Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32332d3233203d3e20323638333630.roa
File:                     34352e3233382e3230302e302f32332d3233203d3e20323638333630.roa (raw, json)
Hash identifier:          1hHTkEKaQW3TxsXqd/NJkppvhvzW+lwdqlleize27VM=
Subject key identifier:   A0:A9:83:2C:38:D2:0F:E9:9B:DA:2A:DC:EA:BF:B8:46:1D:5A:B3:F3
Certificate issuer:       /CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
Certificate serial:       5D6B9B809BDB275668D05789FB0F30A55C0772C0
Authority key identifier: 8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32332d3233203d3e20323638333630.roa
Signing time:             Mon 23 Oct 2023 21:30:35 +0000
ROA not before:           Mon 23 Oct 2023 21:25:35 +0000
ROA not after:            Mon 21 Oct 2024 21:30:35 +0000
asID:                     268360
IP address blocks:        45.238.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6b:9b:80:9b:db:27:56:68:d0:57:89:fb:0f:30:a5:5c:07:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
        Validity
            Not Before: Oct 23 21:25:35 2023 GMT
            Not After : Oct 21 21:30:35 2024 GMT
        Subject: CN=A0A9832C38D20FE99BDA2ADCEABFB8461D5AB3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:80:8e:ee:9b:d0:b8:bc:b8:b4:27:3f:af:
                    ee:31:77:2a:5f:4d:b7:95:2d:b9:af:79:72:5e:cd:
                    d8:c1:6f:2a:ea:f0:f9:9f:a5:45:73:55:50:c8:06:
                    54:5c:79:77:4d:91:6e:d8:8a:5c:46:85:a0:ba:f7:
                    55:85:48:7d:7c:81:35:50:ba:34:c6:5d:18:7c:53:
                    88:f2:d8:23:2f:44:e8:c1:85:b7:c4:16:c5:b3:d4:
                    02:d3:78:f1:b1:c6:5f:97:92:83:d2:9c:f6:e3:d2:
                    02:57:55:26:e6:f5:92:12:40:c6:60:e3:eb:a6:8c:
                    9d:ed:5d:fd:62:01:70:d2:2e:46:b6:68:0f:8d:5e:
                    72:cc:49:1a:93:4d:8c:75:ce:1c:92:b4:9c:5f:3c:
                    6e:26:ac:48:0e:2f:c3:fb:5d:a9:4e:18:17:f6:e2:
                    f2:ee:f2:dc:38:b1:d9:1a:db:30:0b:94:6f:fe:f8:
                    22:5d:61:de:38:f3:e6:dd:58:0a:94:2d:de:34:73:
                    e6:95:38:1e:e3:d5:fe:10:7a:37:73:c4:51:81:98:
                    9a:6d:18:04:10:4b:51:85:e4:4b:95:a9:73:ff:92:
                    19:2d:02:c2:02:cc:ea:22:c0:26:a0:b8:63:8d:a3:
                    bc:52:7f:ad:39:a6:b4:26:ea:81:8e:54:86:27:7e:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A9:83:2C:38:D2:0F:E9:9B:DA:2A:DC:EA:BF:B8:46:1D:5A:B3:F3
            X509v3 Authority Key Identifier:
                keyid:8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32332d3233203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:56:25:fe:34:cf:12:8d:4e:a4:c8:59:34:41:74:3a:0e:30:
         64:a2:0f:8d:75:02:3a:3b:3d:c7:e6:ed:3d:98:ad:a2:09:61:
         e1:9c:8c:4d:83:9b:f8:57:d8:44:f0:9c:d5:08:09:75:18:9a:
         06:a7:a8:a7:ee:07:21:05:4e:00:aa:9e:28:59:c1:00:f9:dc:
         69:6a:b6:52:f5:5d:2c:9a:87:22:f9:68:12:13:01:c9:35:42:
         2f:6a:e9:6a:98:73:dd:d6:6b:e0:92:06:18:86:ef:33:7b:19:
         2c:5a:d9:01:92:5c:8d:9f:5c:35:c4:83:e3:f9:02:cc:7d:7f:
         23:f9:96:4c:35:0c:a3:ca:8b:51:9b:75:67:cb:2f:c6:2b:0c:
         ca:2a:0c:b6:c4:ef:f7:77:24:fc:4a:6a:05:8a:b2:02:5d:e7:
         43:6d:65:10:ee:c3:ba:18:88:d6:4a:bd:82:2c:bb:23:2e:04:
         21:da:de:df:ef:8a:f2:04:65:80:3e:05:65:4e:cd:a7:e8:c6:
         68:56:73:e5:fd:2c:c8:bb:b0:0c:87:9d:37:3d:d2:f2:fd:a0:
         8d:a3:a8:83:0c:c2:aa:01:b7:a8:60:54:9e:d7:a1:13:fa:14:
         74:54:bc:97:1e:90:ef:55:dc:1f:6f:87:3e:f7:28:b5:6c:45:
         af:5e:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org