Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32332d3233203d3e20323638303237.roa
File:                     34352e3136382e33362e302f32332d3233203d3e20323638303237.roa (raw, json)
Hash identifier:          08EpSPS07wEBSGzC0/ocjZXmWiOk9UT0ehbcA5Kt2Ec=
Subject key identifier:   F5:47:1A:9D:E0:60:48:BF:6A:CD:1C:D6:50:7F:16:58:A4:85:64:4E
Certificate issuer:       /CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
Certificate serial:       433F6FB28C44896294C539B7D8A6301048F43812
Authority key identifier: AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32332d3233203d3e20323638303237.roa
Signing time:             Tue 18 Apr 2023 12:32:28 +0000
ROA not before:           Tue 18 Apr 2023 12:27:28 +0000
ROA not after:            Tue 16 Apr 2024 12:32:28 +0000
asID:                     268027
IP address blocks:        45.168.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3f:6f:b2:8c:44:89:62:94:c5:39:b7:d8:a6:30:10:48:f4:38:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
        Validity
            Not Before: Apr 18 12:27:28 2023 GMT
            Not After : Apr 16 12:32:28 2024 GMT
        Subject: CN=F5471A9DE06048BF6ACD1CD6507F1658A485644E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:a3:9c:ff:e2:c0:94:3c:1b:90:0e:7b:e4:
                    5d:75:b0:bd:e0:e9:ae:50:b7:3a:93:10:59:4f:b8:
                    98:e9:9b:81:82:b6:6c:c8:09:19:57:d0:fd:79:d7:
                    3c:a6:71:ea:ee:f1:1c:23:48:1e:5e:16:cb:38:f0:
                    9f:0c:fe:8d:f6:9d:2b:aa:f0:e7:67:b8:c5:2e:02:
                    16:72:9f:83:9b:1f:e2:70:e3:28:cc:52:2f:14:8d:
                    6a:2c:5c:11:14:97:8a:1b:80:43:a9:49:e5:11:94:
                    b5:7e:60:f2:82:ff:41:5b:30:d5:a3:1a:27:09:72:
                    06:64:42:2f:f9:16:b5:8a:ef:42:91:49:6d:bc:2a:
                    af:8d:45:7c:8c:09:0f:b6:c6:74:db:ba:86:5c:39:
                    a0:ec:7d:54:a4:ab:7a:f7:52:61:ed:4d:00:16:7e:
                    71:f9:d9:7d:2c:06:81:71:42:3b:86:b4:52:e4:07:
                    5d:fd:fb:e0:68:63:8b:26:13:b7:fc:b9:a2:01:ac:
                    0b:5c:f8:9e:fa:8e:bf:82:a0:49:cf:66:42:b2:6c:
                    ba:46:d7:b1:c2:e3:ef:cc:bf:30:f8:f0:a3:3d:d1:
                    0a:9b:1e:38:dc:a6:1c:d2:89:04:15:0a:e5:1a:57:
                    a3:82:34:c6:c7:22:67:65:46:4c:b8:9d:90:fa:3b:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:47:1A:9D:E0:60:48:BF:6A:CD:1C:D6:50:7F:16:58:A4:85:64:4E
            X509v3 Authority Key Identifier:
                keyid:AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32332d3233203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:00:55:c1:da:20:59:11:17:51:f2:c9:ff:c9:78:e3:26:d5:
         c5:93:49:28:12:4c:84:07:09:57:b3:31:39:19:4e:55:e2:8e:
         03:9c:82:89:f2:d2:f0:29:1c:c0:cd:23:d7:ec:42:92:19:c5:
         5c:a5:68:36:a0:c3:fa:89:5e:48:87:44:c8:89:15:87:2f:64:
         38:82:3a:20:5d:b1:8d:55:2d:51:3c:11:cb:7b:d4:0f:36:a0:
         96:6b:e9:35:bd:56:93:ff:58:df:c4:6f:79:0f:cd:b8:03:a4:
         81:2b:30:8e:f2:75:e7:f8:a1:60:49:9e:ae:2d:98:fe:f1:7b:
         02:93:41:03:08:f0:b3:fc:12:08:3f:ce:97:6d:ed:4e:5a:b8:
         e7:7b:c2:3c:cd:e9:04:3b:c2:b5:04:a8:f5:be:32:58:92:0e:
         f9:46:62:e9:d7:6b:2e:87:8f:bd:2d:dd:50:69:2f:e7:51:45:
         f2:ee:81:a0:a6:44:5d:af:5e:10:17:73:4a:5f:79:7f:47:1b:
         63:0e:26:92:64:14:75:3c:d7:f0:31:ea:9f:d9:64:f7:5e:17:
         32:b5:9e:9f:8a:e4:84:b3:65:c7:c0:75:52:60:b4:58:65:98:
         e1:39:09:94:ef:21:8f:b2:b0:a9:8c:41:dc:0e:2b:c2:40:c9:
         15:4d:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org