Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa
File:                     34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa (raw, json)
Hash identifier:          q+ce7M/p0m9xaYEnvMfWM8Q4MFhdQcRBAYlOWdV5YtA=
Subject key identifier:   70:9E:E1:8E:F2:1D:F3:B0:1D:D3:92:F4:F3:65:4F:C8:0B:A7:A8:38
Certificate issuer:       /CN=C5AD5C7C55718BD3536091127969815277D3DE7F
Certificate serial:       58AE34B1FFB9BCE8656523E58C64CE9B27754FC5
Authority key identifier: C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa
Signing time:             Mon 15 May 2023 20:52:07 +0000
ROA not before:           Mon 15 May 2023 20:47:07 +0000
ROA not after:            Mon 13 May 2024 20:52:07 +0000
asID:                     268269
IP address blocks:        45.237.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ae:34:b1:ff:b9:bc:e8:65:65:23:e5:8c:64:ce:9b:27:75:4f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AD5C7C55718BD3536091127969815277D3DE7F
        Validity
            Not Before: May 15 20:47:07 2023 GMT
            Not After : May 13 20:52:07 2024 GMT
        Subject: CN=709EE18EF21DF3B01DD392F4F3654FC80BA7A838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:40:f9:8b:c6:b6:83:33:e8:b4:53:a8:8d:
                    83:fa:7f:15:6b:25:38:04:7a:41:96:d6:1c:e0:2a:
                    d3:4a:65:08:37:f8:85:0c:49:50:ce:d9:3f:c8:fa:
                    2d:7e:aa:a6:10:c4:53:98:82:b9:bf:2e:2d:75:54:
                    f7:78:d9:91:0f:77:29:d0:a7:50:a1:59:bd:2e:a1:
                    39:c5:ed:e1:31:b3:e2:b6:2b:79:c6:4c:b3:8b:6c:
                    49:24:92:71:9e:71:13:20:4d:f7:c2:00:d6:45:f8:
                    87:69:7b:41:2e:cc:55:93:24:3c:76:89:78:20:43:
                    af:8f:40:62:72:1c:e9:d0:65:be:e8:eb:a0:9c:8f:
                    04:8b:a7:1a:39:a6:72:a8:93:eb:cb:92:76:db:b1:
                    97:96:24:dd:c6:2c:22:66:ea:74:df:c4:07:d7:ab:
                    3e:a9:d6:47:d7:20:b3:2f:04:f1:9a:cf:d4:7d:c3:
                    9f:ef:66:14:70:ab:9b:e7:b0:6c:55:8c:77:fa:e4:
                    1f:84:b0:f1:c1:4d:a0:95:1c:6e:72:72:85:c4:2d:
                    c4:7b:e1:b0:5a:47:5c:eb:ae:9b:7c:ff:c0:34:c9:
                    71:58:a1:00:5f:d4:36:04:cd:07:0c:2f:ea:69:82:
                    50:6c:a3:93:e7:ae:06:34:8b:6f:1d:5e:06:03:e0:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9E:E1:8E:F2:1D:F3:B0:1D:D3:92:F4:F3:65:4F:C8:0B:A7:A8:38
            X509v3 Authority Key Identifier:
                keyid:C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/C5AD5C7C55718BD3536091127969815277D3DE7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:6e:8d:ba:0a:e5:5b:f5:21:76:93:2b:6c:d5:d8:ee:d4:
         81:bd:9d:f4:ca:12:c5:17:52:f0:6e:bd:b2:32:01:34:de:61:
         4e:32:28:9e:a9:c4:e2:d3:8e:84:df:c4:62:9c:f2:ff:00:a4:
         c7:95:9b:72:a4:95:b9:80:85:f3:5c:4d:39:11:f1:ec:7f:cf:
         c8:6a:17:5a:df:b5:89:2c:64:44:f3:cc:9f:48:8c:a6:00:c9:
         02:08:4e:b5:0a:aa:ae:3b:c9:a7:73:f3:c2:27:2f:08:29:62:
         0b:8e:e8:4a:cf:53:0b:f7:a5:73:a7:7b:e9:50:af:7f:2c:d1:
         fa:62:90:d7:b0:ee:8d:17:67:d7:e2:a4:e2:be:9e:78:49:81:
         e1:92:d1:27:ec:2a:57:1b:e7:6f:70:50:6a:93:68:7b:11:b0:
         5b:cf:26:ef:c0:41:6b:96:da:4b:66:5c:29:2b:be:d2:e9:88:
         cb:72:b0:26:6f:bd:9d:49:4d:78:f8:a6:e7:e4:1d:a2:f4:93:
         f9:44:45:0b:ff:f3:18:ab:bd:b3:37:3c:5a:f2:f3:d7:f6:ed:
         ca:9c:95:92:21:70:20:f7:ef:7f:2a:5e:05:32:de:30:3c:7c:
         dc:7a:82:d7:0b:66:bd:9d:45:c0:40:a6:4a:e0:93:ad:ec:ce:
         9c:56:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org