Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa
File:                     34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa (raw, json)
Hash identifier:          jUfcrkoV0O9mPATmZ1Oh2jL9IbbdJa8wIErqDAcH9po=
Subject key identifier:   6E:53:2F:05:7B:00:CE:90:DE:60:0B:49:B9:9A:E3:39:DF:41:81:FA
Certificate issuer:       /CN=C5AD5C7C55718BD3536091127969815277D3DE7F
Certificate serial:       36F354730EBB040EB74DB36ED154609EC1CF5D56
Authority key identifier: C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa
Signing time:             Wed 17 May 2023 14:18:33 +0000
ROA not before:           Wed 17 May 2023 14:13:33 +0000
ROA not after:            Wed 15 May 2024 14:18:33 +0000
asID:                     268269
IP address blocks:        45.237.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f3:54:73:0e:bb:04:0e:b7:4d:b3:6e:d1:54:60:9e:c1:cf:5d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AD5C7C55718BD3536091127969815277D3DE7F
        Validity
            Not Before: May 17 14:13:33 2023 GMT
            Not After : May 15 14:18:33 2024 GMT
        Subject: CN=6E532F057B00CE90DE600B49B99AE339DF4181FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:e6:6a:19:c5:8f:50:07:44:4b:d3:0f:8a:
                    5c:8d:c2:1a:9f:c1:d0:41:91:43:31:d9:a6:a8:25:
                    a1:c2:53:56:11:cf:19:79:f9:4d:09:c2:e3:d4:bf:
                    48:04:02:e6:e4:1a:90:a3:ec:7d:a3:71:4f:f2:8d:
                    43:d4:db:ce:b1:b8:8e:6b:7b:0d:ad:72:ff:85:6b:
                    07:3b:72:12:34:8b:0e:e6:27:1c:0b:cb:06:ec:4c:
                    58:ff:ef:44:b7:39:11:de:05:25:d6:a2:5a:4d:c5:
                    dd:10:33:3f:48:1c:a7:0d:12:50:69:a5:47:d9:d3:
                    a4:54:92:4e:53:55:13:08:ff:5a:40:2c:c8:8d:68:
                    74:4f:bb:14:83:be:15:f6:75:c6:86:c2:16:e8:9d:
                    78:1e:d9:76:7e:65:60:dc:f9:db:30:75:8f:05:af:
                    30:f7:cb:af:a1:17:1c:0b:88:21:b3:9b:89:7b:3b:
                    98:9f:60:9c:08:52:42:50:bb:14:c6:64:26:88:db:
                    05:3b:21:28:8c:46:3e:f7:c2:37:f6:fa:19:f4:e2:
                    45:5d:6d:7f:be:a8:1c:cb:88:16:8a:7e:97:ba:ac:
                    93:cf:ec:66:b3:8e:db:89:5f:38:00:0b:24:11:2d:
                    24:42:79:7a:3e:69:25:49:3d:2c:d3:a7:39:29:67:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:53:2F:05:7B:00:CE:90:DE:60:0B:49:B9:9A:E3:39:DF:41:81:FA
            X509v3 Authority Key Identifier:
                keyid:C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/C5AD5C7C55718BD3536091127969815277D3DE7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:cc:84:ff:a7:c2:01:1f:2a:b8:0a:85:b4:bc:7a:f1:36:
         3d:0b:82:51:b4:12:aa:50:50:45:42:09:4f:4f:2b:bd:e0:b7:
         58:eb:81:f1:f9:d6:4e:c2:9d:b0:e3:64:80:47:41:74:b7:fa:
         20:ca:55:c2:bc:a7:6f:f2:a9:19:94:bd:77:4d:70:a4:45:99:
         cb:66:41:9c:cf:76:dc:5a:99:c1:5d:c7:22:f1:66:4a:b2:1b:
         4b:52:f1:6c:b5:ec:14:38:d3:25:0d:19:50:84:29:0e:50:07:
         9f:2a:43:8d:9e:f6:71:10:6f:71:5e:99:69:59:80:ca:3f:9e:
         ff:2d:e4:31:af:8f:cb:9c:d3:30:cc:2c:b5:df:9d:01:98:18:
         ff:7d:4d:85:ef:c9:3a:e1:fc:03:66:2d:53:26:16:94:c8:08:
         e1:e0:1e:72:40:02:88:ab:2a:a9:4c:7c:ca:49:bb:ff:cb:f2:
         0f:5b:4b:ea:3d:f1:1f:8d:8f:e5:bc:ed:eb:94:33:2e:c9:4b:
         cf:b3:a8:46:a7:5d:a4:b1:2f:84:50:76:1e:25:b2:aa:a3:1b:
         5b:f6:48:cc:fa:0d:48:52:a4:7e:f5:cb:03:19:04:b3:09:67:
         d3:c0:4e:4d:72:f7:e2:09:7b:76:f9:a6:8f:a3:d4:0a:b2:f6:
         66:1e:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org