Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139382e302f32332d3233203d3e20323639343335.roa
File:                     34352e3138362e3139382e302f32332d3233203d3e20323639343335.roa (raw, json)
Hash identifier:          wS4Gr9x7Ns31eh+EWSiLdcyGr0O0+KB/Bm2ZkhDabS0=
Subject key identifier:   76:75:8D:2E:49:97:3C:4D:0E:00:AC:2F:47:FD:57:69:63:AB:75:07
Certificate issuer:       /CN=FB3862529E205770549D2C9C549C9466E5CB21B5
Certificate serial:       49BE229040D3EF757124E1AAFFB80AC3C1EEFFB4
Authority key identifier: FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139382e302f32332d3233203d3e20323639343335.roa
Signing time:             Tue 21 Mar 2023 16:00:00 +0000
ROA not before:           Tue 21 Mar 2023 15:55:00 +0000
ROA not after:            Tue 19 Mar 2024 16:00:00 +0000
asID:                     269435
IP address blocks:        45.186.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:be:22:90:40:d3:ef:75:71:24:e1:aa:ff:b8:0a:c3:c1:ee:ff:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3862529E205770549D2C9C549C9466E5CB21B5
        Validity
            Not Before: Mar 21 15:55:00 2023 GMT
            Not After : Mar 19 16:00:00 2024 GMT
        Subject: CN=76758D2E49973C4D0E00AC2F47FD576963AB7507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:3a:2a:d4:3a:ca:7b:79:a4:57:34:ac:82:
                    d6:37:b8:99:5c:8a:66:c7:3d:a3:21:d9:33:10:1e:
                    27:b7:85:68:a5:85:df:35:f3:d6:58:92:0d:4f:19:
                    d4:ec:87:6e:7b:39:57:8e:d9:87:33:c8:cd:09:dd:
                    ae:90:33:81:54:4d:ac:5f:55:e0:b6:be:62:10:1d:
                    76:71:e4:e8:5f:7f:63:7e:32:79:85:f8:60:e4:5a:
                    a9:e5:8a:ff:fb:2f:12:b1:e7:0f:58:07:21:40:8b:
                    66:08:77:df:d2:f1:98:6f:61:de:98:1e:39:c9:f3:
                    74:40:53:ad:e5:54:1e:db:4d:c5:af:33:06:94:d7:
                    4a:59:63:ce:b3:b6:12:31:3d:06:aa:47:0f:af:24:
                    13:86:a4:56:db:94:2f:47:3e:1c:c6:e5:87:21:6a:
                    61:27:55:4b:2a:a3:70:d4:39:1a:48:47:d4:59:a3:
                    8f:dc:de:7f:2a:c9:c9:f8:54:04:50:30:47:82:68:
                    8c:3a:d1:86:7c:48:8e:99:56:72:89:0d:b6:14:63:
                    14:cc:d5:e8:88:ed:c6:c8:7c:1e:2b:40:46:8a:38:
                    fa:08:65:e4:d1:60:de:aa:6b:4d:7d:98:1f:34:19:
                    35:4f:1b:7c:11:33:7c:07:19:cd:05:dd:83:17:53:
                    48:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:75:8D:2E:49:97:3C:4D:0E:00:AC:2F:47:FD:57:69:63:AB:75:07
            X509v3 Authority Key Identifier:
                keyid:FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139382e302f32332d3233203d3e20323639343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:56:1a:d8:46:d8:36:8f:31:cd:de:08:74:fe:f3:26:90:1a:
         4b:ea:2d:58:67:85:f4:75:04:12:b6:58:ed:e4:65:d9:3d:0f:
         52:33:2f:9a:63:02:46:a5:90:8f:13:37:3d:4a:a5:f4:13:8e:
         4e:11:93:d8:cd:a7:9f:c4:fd:59:62:d4:63:c2:ec:38:b9:14:
         5f:ce:14:90:be:77:4d:ea:62:3a:99:52:13:80:b5:4e:28:a1:
         a7:da:86:d0:a6:01:0e:e7:1e:5f:e4:b9:fe:f8:64:f4:56:58:
         d4:6d:11:24:ac:d7:1e:5a:42:3b:9a:ea:c3:31:88:a6:de:16:
         79:ce:10:aa:a7:a5:f8:29:85:da:fb:49:e9:da:42:e2:b5:cf:
         d5:4b:88:3e:e9:4c:8d:e1:5d:42:eb:35:f3:2e:60:fb:06:49:
         2b:b4:02:d7:e1:e5:73:bf:af:a8:80:7c:95:c9:41:2c:3a:91:
         a0:21:2f:60:09:d7:86:30:e9:51:5e:12:08:38:0d:2e:83:a0:
         ca:fd:58:5d:c1:75:43:f2:5b:75:c0:33:4f:9f:82:43:bf:c0:
         0a:55:48:50:8f:14:ff:94:81:87:59:09:eb:68:54:4b:a3:50:
         32:6d:8d:ba:1c:c7:43:ee:a2:ec:3a:fd:0f:81:7e:31:81:e2:
         54:fe:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org