Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa
File:                     34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa (raw, json)
Hash identifier:          jxbfOFRWjQm9qEC5ZllX5ZkhkwE1np+YLlVpSwS9Zio=
Subject key identifier:   CD:D8:6D:A1:26:0A:65:00:AE:3A:8C:55:34:5B:E4:E7:B6:8E:59:AE
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       4816D41FAF7D46F7247B5160CF7D02C35BE5B470
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa
Signing time:             Wed 17 May 2023 16:48:07 +0000
ROA not before:           Wed 17 May 2023 16:43:07 +0000
ROA not after:            Wed 15 May 2024 16:48:07 +0000
asID:                     267328
IP address blocks:        45.233.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:16:d4:1f:af:7d:46:f7:24:7b:51:60:cf:7d:02:c3:5b:e5:b4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: May 17 16:43:07 2023 GMT
            Not After : May 15 16:48:07 2024 GMT
        Subject: CN=CDD86DA1260A6500AE3A8C55345BE4E7B68E59AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:18:bc:a3:ea:b7:7f:ff:a8:1b:38:d1:54:
                    1e:7b:52:d7:39:7e:d3:f4:ef:a5:22:3a:af:c5:90:
                    36:4e:25:64:5c:c5:1d:0a:c0:52:62:dd:68:51:a7:
                    89:ae:0c:3d:d0:5c:88:21:9d:90:e3:ef:ba:a2:5f:
                    90:ef:14:d9:60:44:e0:f6:38:04:7f:28:eb:a3:64:
                    d2:fb:f3:a5:e7:30:ba:79:08:52:91:1d:68:88:f0:
                    5d:e0:35:45:ca:3c:26:b5:c4:c3:4e:57:1f:60:d8:
                    6b:77:50:80:7c:a4:b5:fc:13:e6:34:e5:c8:93:54:
                    f8:2c:0e:57:0f:40:af:da:94:e3:13:0e:f9:16:32:
                    0d:08:82:08:08:71:a7:64:e6:b7:29:32:3e:50:37:
                    7e:d1:43:5e:38:28:1d:0b:b2:76:1c:fe:ec:5c:8b:
                    fb:5e:06:ab:08:a7:e0:0b:e5:ef:6a:d9:a0:2c:1d:
                    9a:c3:e8:48:11:2e:2a:6c:2d:4b:b6:ce:de:17:2e:
                    c4:2f:8e:4e:a8:54:37:cd:e6:eb:90:9c:38:b2:5c:
                    6e:d5:8a:8f:c5:ae:62:6c:53:10:e7:4c:1a:27:29:
                    25:f0:18:ba:21:54:67:b4:74:0c:ac:da:7c:f3:b0:
                    47:ac:36:62:28:23:45:53:82:6f:0d:58:3d:90:72:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:6D:A1:26:0A:65:00:AE:3A:8C:55:34:5B:E4:E7:B6:8E:59:AE
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:bd:fc:cb:e3:23:55:77:06:a9:e0:73:59:03:a5:60:8e:55:
         f5:34:3a:16:3b:14:e5:c8:eb:2b:94:3f:b4:e9:f4:e9:5d:0c:
         af:ce:b6:62:e9:44:a3:c5:b0:3a:6e:04:95:22:c8:9b:c4:65:
         99:51:e9:40:e1:3d:71:d7:13:cf:2b:21:d7:cc:8c:bc:fa:dc:
         3d:2b:d1:f0:3c:08:77:91:09:58:59:ef:0f:32:56:6d:3e:4a:
         65:05:cc:79:b4:17:c2:5d:9e:48:59:c2:ab:8c:03:44:ef:7b:
         c1:3c:2c:39:7f:9f:16:ea:29:c1:68:dc:89:0d:38:7a:31:b5:
         9d:2b:c6:1a:ce:74:49:3e:4e:ff:12:e4:8b:5e:62:cd:50:c9:
         34:44:3d:6a:d4:53:d7:62:91:a9:72:73:5a:bd:e7:16:a4:85:
         57:77:f5:f9:00:d3:6e:61:62:04:92:bb:95:cb:16:dc:65:0e:
         f9:3f:de:a9:fe:fd:4e:29:0a:0c:11:b7:e8:80:23:6c:e5:f5:
         6c:b0:ce:1d:a6:d1:54:20:16:21:de:06:b2:ab:43:19:93:9a:
         ee:6c:49:73:c5:3f:09:b0:6a:2d:e9:00:27:14:22:8d:92:19:
         95:07:e7:d0:79:87:c9:8c:f5:5b:77:09:1d:07:79:ec:a7:a0:
         72:18:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org