Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa
File:                     34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (raw, json)
Hash identifier:          oTu0KTK7HV0F6M7DNH8qdWirCUR1yloT7RCVakVK3s8=
Subject key identifier:   AB:B7:B0:0E:7F:E1:94:C9:00:CD:CA:57:89:38:DD:DF:2F:9A:64:63
Certificate issuer:       /CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
Certificate serial:       5A55A498380092FB21E26993628557ABF0B64270
Authority key identifier: EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa
Signing time:             Thu 29 Jun 2023 20:00:00 +0000
ROA not before:           Thu 29 Jun 2023 19:55:00 +0000
ROA not after:            Thu 27 Jun 2024 20:00:00 +0000
asID:                     267121
IP address blocks:        45.229.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:55:a4:98:38:00:92:fb:21:e2:69:93:62:85:57:ab:f0:b6:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Validity
            Not Before: Jun 29 19:55:00 2023 GMT
            Not After : Jun 27 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100C42BCC72FE2B39E6170685C29111708A9C90FB7FC99B87790A5B8BE9CCDB057EAB528FB84FE729C2C658D91CBEB01157F186E40BC6FE9E5A550D817ABD9BE0DCEFE15DD65CAE2FC959581D1C18B1FCC9BEF0A5422BD0C0F934F7BC20EEC5AD069D9F4A6F823AC662F019FF511907C446BD9444C7FC9ED4CF4E5BAA0C2F8D48D159C97BA0055B4283E4627A8AA64526D284A12EB92FB450216276D9C0BCFE264A91E80A0E3BA37843452D10D26879EFC12E4F81E1A7329A780AB6B07F1D33705A9CE390E9CAF90F4F43440E280C8EEBCD56D598BD8FB3AAEDEE8F76FD3F3ED045908A67048FE123A1955C26ED9DCEE4589A1D33A45DF78BD890BDCB3A254AB3970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:cc:72:fe:2b:39:e6:17:06:85:c2:91:11:
                    70:8a:9c:90:fb:7f:c9:9b:87:79:0a:5b:8b:e9:cc:
                    db:05:7e:ab:52:8f:b8:4f:e7:29:c2:c6:58:d9:1c:
                    be:b0:11:57:f1:86:e4:0b:c6:fe:9e:5a:55:0d:81:
                    7a:bd:9b:e0:dc:ef:e1:5d:d6:5c:ae:2f:c9:59:58:
                    1d:1c:18:b1:fc:c9:be:f0:a5:42:2b:d0:c0:f9:34:
                    f7:bc:20:ee:c5:ad:06:9d:9f:4a:6f:82:3a:c6:62:
                    f0:19:ff:51:19:07:c4:46:bd:94:44:c7:fc:9e:d4:
                    cf:4e:5b:aa:0c:2f:8d:48:d1:59:c9:7b:a0:05:5b:
                    42:83:e4:62:7a:8a:a6:45:26:d2:84:a1:2e:b9:2f:
                    b4:50:21:62:76:d9:c0:bc:fe:26:4a:91:e8:0a:0e:
                    3b:a3:78:43:45:2d:10:d2:68:79:ef:c1:2e:4f:81:
                    e1:a7:32:9a:78:0a:b6:b0:7f:1d:33:70:5a:9c:e3:
                    90:e9:ca:f9:0f:4f:43:44:0e:28:0c:8e:eb:cd:56:
                    d5:98:bd:8f:b3:aa:ed:ee:8f:76:fd:3f:3e:d0:45:
                    90:8a:67:04:8f:e1:23:a1:95:5c:26:ed:9d:ce:e4:
                    58:9a:1d:33:a4:5d:f7:8b:d8:90:bd:cb:3a:25:4a:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B7:B0:0E:7F:E1:94:C9:00:CD:CA:57:89:38:DD:DF:2F:9A:64:63
            X509v3 Authority Key Identifier:
                keyid:EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:1a:1e:8e:db:16:77:9b:40:b2:c4:96:93:0d:74:6d:6c:8d:
         35:8e:34:a8:a2:92:bb:fc:08:de:4e:9c:1b:86:07:95:35:ef:
         55:f4:de:45:cd:52:db:0b:ea:de:64:c8:5a:ee:b4:b4:24:f2:
         4f:d7:2b:bf:6e:61:ab:e9:03:3f:34:90:90:3f:ed:7b:eb:04:
         6c:31:eb:05:fc:18:b6:31:9c:14:ed:64:70:9d:f7:a8:08:47:
         22:78:7f:8b:d9:e6:0a:9c:a2:91:b0:53:f9:8f:a5:e1:f3:a1:
         fa:65:16:77:24:db:3d:69:91:a4:e6:01:32:64:37:a1:c8:6f:
         01:8c:17:c2:75:ff:a7:f3:4b:d0:ac:a5:47:6b:e0:71:f6:92:
         10:f7:e0:bc:8a:60:2b:b3:87:92:bb:c8:dd:54:8b:5e:ec:c2:
         cc:7c:4f:41:e7:dc:5e:39:aa:44:8b:d3:88:fb:9e:e0:8a:4a:
         84:70:40:6b:38:3b:81:e2:65:fe:d8:d0:4e:44:13:01:f9:bc:
         55:0c:f5:73:59:87:a2:d6:df:02:4a:e7:9c:91:c4:96:97:7e:
         b4:00:72:ab:65:6f:9c:92:4f:55:84:87:e8:69:18:46:a3:ab:
         f7:cf:73:55:95:9f:23:24:5a:cd:36:14:1d:34:d2:21:10:60:
         ac:71:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org