:85:d0:f6:f6:b0:26:91:a7:
         7e:16:ea:0a:24:5e:8f:34:54:93:59:af:b4:4f:a6:90:e2:73:
         ef:69:50:58:02:95:27:03:91:25:e8:e2:81:d8:87:7a:6a:3d:
         c6:a1:98:2c:ed:f3:aa:c2:16:00:8c:77:24:33:d2:70:47:f9:
         4e:fc:40:4d:1f:e4:19:de:b0:d9:51:f9:29:52:d2:d9:e2:bb:
         d1:c6:ac:13:d5:f9:69:15:1d:8d:18:f6:71:8e:e9:00:d0:33:
         15:5d:b6:a7:8a:49:73:d7:50:8f:22:7c:1c:ef:36:28:4b:80:
         a9:00:14:44:1c:91:7c:e6:6f:fe:06:b8:3d:87:7f:c0:b4:6d:
         0f:be:e9:d3:ac:64:b4:0c:ba:14:bf:53:de:16:8a:9d:cb:3d:
         0b:66:a4:5d:74:78:ee:a5:be:5d:f5:19:e5:48:da:47:b0:f8:
         ca:ea:87:15:35:a9:e0:80:26:60:d0:d2:c1:7f:fd:15:25:c0:
         8e:9d:e7:92:5a:ee:71:01:e6:b6:3c:40:30:09:c3:78:70:ee:
         34:27:1d:a7:fc:4e:0d:92:0b:68:52:3a:dc:4f:2f:86:4d:27:
         a7:64:e6:b1:dc:3b:50:1c:53:b9:02:0c:69:5f:a7:d7:9f:b8:
         98:48:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org