Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa
File:                     34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa (raw, json)
Hash identifier:          5EpDpSvoAKTwteBFWm0mAh/3QYh7I1RcwdJgF2sWFFk=
Subject key identifier:   EE:C9:E3:3C:5C:63:20:DA:E9:1E:F3:17:BA:52:E2:3C:13:09:64:8A
Certificate issuer:       /CN=090143127CBEDB52EA1848A31952B3D95EA9647C
Certificate serial:       3BC9A43A6E15CB7BC97566C9BB8159A9AF6897A1
Authority key identifier: 09:01:43:12:7C:BE:DB:52:EA:18:48:A3:19:52:B3:D9:5E:A9:64:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/090143127CBEDB52EA1848A31952B3D95EA9647C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa
Signing time:             Mon 12 Feb 2024 15:54:59 +0000
ROA not before:           Mon 12 Feb 2024 15:49:59 +0000
ROA not after:            Mon 10 Feb 2025 15:54:59 +0000
asID:                     268901
IP address blocks:        45.175.108.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c9:a4:3a:6e:15:cb:7b:c9:75:66:c9:bb:81:59:a9:af:68:97:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090143127CBEDB52EA1848A31952B3D95EA9647C
        Validity
            Not Before: Feb 12 15:49:59 2024 GMT
            Not After : Feb 10 15:54:59 2025 GMT
        Subject: CN=EEC9E33C5C6320DAE91EF317BA52E23C1309648A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:3e:4c:f6:aa:1a:e0:19:3a:41:09:d7:47:
                    c8:24:45:66:e6:a7:c8:25:3d:b3:f5:fa:7e:35:bc:
                    90:a9:99:58:5e:36:8a:14:4d:e8:fd:02:42:bb:82:
                    cd:f6:91:a8:c6:8a:8b:85:e6:10:df:85:71:d1:49:
                    4b:fa:5a:01:35:12:f3:10:5d:80:7e:e5:13:51:16:
                    da:ac:a2:09:a4:e5:c3:43:29:ec:64:99:79:34:f0:
                    d9:7f:56:d7:0f:2a:08:aa:fd:6d:24:82:a5:75:69:
                    35:d2:4a:b9:02:65:45:ef:6b:ec:47:38:55:1d:78:
                    eb:cf:66:1d:cf:7a:75:2c:b8:d0:3a:42:b3:8f:1b:
                    86:38:3f:2d:89:e6:b3:72:08:b5:5c:eb:af:af:d4:
                    65:05:00:a1:ff:9a:a0:77:ce:ba:1b:81:80:fe:f6:
                    ba:a2:c8:2a:53:db:44:ca:03:06:0c:65:e2:72:0b:
                    54:b9:3c:ad:0b:e5:c8:7d:15:b1:47:8e:33:62:04:
                    a1:ec:63:fa:e5:91:ed:2f:ea:01:85:66:44:8a:a6:
                    6e:dc:49:e5:c9:fb:7f:2a:e8:e2:7d:13:a4:9b:0a:
                    9b:d2:6b:3c:02:fb:a1:46:04:83:65:0a:fd:e6:81:
                    3c:6f:24:bd:d0:68:bb:3a:b6:ae:85:7e:29:f6:4a:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C9:E3:3C:5C:63:20:DA:E9:1E:F3:17:BA:52:E2:3C:13:09:64:8A
            X509v3 Authority Key Identifier:
                keyid:09:01:43:12:7C:BE:DB:52:EA:18:48:A3:19:52:B3:D9:5E:A9:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/090143127CBEDB52EA1848A31952B3D95EA9647C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/090143127CBEDB52EA1848A31952B3D95EA9647C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:38:85:ca:f8:ed:0d:7c:59:28:95:7c:6d:35:2d:ff:8b:
         65:a1:6b:2c:ce:71:5c:4a:ce:c4:f7:a4:09:ca:48:01:b0:c0:
         26:c8:ef:63:8f:05:4d:cb:d6:9c:e8:43:08:93:3c:d2:4a:09:
         53:90:0a:4f:e0:22:cc:1d:9a:d3:d6:a9:87:3a:17:ca:f9:c5:
         51:b7:b6:10:7d:9a:02:fe:c4:7c:75:3f:6e:6c:3a:c2:29:52:
         e9:75:f5:ed:45:f0:59:e8:3e:1c:5f:98:82:ef:d0:a6:8c:4d:
         e2:7b:5b:b7:f4:29:76:f6:cc:2c:c6:de:ec:ba:3d:64:4d:cd:
         96:3e:c6:36:76:c9:c7:79:5b:6b:7f:f0:60:77:8a:3b:f1:f9:
         aa:05:50:38:bc:00:35:76:0e:ba:b2:a7:d4:c9:57:ba:b1:6c:
         df:2c:6a:d2:0a:42:0e:5a:f3:9c:22:78:12:73:db:a1:8d:01:
         e9:77:37:6b:2a:0e:07:51:a4:f5:66:9e:26:11:d7:27:1b:b5:
         df:15:5e:09:4a:f0:3d:e3:c5:88:4f:9c:0a:a9:07:05:51:31:
         e2:40:b8:95:34:9e:74:6e:ee:fb:12:f6:21:74:43:34:1e:0c:
         be:36:2b:cc:93:88:a6:d3:25:11:06:93:b1:ff:fb:49:b5:1f:
         8f:f2:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org