Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130302e302f32332d3233203d3e20323638323639.roa
File:                     34352e3233372e3130302e302f32332d3233203d3e20323638323639.roa (raw, json)
Hash identifier:          x69ULMQBs1qYhKiu1DH1p9S47Lf8nFpVEciRwhNwmzk=
Subject key identifier:   34:84:6F:40:AC:69:0B:7E:74:7A:3C:41:B7:AB:90:2B:CA:F8:76:14
Certificate issuer:       /CN=C5AD5C7C55718BD3536091127969815277D3DE7F
Certificate serial:       2EE89285D1EC29090A538D6185391261EAEB3285
Authority key identifier: C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130302e302f32332d3233203d3e20323638323639.roa
Signing time:             Mon 15 May 2023 20:52:04 +0000
ROA not before:           Mon 15 May 2023 20:47:04 +0000
ROA not after:            Mon 13 May 2024 20:52:04 +0000
asID:                     268269
IP address blocks:        45.237.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e8:92:85:d1:ec:29:09:0a:53:8d:61:85:39:12:61:ea:eb:32:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AD5C7C55718BD3536091127969815277D3DE7F
        Validity
            Not Before: May 15 20:47:04 2023 GMT
            Not After : May 13 20:52:04 2024 GMT
        Subject: CN=34846F40AC690B7E747A3C41B7AB902BCAF87614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:99:02:00:5d:4c:39:5e:03:c9:2b:1c:2d:
                    db:b5:83:fb:ec:76:af:26:d6:66:25:90:05:44:55:
                    49:84:c2:97:dd:de:d9:10:40:66:4b:14:44:47:9d:
                    8c:bc:bc:94:6a:5b:83:68:3e:32:32:45:4f:84:d1:
                    e2:38:1a:5a:a5:29:7d:9b:f1:b5:7a:fb:80:2e:19:
                    4d:30:36:6f:83:66:85:7b:65:45:99:2a:cc:b9:7f:
                    c3:80:b6:f5:f1:f0:85:a8:18:fd:d5:2f:71:de:6e:
                    51:86:7f:5b:f3:e3:a2:23:1a:e1:f6:d6:69:c4:9d:
                    7b:1f:13:d4:2c:20:27:97:50:70:5f:88:41:2e:fe:
                    6a:39:ac:b5:21:4f:53:6b:b8:30:aa:75:57:b2:c3:
                    bf:3f:04:88:63:41:c9:95:7f:1e:b1:d3:cd:e5:d5:
                    12:84:a6:8c:70:b2:24:b0:d5:9c:72:40:45:f1:09:
                    c6:78:0d:ca:d5:a0:f1:e3:e3:57:1b:5e:65:41:98:
                    18:4f:2a:4a:09:bc:22:4a:4a:83:2f:15:db:51:3b:
                    22:18:01:33:0a:4e:df:3b:db:fc:57:75:61:7c:9b:
                    47:13:93:88:fb:97:04:01:14:ee:19:c0:7f:c7:d2:
                    63:b8:28:b0:a5:19:bb:b9:64:58:fb:e5:51:fe:13:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:84:6F:40:AC:69:0B:7E:74:7A:3C:41:B7:AB:90:2B:CA:F8:76:14
            X509v3 Authority Key Identifier:
                keyid:C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/C5AD5C7C55718BD3536091127969815277D3DE7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130302e302f32332d3233203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:50:6c:ac:6b:29:7f:0c:ef:bc:d1:a2:27:51:9b:30:bd:e6:
         a2:b0:85:3e:dd:67:cc:c1:b2:40:c1:2b:de:e4:24:ad:15:0b:
         6c:12:0a:9b:1c:49:fd:57:dc:49:80:60:23:82:6d:48:0c:ab:
         b1:e9:4a:06:8b:65:cc:77:e5:fd:01:c6:8f:d7:49:72:c6:53:
         c8:6b:0b:4f:88:96:a0:df:7b:f8:42:04:5f:7c:e4:c8:24:5c:
         27:19:e4:2f:a8:d2:ea:75:60:8c:fe:10:28:99:4b:d3:ff:90:
         cc:48:2e:0b:8b:3d:47:de:92:52:0c:9a:81:79:ed:93:ae:1f:
         45:bd:34:54:39:21:77:ab:99:d3:87:ab:c9:93:39:94:9c:47:
         14:2c:96:04:4c:ab:28:84:8f:6a:50:5f:ee:eb:e7:74:0c:d7:
         84:14:94:ef:1c:f5:a7:80:22:2c:9c:1e:c2:ce:36:bf:60:10:
         72:07:9f:73:52:b1:d1:ce:80:85:7a:b3:01:92:0a:b8:8f:5b:
         b0:3a:7a:af:b2:ad:02:5e:0e:5c:8f:ec:a7:d7:d5:13:d4:ab:
         64:08:39:23:cb:38:8b:ff:8b:62:15:fe:2d:4c:0c:24:e0:89:
         1d:be:53:2a:ac:db:cd:1a:0e:b5:fe:4e:fb:d7:0c:a5:aa:74:
         a8:eb:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org