Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
File:                     34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (raw, json)
Hash identifier:          05kgHC59Dik7x8uYO5RAT3+viuNiikWTAmUp0raZpNU=
Subject key identifier:   4B:8A:62:5E:9E:0D:C6:FC:F9:81:93:13:E9:6F:23:A6:9C:68:98:BD
Certificate issuer:       /CN=BF652E17B3291B414822FC2655D630BB3554E09E
Certificate serial:       0E73452C106892AE9A4977EC0FD3548DB1DF779D
Authority key identifier: BF:65:2E:17:B3:29:1B:41:48:22:FC:26:55:D6:30:BB:35:54:E0:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF652E17B3291B414822FC2655D630BB3554E09E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
Signing time:             Mon 26 Jun 2023 20:49:40 +0000
ROA not before:           Mon 26 Jun 2023 20:44:40 +0000
ROA not after:            Mon 24 Jun 2024 20:49:40 +0000
asID:                     268289
IP address blocks:        45.237.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:73:45:2c:10:68:92:ae:9a:49:77:ec:0f:d3:54:8d:b1:df:77:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF652E17B3291B414822FC2655D630BB3554E09E
        Validity
            Not Before: Jun 26 20:44:40 2023 GMT
            Not After : Jun 24 20:49:40 2024 GMT
        Subject: CN=4B8A625E9E0DC6FCF9819313E96F23A69C6898BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:e3:93:f2:89:4a:47:2b:e0:86:bf:78:12:
                    ea:9a:ac:d9:02:76:52:19:61:10:97:f2:56:c5:db:
                    41:7d:1e:f8:81:9e:dd:bd:54:88:13:73:15:76:f9:
                    6e:4d:25:0c:04:48:53:50:79:05:8f:87:ec:e5:73:
                    d0:d1:2c:9c:82:d9:f0:6d:c3:20:8b:a3:d9:d9:e7:
                    56:d2:dd:1d:11:52:21:b0:ff:0e:b8:55:1d:be:f3:
                    ca:f7:76:0c:88:21:66:e3:cb:5d:ab:48:50:6f:2c:
                    62:21:42:9a:87:67:ff:f5:11:2d:84:9c:03:9c:da:
                    35:17:32:90:a9:78:c3:da:50:65:f2:11:bf:d0:f4:
                    ff:4d:c1:43:74:05:4e:ce:7e:01:0b:15:e2:0c:39:
                    c1:fc:04:d4:c6:f3:9b:d4:66:2d:e9:f4:77:da:b8:
                    a0:50:05:9b:6e:ba:d4:66:f9:be:b0:93:4c:2c:5b:
                    a6:b5:7d:38:97:36:09:fa:d1:e2:2d:da:5d:9b:99:
                    00:fb:31:06:ab:5a:08:87:60:72:ba:25:e1:32:d6:
                    00:23:84:e1:00:75:2f:64:68:3a:1c:e2:be:3d:56:
                    33:aa:f4:3f:be:73:48:d5:3c:3a:38:3a:3f:39:c7:
                    10:4b:77:59:88:ca:35:1d:24:c6:5d:c5:9f:0d:95:
                    68:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8A:62:5E:9E:0D:C6:FC:F9:81:93:13:E9:6F:23:A6:9C:68:98:BD
            X509v3 Authority Key Identifier:
                keyid:BF:65:2E:17:B3:29:1B:41:48:22:FC:26:55:D6:30:BB:35:54:E0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/BF652E17B3291B414822FC2655D630BB3554E09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF652E17B3291B414822FC2655D630BB3554E09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:b6:41:3c:10:d6:40:9a:9b:f9:40:f0:92:39:c8:e8:87:b2:
         21:e9:d9:ec:aa:49:18:f9:2d:7e:99:65:05:2b:fb:0f:90:d0:
         d0:0a:5b:40:31:38:63:a3:ad:33:2d:2b:1d:98:73:aa:c3:ab:
         3a:ed:70:ad:77:be:02:88:2c:f0:53:48:5a:97:a1:16:eb:a2:
         55:bf:ce:eb:6e:2f:98:4e:73:93:be:86:03:d7:b5:3d:b2:5a:
         7a:3f:d4:6e:46:55:c6:0a:d6:54:fa:0c:84:21:9b:38:79:e9:
         11:fc:5d:54:ff:82:c5:39:e1:b6:38:a5:f4:a1:e2:c9:82:4d:
         4e:26:62:72:7b:10:1a:f4:18:27:04:96:c1:82:26:38:26:91:
         79:f4:54:09:d4:9e:6c:70:05:76:76:42:31:d5:6d:6a:b5:ff:
         15:ec:ba:04:c6:14:da:1a:3c:df:de:0b:16:0f:27:04:4f:d7:
         bf:06:02:e3:9f:70:68:f5:a1:bb:0a:25:7a:78:7c:2b:54:6c:
         57:ac:75:99:56:ab:68:82:a8:e0:ad:62:46:a5:ea:92:24:63:
         18:c8:07:2e:d5:b8:a7:68:88:b9:f8:9b:5c:10:8c:0a:4b:e4:
         f7:c3:4a:4e:c8:92:da:3d:2f:b7:56:2a:e6:82:4c:36:67:0a:
         a3:17:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org